This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
File:                     L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json)
Hash identifier:          DSgr9phCv1DqH+b4IS4F2jylTJ7sdgZ6P1A8xK03vS4=
Subject key identifier:   6B:64:87:59:59:08:05:92:A3:EA:26:ED:8A:66:DB:95:CD:2B:32:9C
Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
Certificate issuer:       /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Certificate serial:       02A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
Manifest number:          02A4
Signing time:             Sun 25 Jan 2026 00:39:39 +0000
Manifest this update:     Sun 25 Jan 2026 00:39:38 +0000
Manifest next update:     Sun 01 Feb 2026 00:39:38 +0000
Files and hashes:         1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: 9h+VylvNCr3SEMg0e4iFiG22tAUKH7I3K2jTBYgK7+E=)
                          2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: YiqHt1NmkyZeQGkCylb3t5kmyZBllHOZPJhWp7tXWTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
                          rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
        Validity
            Not Before: Jan 25 00:39:38 2026 GMT
            Not After : Feb  1 00:39:38 2026 GMT
        Subject: CN=6975664a-eced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:97:6a:67:d2:f3:d4:c8:51:2d:49:5a:f2:
                    95:65:1f:bf:57:ce:97:41:a4:b3:1d:b4:30:13:3a:
                    60:1f:6d:b8:0d:9b:ee:91:36:98:6d:9b:2b:9b:9e:
                    86:6b:6d:b4:4f:50:ae:97:ee:0c:cc:25:e9:55:4e:
                    7c:ff:66:66:75:22:79:40:45:0e:5a:af:40:f8:ca:
                    47:e4:be:5f:18:f4:f0:f5:40:aa:40:1f:16:fb:4a:
                    1a:d5:9e:00:af:0f:2c:35:dd:40:80:c5:95:e9:95:
                    ad:c8:31:e0:63:dc:a2:7f:bd:1b:47:86:d6:ef:d7:
                    ff:1a:44:b5:9c:ca:a3:7c:79:37:ad:a2:44:8f:51:
                    cc:70:22:d7:6d:01:4d:d2:da:45:0c:61:f7:aa:37:
                    01:79:c0:b3:3e:e5:33:4f:9c:2f:c7:e8:6f:3e:2e:
                    69:d9:8c:0f:2f:1f:ae:fd:58:68:a1:32:6d:3a:8c:
                    33:66:09:d4:e3:dd:8d:e3:ec:fd:55:ad:8c:69:79:
                    31:c6:56:f5:32:a5:aa:b2:0c:8f:3f:86:8b:a7:a1:
                    83:6e:99:23:e0:e8:94:25:0b:39:cf:d8:46:2c:fa:
                    b9:65:68:5e:e7:83:49:42:44:d6:32:00:68:38:31:
                    c9:ad:da:13:56:b0:3c:d7:b9:f6:a2:23:a8:01:ff:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:64:87:59:59:08:05:92:A3:EA:26:ED:8A:66:DB:95:CD:2B:32:9C
            X509v3 Authority Key Identifier:
                keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8b:54:a0:6a:4c:88:2e:85:2f:d7:17:2b:83:11:25:bc:30:
         f0:33:2b:c6:ca:60:45:91:6d:2c:86:fd:3b:e1:c8:72:2b:ee:
         e0:56:fc:e9:6e:ab:77:e3:13:0a:f8:a0:77:b0:06:ab:15:6a:
         fc:3f:11:13:94:01:5d:2c:14:5a:dd:53:5a:21:ca:91:54:4a:
         b5:c8:8b:2b:19:4a:0d:fe:5d:6c:10:bc:7c:6e:14:1a:85:a9:
         8b:e0:c5:f6:30:e5:33:7c:33:1f:bb:95:fa:c1:86:75:53:b2:
         54:b6:03:2e:40:89:d5:eb:9e:23:bf:67:81:89:c7:02:a7:18:
         8c:ba:13:dd:c0:37:1b:7d:a9:10:cd:8e:1a:0e:37:37:7e:b1:
         4a:bc:fd:7a:7b:21:56:6d:f8:47:59:d6:3a:2d:37:90:d1:9b:
         a3:0e:3b:98:f0:ad:ca:37:99:b9:c4:dd:0d:e6:67:c7:97:56:
         44:20:3d:b7:9e:4f:8e:74:d3:7f:bc:d4:9e:6d:82:89:97:2b:
         6e:7d:f3:f1:9b:d5:ba:5b:bb:43:3e:cd:2f:ba:49:28:09:e4:
         53:de:da:ea:d4:23:0e:f8:4a:d2:99:ef:bc:cc:2f:15:2f:51:
         85:1e:7c:22:d4:93:26:fc:c2:b7:e6:04:e6:3a:3a:a7:94:4b:
         32:98:60:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU3NTgxMTAvBgNVBAUTKDJGOEJFRjQ4M0E0MThBRTFDMDMxMjMwODE4NkVGNENE
N0IyNDY2RTUwHhcNMjYwMTI1MDAzOTM4WhcNMjYwMjAxMDAzOTM4WjAYMRYwFAYD
VQQDDA02OTc1NjY0YS1lY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwm+XamfS89TIUS1JWvKVZR+/V86XQaSzHbQwEzpgH224DZvukTaYbZsrm56G
a220T1Cul+4MzCXpVU58/2ZmdSJ5QEUOWq9A+MpH5L5fGPTw9UCqQB8W+0oa1Z4A
rw8sNd1AgMWV6ZWtyDHgY9yif70bR4bW79f/GkS1nMqjfHk3raJEj1HMcCLXbQFN
0tpFDGH3qjcBecCzPuUzT5wvx+hvPi5p2YwPLx+u/VhooTJtOowzZgnU492N4+z9
Va2MaXkxxlb1MqWqsgyPP4aLp6GDbpkj4OiUJQs5z9hGLPq5ZWhe54NJQkTWMgBo
ODHJrdoTVrA817n2oiOoAf8/LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtkh1lZ
CAWSo+om7Ypm25XNKzKcMB8GA1UdIwQYMBaAFC+L70g6QYrhwDEjCBhu9M17JGbl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTc1OC83MUVCRTdDMjJD
RDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1SEFNU01JR0c3MHpYc2ta
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w0dnZTRHBCaXVIQU1TTUlHRzcwelhza1p1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTc1OC83MUVCRTdDMjJDRDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1
SEFNU01JR0c3MHpYc2tadVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWi1SgakyILoUv1xcrgxElvDDwMyvGymBFkW0shv074chyK+7gVvzp
bqt34xMK+KB3sAarFWr8PxETlAFdLBRa3VNaIcqRVEq1yIsrGUoN/l1sELx8bhQa
hamL4MX2MOUzfDMfu5X6wYZ1U7JUtgMuQInV654jv2eBiccCpxiMuhPdwDcbfakQ
zY4aDjc3frFKvP16eyFWbfhHWdY6LTeQ0ZujDjuY8K3KN5m5xN0N5mfHl1ZEID23
nk+OdNN/vNSebYKJlytuffPxm9W6W7tDPs0vukkoCeRT3trq1CMO+ErSme+8zC8V
L1GFHnwi1JMm/MK35gTmOjqnlEsymGBW
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:04 2026 by rpki-client