This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
File:                     LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json)
Hash identifier:          l7B9nqOLRJgtMi1pgm50Hf5JSg1QFbmBL7L0bLYfD4I=
Subject key identifier:   65:97:36:E3:CD:0F:6C:A5:4E:51:D2:76:61:0B:65:DC:36:99:C0:66
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Certificate issuer:       /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
Manifest number:          83
Signing time:             Sun 25 Jan 2026 05:48:24 +0000
Manifest this update:     Sun 25 Jan 2026 05:48:24 +0000
Manifest next update:     Sun 01 Feb 2026 05:48:24 +0000
Files and hashes:         1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: BImQMDNU5NwN+i5Q1nmLIJtbrMi1MdIXIoRmboYPAWU=)
                          2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: 2CjDcwjgwp6gOmqeOjKh58gY5ezLWgyuFkjz5k3OnLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
                          rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
        Validity
            Not Before: Jan 25 05:48:24 2026 GMT
            Not After : Feb  1 05:48:24 2026 GMT
        Subject: CN=6975aea8-544d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:24:4d:03:a9:6c:af:5c:ab:c4:63:c9:24:eb:
                    25:91:fd:6a:6f:1e:bb:4e:84:2d:84:d4:79:d6:07:
                    48:dd:b4:bc:ba:f5:86:64:31:e1:ec:f7:79:b1:fd:
                    bb:92:1e:9a:92:55:cd:83:8c:c6:6c:fc:5f:7b:85:
                    c9:29:b1:9e:b4:20:b4:83:d0:49:ee:7b:96:55:60:
                    51:53:b0:b8:5f:0a:3c:05:a5:68:43:99:eb:d5:ad:
                    d0:3b:5d:fb:d0:6f:b2:64:f7:01:94:57:d4:2a:81:
                    65:d7:77:5d:cb:1d:1a:0a:af:70:aa:39:0b:23:0e:
                    dc:88:f9:2a:14:6d:fc:e0:04:38:88:35:27:77:ec:
                    10:c1:2a:df:ff:43:34:2a:fe:43:a5:ee:49:e6:99:
                    80:84:eb:ec:42:cc:7a:9a:9f:86:79:ca:07:88:23:
                    2c:81:c3:28:74:5a:e0:b5:81:bb:7e:5a:16:b3:b9:
                    3e:e6:a4:ac:c0:5e:65:30:56:e1:72:f0:5f:4c:00:
                    68:13:30:9a:c1:66:d4:e7:5a:72:8e:0a:54:b3:48:
                    b1:19:08:68:d1:e7:12:cb:39:b6:b0:15:6c:42:5e:
                    e6:0e:3c:d9:a4:2d:9e:94:bc:36:f6:dd:18:64:95:
                    75:0a:6d:4b:15:50:51:5b:24:9a:ba:3c:23:a8:87:
                    89:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:97:36:E3:CD:0F:6C:A5:4E:51:D2:76:61:0B:65:DC:36:99:C0:66
            X509v3 Authority Key Identifier:
                keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8c:6c:f1:43:c1:87:7c:e5:a7:48:1d:36:7d:5a:1e:f8:cd:
         d6:e4:7e:57:16:3c:e4:0b:be:f0:c6:f4:c4:c3:f2:e5:2f:84:
         1b:68:f3:90:51:c3:16:aa:6f:04:e6:12:4b:c8:bb:a2:b7:2d:
         d3:e2:b5:9e:13:67:dd:41:c5:a4:f2:77:31:20:25:3a:40:c4:
         6e:c8:55:9b:9d:92:2f:30:22:17:d5:66:26:59:c1:b3:60:c8:
         55:b0:06:8e:9d:68:12:9e:56:9c:ca:e5:c7:a2:5f:a2:b7:20:
         9a:19:14:90:1b:6e:4a:19:6d:ca:fb:89:63:8e:7b:b8:03:d5:
         2e:3d:01:1f:d4:ff:25:b5:aa:82:0b:66:b1:3e:f3:ed:6c:36:
         20:39:ff:03:01:b6:69:cf:e8:65:ab:f0:90:2b:eb:4d:f2:3b:
         51:b3:88:e6:5b:f8:96:10:06:1a:37:34:06:fe:e8:bf:cf:77:
         fb:67:21:fa:2a:be:a0:bf:77:17:0f:77:57:7a:cf:a6:53:ac:
         b7:6d:6e:69:41:05:bc:fe:3b:2d:aa:2d:26:d8:5e:13:34:ce:
         7c:c6:eb:d8:4f:9f:99:d0:df:3f:a1:b3:24:ea:19:0a:53:7d:
         16:29:fb:48:04:39:ca:25:18:a3:2e:52:89:9f:4f:1a:25:9a:
         51:8b:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:31 2026 by rpki-client