This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
File:                     LNlBunzrUf5uFl4_yYBm1amZ5P4.mft (raw, json)
Hash identifier:          EYTi0FetO/DsoyK5qMZiPJeUq6d84XQBXUbp2qR1fbI=
Subject key identifier:   46:54:0B:FF:5C:B4:F1:F7:71:17:77:A4:77:E6:3F:29:BC:45:7F:0A
Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE
Certificate issuer:       /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
Certificate serial:       06B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
Manifest number:          06B3
Signing time:             Sat 24 Jan 2026 21:35:51 +0000
Manifest this update:     Sat 24 Jan 2026 21:35:50 +0000
Manifest next update:     Sat 31 Jan 2026 21:35:50 +0000
Files and hashes:         1: LNlBunzrUf5uFl4_yYBm1amZ5P4.crl (hash: y5sBb9Q5wR/WqrdJHPygNxO7K2DdVcx6CJCkcVFNiDs=)
                          2: D44C47FE91D311EBBE8C7D54C4F9AE02.roa (hash: av33nLUX0GDrb2SC++ABulsmTvMJTYGoXhRNYXEv87I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl
                          rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721 (0x6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B635, serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
        Validity
            Not Before: Jan 24 21:35:50 2026 GMT
            Not After : Jan 31 21:35:50 2026 GMT
        Subject: CN=69753b37-a2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:e1:3c:3a:05:ea:a2:cd:ce:48:3e:c8:cf:
                    45:87:6a:7f:13:63:a7:32:ec:2b:f0:6e:59:35:3a:
                    62:64:75:5d:1f:db:aa:3b:ff:6b:72:38:ed:6b:be:
                    76:d8:72:53:90:fd:e4:da:9b:b5:89:21:52:cd:3f:
                    9a:2b:96:ed:74:bb:a3:91:49:0d:21:47:23:92:5d:
                    9a:00:05:ed:46:12:cc:ad:7f:d7:7b:2b:8e:f9:47:
                    9a:eb:68:ac:f5:62:8a:59:15:ce:89:68:b1:41:20:
                    12:7a:7d:52:47:c5:a5:ee:b1:7d:b2:03:b3:b8:3b:
                    aa:77:a2:ac:da:22:70:df:8f:ac:4d:cd:a5:79:5a:
                    a7:5d:a5:95:89:e2:8b:4a:35:29:4d:76:73:de:f0:
                    35:f9:ae:87:f2:93:5e:83:b9:57:40:3d:e3:3d:61:
                    7d:4f:52:60:cd:65:a7:af:6b:97:d6:68:f3:75:a0:
                    a9:b9:ad:50:65:65:70:9a:34:9b:ca:f4:d2:45:73:
                    a0:e1:39:2f:6b:1d:dd:84:16:d8:7d:1d:43:bf:87:
                    19:af:4c:b4:a9:fd:8d:ed:73:22:00:4c:78:9c:bf:
                    b1:b1:e1:d8:7b:c7:5f:38:db:28:72:4b:5d:86:fb:
                    f8:7e:b3:88:97:e6:4b:64:09:f6:56:6b:7b:9d:e9:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:54:0B:FF:5C:B4:F1:F7:71:17:77:A4:77:E6:3F:29:BC:45:7F:0A
            X509v3 Authority Key Identifier:
                keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:ea:f8:2f:1a:28:37:d2:60:e0:31:9e:29:b3:e1:7a:c2:
         8a:53:40:49:17:ee:ae:c1:0c:ec:dc:92:64:51:07:85:12:90:
         a0:9e:b2:3c:80:50:55:49:c0:b0:97:c6:5c:71:b8:10:d0:2e:
         ce:bc:9e:cf:f5:bb:ae:2f:31:c2:43:ba:2c:bc:39:4a:c2:91:
         55:ce:6a:c8:b2:c2:e5:b3:e5:1b:5e:1d:15:89:af:42:cf:8b:
         02:4f:bc:5b:7d:ca:c0:2a:6a:5b:5c:7e:8b:0b:df:fc:42:2f:
         70:56:49:7b:c1:c2:1e:64:66:b4:33:6e:a9:ea:e2:d2:3c:ac:
         58:39:97:cd:e5:87:93:91:14:1d:17:5e:80:f6:eb:d0:27:27:
         33:26:10:c9:59:83:f1:13:16:04:7a:82:19:4a:14:9a:29:58:
         2b:aa:7c:4e:13:ee:03:76:cd:21:ab:6d:ce:fa:11:4a:ce:e6:
         26:ba:f5:ad:5b:62:6d:fb:c9:72:76:3f:f8:08:6f:cf:14:20:
         e1:9c:3b:05:1a:1d:1e:0b:d2:62:95:37:e7:be:9c:4e:b3:9d:
         28:e8:49:3a:ad:0b:b1:84:0e:7d:9d:54:67:71:8f:1c:77:f2:
         fe:23:72:99:78:d1:71:80:cb:7d:41:1e:34:a6:6b:49:f8:a1:
         c8:08:a5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:37:40 2026 by rpki-client