This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
File:                     LtaWwj0zRedLDXNOJLcQqniq5fo.mft (raw, json)
Hash identifier:          A1jHXgPXQ2fZQnYmQZbnE9f7KTMRcbMUKK0SAGtFJfw=
Subject key identifier:   BA:4A:AC:B4:97:BF:17:1C:C2:03:59:B6:A8:B1:45:64:17:FD:57:E8
Authority key identifier: 2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
Certificate issuer:       /CN=A913714B/serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
Manifest number:          2B
Signing time:             Fri 23 Jan 2026 06:39:25 +0000
Manifest this update:     Fri 23 Jan 2026 06:39:24 +0000
Manifest next update:     Fri 30 Jan 2026 06:39:24 +0000
Files and hashes:         1: LtaWwj0zRedLDXNOJLcQqniq5fo.crl (hash: acGzV5+UQIumJoS0JJz66D/2+WFwaKWL0Wwdv7a1a9M=)
                          2: 5D7ACB26B90811F0ADC46B62C4F9AE02.roa (hash: 7vtN8AsvURmlMFj193nZHd0LnrqmSd3t3WOD+mI+WHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
                          rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913714B, serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
        Validity
            Not Before: Jan 23 06:39:24 2026 GMT
            Not After : Jan 30 06:39:24 2026 GMT
        Subject: CN=6973179d-9c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:df:1e:6a:36:c3:13:71:d6:52:5f:cd:a9:
                    24:77:4e:3f:43:e5:86:c1:aa:94:fb:db:63:62:fa:
                    44:b1:64:4c:db:8d:b6:03:c3:03:4f:d4:48:f2:b0:
                    94:e9:a1:a5:53:06:f9:30:b1:01:cb:13:0b:3f:b1:
                    7c:4a:9e:39:c0:5a:15:ff:bb:37:06:02:12:e5:4b:
                    cd:ce:a6:1b:9d:59:f3:73:a3:71:9c:94:11:35:eb:
                    73:a2:8b:c7:6f:33:3e:ab:37:db:cd:3e:8d:b5:5c:
                    84:69:e2:41:c8:cd:96:2a:9b:1f:c9:84:57:00:30:
                    a4:f0:68:36:d3:92:15:a2:35:4e:b8:02:e2:3e:c4:
                    70:76:a8:1d:4e:b7:f6:ff:c6:86:a9:ab:14:af:33:
                    80:6a:ad:ae:56:e0:b9:9c:41:11:f0:84:be:c1:b3:
                    62:ce:f3:22:93:5b:a9:5f:cf:bc:ed:ae:d0:8c:80:
                    73:e1:31:8a:33:17:02:81:af:27:c6:98:c7:ac:d5:
                    fe:e6:e1:27:fb:a5:d4:fe:3e:d8:d6:f9:97:30:02:
                    2a:72:0e:c0:75:ee:93:9b:39:66:09:b4:76:69:5d:
                    d6:68:24:29:51:0b:dd:00:de:b5:bd:68:f1:06:bb:
                    7d:8c:76:9a:1f:c9:db:e9:3e:8d:dd:fe:54:f7:40:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4A:AC:B4:97:BF:17:1C:C2:03:59:B6:A8:B1:45:64:17:FD:57:E8
            X509v3 Authority Key Identifier:
