This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
File:                     L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json)
Hash identifier:          yDo5A3ss4XPW2yu8mCJc4rZ2K0caIyfUrKcwwr6dZpY=
Subject key identifier:   73:E2:FA:39:D5:0F:D2:7E:8C:9C:96:37:DE:0C:AF:5D:80:ED:D1:92
Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D
Certificate issuer:       /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
Certificate serial:       059B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
Manifest number:          0592
Signing time:             Sat 24 Jan 2026 22:29:47 +0000
Manifest this update:     Sat 24 Jan 2026 22:29:47 +0000
Manifest next update:     Sat 31 Jan 2026 22:29:47 +0000
Files and hashes:         1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: uOwso/reB90zAPSVhEX3DEwNuJEOuqMXvcYXbw06UtM=)
                          2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: nbAwbUJb6JF/EVgcBuo6b8RRtXcpwDWvIQu43r6H87s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl
                          rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1435 (0x59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144266, serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
        Validity
            Not Before: Jan 24 22:29:47 2026 GMT
            Not After : Jan 31 22:29:47 2026 GMT
        Subject: CN=697547db-b9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:a8:f9:28:51:84:45:c9:3e:46:d5:a9:3a:
                    ab:92:d3:7a:46:15:c7:71:2a:fa:f8:58:23:97:5d:
                    15:db:2a:92:6b:9e:7a:fe:6c:bf:85:f6:27:6d:72:
                    c6:39:fd:da:83:f4:c0:2c:5e:bd:7f:f2:da:48:43:
                    e1:01:3e:a0:40:a2:e8:31:7c:f1:8d:28:39:27:de:
                    f6:71:ef:7c:e4:07:00:1c:c7:b9:0f:cc:c4:0b:7c:
                    4a:fb:3d:bc:b2:71:4d:88:3f:d5:4f:26:56:0c:8b:
                    bf:57:33:c3:7a:ab:4d:aa:c3:42:e0:57:3d:2d:a6:
                    bc:8a:2b:b6:42:49:a6:56:7b:24:09:99:fb:d6:2d:
                    b1:93:43:c1:7e:12:60:df:29:69:c9:a2:a1:b2:17:
                    d0:59:0f:53:e5:05:58:6a:c3:cf:8a:1f:04:2f:ae:
                    b9:10:b0:73:76:cc:0a:b7:eb:96:2c:54:98:73:b4:
                    57:61:96:c8:cc:42:e7:fc:c6:5a:57:85:d2:cc:3b:
                    50:7d:2f:0c:e2:a7:2a:89:89:79:87:ea:41:87:94:
                    e2:e5:a1:1f:f6:4e:79:0b:27:3d:56:3f:74:b7:2f:
                    af:ef:03:d6:67:74:8d:c4:b5:93:26:28:cc:3e:dd:
                    b5:3e:97:53:8a:19:62:b4:3a:e2:d1:cf:d5:f4:78:
                    59:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E2:FA:39:D5:0F:D2:7E:8C:9C:96:37:DE:0C:AF:5D:80:ED:D1:92
            X509v3 Authority Key Identifier:
                keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:35:dd:9e:23:42:be:91:8f:16:9c:ab:fb:4f:9c:cb:90:9a:
         df:e8:11:57:e3:9b:65:ce:7f:b6:37:9b:e5:5d:a8:ed:a1:b0:
         61:6a:36:b0:87:08:fb:b2:68:3e:44:79:4c:aa:10:5b:d2:5a:
         8e:79:29:d4:2e:b1:75:6f:3e:59:95:7e:7f:36:84:e5:43:c0:
         f4:77:47:c2:bf:bf:b0:32:56:08:14:13:80:37:c6:0f:8b:df:
         91:a8:18:16:28:93:1f:79:4f:77:e6:a0:4c:27:1b:ab:76:ac:
         b8:1e:b4:14:36:92:ac:81:de:7b:72:b8:f2:67:d7:ef:0c:38:
         87:7c:ec:ae:4d:5f:7d:ea:44:b8:7c:63:7a:f3:46:e6:e3:cf:
         39:d3:73:81:21:ce:36:48:78:48:aa:66:19:d7:9c:e8:8c:43:
         13:48:d8:ed:44:41:8b:0b:3c:05:b8:4a:4f:c4:a6:39:57:96:
         c8:c0:e5:11:32:ad:4b:dc:30:89:8b:6f:e7:a7:14:15:ae:27:
         f4:7a:25:62:d0:c9:cf:93:d0:47:7a:bd:24:61:50:57:80:1d:
         4a:5c:fa:8f:f7:b7:96:3e:de:66:3f:50:aa:03:3e:ca:57:04:
         b4:a2:5b:41:00:ed:0b:84:1e:db:79:8e:3d:65:a2:9f:69:24:
         3c:6a:61:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5
MjBBQjFCMUQwHhcNMjYwMTI0MjIyOTQ3WhcNMjYwMTMxMjIyOTQ3WjAYMRYwFAYD
VQQDDA02OTc1NDdkYi1iOWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq0Ko+ShRhEXJPkbVqTqrktN6RhXHcSr6+Fgjl10V2yqSa556/my/hfYnbXLG
Of3ag/TALF69f/LaSEPhAT6gQKLoMXzxjSg5J972ce985AcAHMe5D8zEC3xK+z28
snFNiD/VTyZWDIu/VzPDeqtNqsNC4Fc9Laa8iiu2QkmmVnskCZn71i2xk0PBfhJg
3ylpyaKhshfQWQ9T5QVYasPPih8EL665ELBzdswKt+uWLFSYc7RXYZbIzELn/MZa
V4XSzDtQfS8M4qcqiYl5h+pBh5Ti5aEf9k55Cyc9Vj90ty+v7wPWZ3SNxLWTJijM
Pt21PpdTihlitDri0c/V9HhZdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPi+jnV
D9J+jJyWN94Mr12A7dGSMB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2
Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDI2Ni8wRTg1OEUyODA2Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMy
Qlc5d3E4V3F4dHVTQ3JHeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAmNd2eI0K+kY8WnKv7T5zLkJrf6BFX45tlzn+2N5vlXajtobBhajaw
hwj7smg+RHlMqhBb0lqOeSnULrF1bz5ZlX5/NoTlQ8D0d0fCv7+wMlYIFBOAN8YP
i9+RqBgWKJMfeU935qBMJxurdqy4HrQUNpKsgd57crjyZ9fvDDiHfOyuTV996kS4
fGN680bm488503OBIc42SHhIqmYZ15zojEMTSNjtREGLCzwFuEpPxKY5V5bIwOUR
Mq1L3DCJi2/npxQVrif0eiVi0MnPk9BHer0kYVBXgB1KXPqP97eWPt5mP1CqAz7K
VwS0oltBAO0LhB7beY49ZaKfaSQ8amFm
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:49:54 2026 by rpki-client