This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
File:                     LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json)
Hash identifier:          PWtXKiqS8FzNF5UfDkPmSjAUo9mFy3sAT66w6JgXzrc=
Subject key identifier:   D8:E7:04:49:B1:7A:04:5F:6E:50:C4:8C:C3:44:A9:5C:5A:C8:09:37
Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
Certificate issuer:       /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
Manifest number:          021D
Signing time:             Sun 25 Jan 2026 01:28:05 +0000
Manifest this update:     Sun 25 Jan 2026 01:28:04 +0000
Manifest next update:     Sun 01 Feb 2026 01:28:04 +0000
Files and hashes:         1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: Nfv/vZEQKivEa4k+Kyse+yc+e+jG7AhgMu9QZDxBuGc=)
                          2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: JysCwCJJxEUrqo1TsnL+HZ8PxWYOSwYy6QcS3aO9jis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
                          rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
        Validity
            Not Before: Jan 25 01:28:04 2026 GMT
            Not After : Feb  1 01:28:04 2026 GMT
        Subject: CN=697571a5-a367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:04:6b:43:48:ba:47:e5:51:28:b8:a3:85:
                    70:88:f0:37:22:5b:c5:5f:02:b2:6a:39:f1:71:90:
                    39:a1:50:37:6b:00:e3:cc:b6:9c:ad:c7:23:de:07:
                    1c:14:69:cf:3c:0b:6a:85:61:fc:3c:c3:01:a5:de:
                    bc:21:46:11:31:28:0b:81:6c:08:b4:1d:18:d0:53:
                    6c:85:44:88:02:33:9f:82:67:33:8f:94:87:b2:34:
                    dc:a2:de:38:1e:0e:a4:5d:95:ac:28:e8:67:9f:7f:
                    d1:be:1d:5f:28:95:0e:49:dc:0d:46:e6:a7:a0:f7:
                    ce:f6:3d:c4:80:1e:5c:4f:db:ec:6b:89:3a:c3:7c:
                    79:26:81:b7:af:72:b7:3c:d9:da:90:9e:5b:af:1b:
                    e8:f9:5a:12:8b:ef:3d:ab:72:c3:bc:15:3c:10:f4:
                    8f:14:8a:9e:c1:f8:a7:42:91:b4:99:c2:51:97:74:
                    1e:33:14:84:65:d1:d3:4c:1c:98:d2:6a:4f:2f:1d:
                    cc:04:a2:ff:26:09:15:e5:36:39:4a:5d:db:d7:03:
                    4e:97:ac:0a:36:aa:76:36:eb:9b:dd:4d:9a:fd:e0:
                    bf:79:fb:f9:9c:6d:3c:48:ae:68:70:17:16:85:86:
                    83:00:98:ed:82:d8:75:dc:f5:bc:e5:69:ee:16:2e:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E7:04:49:B1:7A:04:5F:6E:50:C4:8C:C3:44:A9:5C:5A:C8:09:37
            X509v3 Authority Key Identifier:
                keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1f:64:23:c9:6c:16:01:8c:06:fa:f3:89:4f:91:65:f9:76:
         d2:98:6b:8b:b1:a5:6a:da:a6:f3:5b:c5:62:1c:21:92:e2:f7:
         42:5e:8e:63:27:89:ab:2d:a7:e9:33:4a:2c:7a:27:ad:63:47:
         e3:41:b9:89:54:38:dd:89:bd:12:5c:b4:34:94:6a:95:68:e1:
         34:35:77:68:66:1e:06:c1:50:06:12:9e:ee:27:e7:1b:68:c8:
         c4:82:dc:72:8a:93:ca:7b:4f:ce:04:a5:af:ca:12:6d:74:b8:
         70:f8:08:7b:82:00:a3:9e:ad:1a:e6:00:70:5d:5b:4c:40:35:
         6e:4e:5e:bc:ba:95:f4:c2:4a:f2:08:e1:41:67:09:4a:8d:12:
         f1:c2:4e:79:7c:65:56:c0:60:f0:ae:87:ae:54:9d:10:d1:e5:
         6d:96:d4:76:fb:00:3c:5c:57:42:8b:13:70:c9:ee:4d:a7:f9:
         30:13:6d:d7:5e:1b:53:4d:d8:36:d7:18:d8:d8:d2:c3:88:e3:
         cc:a0:10:74:7b:96:82:ff:ca:b4:de:89:32:63:aa:98:90:18:
         37:53:2a:58:4b:81:4c:30:2a:3f:07:42:ec:66:f7:a4:3a:29:
         7f:e4:f2:8d:ae:2e:dc:d9:ef:74:bf:46:26:af:33:d3:0d:f1:
         c9:7c:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:35 2026 by rpki-client