                keyid:2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8f:02:6a:85:3a:ee:6e:a6:d0:6a:53:16:11:89:ac:50:c5:
         9b:09:91:d5:d6:c4:96:2c:e9:94:c3:2d:11:7d:a1:04:ee:23:
         2f:58:ac:23:a7:1a:54:48:17:a6:92:ad:29:83:e5:d8:77:d6:
         eb:4e:ad:58:2f:a3:a3:ae:33:82:5b:bc:69:d9:9f:c5:56:f4:
         b1:93:51:b1:7a:c0:b3:7f:22:2c:0a:13:8c:5b:b1:d7:ed:99:
         24:2c:61:44:6a:93:fb:74:88:07:9b:ac:82:6e:4d:c4:10:ed:
         1e:73:b5:e3:f7:f2:1b:bc:d6:7d:47:c0:da:5a:4a:b0:d2:0a:
         c3:97:dd:10:3e:ea:86:7f:f3:f9:85:a0:d1:03:ad:e5:60:43:
         41:48:7a:2d:20:2a:6d:a5:d4:3e:2a:59:b0:74:0d:91:d9:f2:
         4a:4b:6a:e2:18:36:01:7b:8e:a2:cf:83:ae:d9:fe:c4:e6:da:
         e1:17:14:92:3a:4b:24:95:8b:af:0c:16:2b:5c:df:ac:1a:8f:
         58:70:56:26:a3:db:a7:65:d9:5d:2e:33:5c:91:e9:13:f8:ad:
         7e:fa:8b:af:62:66:fa:9d:03:10:2b:99:33:1b:6c:bc:3c:ef:
         07:d7:a5:e2:7a:f9:20:81:f7:0a:2d:63:af:30:06:d7:00:a5:
         82:7b:bf:be
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NzE0QjExMC8GA1UEBRMoMkVENjk2QzIzRDMzNDVFNzRCMEQ3MzRFMjRCNzEwQUE3
OEFBRTVGQTAeFw0yNjAxMjMwNjM5MjRaFw0yNjAxMzAwNjM5MjRaMBgxFjAUBgNV
BAMMDTY5NzMxNzlkLTljMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDG6N8eajbDE3HWUl/NqSR3Tj9D5YbBqpT722Ni+kSxZEzbjbYDwwNP1EjysJTp
oaVTBvkwsQHLEws/sXxKnjnAWhX/uzcGAhLlS83OphudWfNzo3GclBE163Oii8dv
Mz6rN9vNPo21XIRp4kHIzZYqmx/JhFcAMKTwaDbTkhWiNU64AuI+xHB2qB1Ot/b/
xoapqxSvM4Bqra5W4LmcQRHwhL7Bs2LO8yKTW6lfz7ztrtCMgHPhMYozFwKBryfG
mMes1f7m4Sf7pdT+PtjW+ZcwAipyDsB17pObOWYJtHZpXdZoJClRC90A3rW9aPEG
u32MdpofydvpPo3d/lT3QA3zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUukqstJe/
FxzCA1m2qLFFZBf9V+gwHwYDVR0jBBgwFoAULtaWwj0zRedLDXNOJLcQqniq5fow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTRCLzFBQkM3NUYwQjkw
ODExRjA4NzkwRjU2MUM0RjlBRTAyL0x0YVd3ajB6UmVkTERYTk9KTGNRcW5pcTVm
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTHRhV3dqMHpSZWRMRFhOT0pMY1FxbmlxNWZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3
MTRCLzFBQkM3NUYwQjkwODExRjA4NzkwRjU2MUM0RjlBRTAyL0x0YVd3ajB6UmVk
TERYTk9KTGNRcW5pcTVmby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADSPAmqFOu5uptBqUxYRiaxQxZsJkdXWxJYs6ZTDLRF9oQTuIy9YrCOn
GlRIF6aSrSmD5dh31utOrVgvo6OuM4JbvGnZn8VW9LGTUbF6wLN/IiwKE4xbsdft
mSQsYURqk/t0iAebrIJuTcQQ7R5zteP38hu81n1HwNpaSrDSCsOX3RA+6oZ/8/mF
oNEDreVgQ0FIei0gKm2l1D4qWbB0DZHZ8kpLauIYNgF7jqLPg67Z/sTm2uEXFJI6
SySVi68MFitc36waj1hwViaj26dl2V0uM1yR6RP4rX76i69iZvqdAxArmTMbbLw8
7wfXpeJ6+SCB9wotY68wBtcApYJ7v74=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:12 2026 by rpki-client