This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
File:                     dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json)
Hash identifier:          nl3gwOtkWZL8hPUecFGgD8egBXajkdEwNE2/0L82rcI=
Subject key identifier:   C8:34:D2:9D:70:20:99:A7:B8:03:CD:77:56:BC:89:86:64:28:E2:33
Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
Certificate issuer:       /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
Manifest number:          4D
Signing time:             Fri 23 Jan 2026 06:17:50 +0000
Manifest this update:     Fri 23 Jan 2026 06:17:50 +0000
Manifest next update:     Fri 30 Jan 2026 06:17:50 +0000
Files and hashes:         1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: dzfJ7bxf2cZbUTxE59r/eOZJOkgxvilcHM1Imz5HAYY=)
                          2: 5F9C3E0681AB11F09884FA0BC4F9AE02.roa (hash: F4Qio5WYvuiwdHGB0kchv0Q5AZIoWb0UXCVdpuPI1Cs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
                          rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
        Validity
            Not Before: Jan 23 06:17:50 2026 GMT
            Not After : Jan 30 06:17:50 2026 GMT
        Subject: CN=6973128e-75fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:0d:d2:86:05:64:f4:0f:53:87:4b:b4:e8:
                    c4:3b:b1:04:af:3b:88:c0:dd:2b:f2:be:d9:2b:fa:
                    f4:8b:de:8a:fa:ad:b3:8e:5d:28:ee:93:ea:53:36:
                    82:a3:27:71:5a:48:e4:40:ea:1e:b4:e7:20:e4:ad:
                    29:e2:58:f9:fc:2f:54:a0:3b:a8:5f:69:69:d0:68:
                    0c:bc:21:22:29:6c:bf:b8:a4:2e:1a:b2:c0:fd:84:
                    e9:ff:05:7b:2c:d7:54:58:11:05:a6:67:ef:8b:45:
                    e8:da:40:72:c3:c9:df:29:96:10:ae:40:64:a9:f5:
                    ef:3d:08:03:b7:98:b7:0e:37:00:fa:a1:d2:d2:c4:
                    30:9a:40:f4:f3:bb:01:9b:f1:33:d2:75:d6:1e:97:
                    e6:d1:69:01:ed:3c:70:ba:73:21:cf:2a:cf:5f:58:
                    75:b1:1d:a6:64:20:cd:20:e6:4f:4c:32:23:0c:3b:
                    fe:80:d2:ca:ba:79:2f:c7:13:55:ed:dd:3a:54:7d:
                    d5:f4:5d:f6:66:29:c2:93:78:0b:53:44:d2:0a:66:
                    f8:cd:90:f7:2d:73:73:8d:67:c1:e2:bb:58:e5:42:
                    db:ab:39:7e:c0:87:c2:64:2c:83:46:3e:96:c5:2c:
                    e8:53:6a:5b:97:4a:26:e3:33:94:83:83:15:58:a8:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:34:D2:9D:70:20:99:A7:B8:03:CD:77:56:BC:89:86:64:28:E2:33
            X509v3 Authority Key Identifier:
                keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:55:4a:8c:e1:60:76:2c:af:26:55:fe:0d:58:a7:1c:af:44:
         dc:e1:c5:4c:7e:ec:78:34:69:e5:4f:b0:38:ed:3f:5e:ff:9f:
         12:a3:89:65:f8:ea:35:6a:fb:02:dc:dc:d1:2c:22:82:5c:98:
         fc:8b:2e:3b:28:29:d3:39:6c:dd:d2:20:52:37:df:6c:88:f6:
         ea:da:f1:84:0d:6c:2c:d2:7c:2f:5b:b9:fd:3e:c2:b8:f9:65:
         e3:c3:9e:80:0a:a8:f8:a9:d8:77:19:c1:16:93:53:eb:2b:e5:
         4c:b8:b2:3f:fc:fb:d6:db:9a:41:05:01:1b:9b:5f:10:07:b4:
         33:ba:9c:8c:06:b5:c5:67:68:0d:c6:3e:14:46:0c:f8:a0:73:
         b4:b2:02:b7:d1:5f:b2:f4:62:db:9c:4e:ee:f8:89:9f:a5:92:
         06:18:e8:7e:45:c2:85:71:19:b7:61:c7:e5:74:ea:db:91:3c:
         0e:9c:00:a7:09:dd:2b:2c:ee:d7:1b:9a:eb:b4:7a:9d:99:87:
         0e:2d:13:d5:f9:51:f4:8a:00:56:09:ce:8d:cc:41:7f:35:cb:
         f9:43:13:1f:cf:82:b2:c5:2e:59:ae:65:90:c0:be:a3:0e:78:
         3e:d2:8d:69:7e:30:7f:a2:a7:39:6f:f1:e5:e8:d1:e8:ba:c0:
         9d:3f:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:03 2026 by rpki-client