This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File:                     4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier:          GOrcm7/CE3vcBahDHCCqjxlOsYokA0hLVS5GbpI14bM=
Subject key identifier:   BA:45:FE:C5:0E:35:43:C3:9E:EF:32:55:A9:DB:0A:F7:31:A5:48:6A
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer:       /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number:          FE
Signing time:             Sun 25 Jan 2026 04:24:06 +0000
Manifest this update:     Sun 25 Jan 2026 04:24:06 +0000
Manifest next update:     Sun 01 Feb 2026 04:24:06 +0000
Files and hashes:         1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: dF84GV7rvu2MLl8SJiPQIx6IE4WviSGxJR01u6CzPm4=)
                          2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: e8wZoAxd5aA3CtPGlNCm2H8RgaO0sg67bbRxbVIcezE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
                          rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
        Validity
            Not Before: Jan 25 04:24:06 2026 GMT
            Not After : Feb  1 04:24:06 2026 GMT
        Subject: CN=69759ae6-71c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:14:24:b1:0d:11:bc:6c:dc:83:20:26:7b:c1:
                    76:1f:36:9e:cb:9e:ed:79:ef:65:43:57:87:fc:b0:
                    a9:93:33:af:82:2e:db:1a:c3:1c:c6:b5:fb:ab:bb:
                    e2:67:e7:7e:ec:25:14:14:70:1f:92:9e:7f:34:08:
                    d0:c5:f0:38:33:04:22:33:43:1a:a8:3b:2b:b3:e4:
                    3e:49:6b:b4:fe:c8:0e:32:33:4a:e5:cf:8b:30:9f:
                    78:40:f2:c8:47:c4:4b:37:8d:5c:c3:b1:98:da:4a:
                    67:f3:cb:de:c8:3c:fd:d7:e9:d4:13:aa:5b:a0:b5:
                    12:b9:0d:69:ac:17:01:66:51:14:dc:2a:af:e3:24:
                    d1:5e:c9:cd:f4:2a:7b:37:83:17:06:c7:ef:9f:cd:
                    5a:d6:11:35:ed:af:0f:4f:8e:9f:30:25:99:a4:9e:
                    3a:f8:9f:f8:70:fe:4e:80:fb:98:dd:f9:97:07:7d:
                    1a:7d:6a:78:0c:6a:7d:e6:a7:35:3b:6d:e4:fa:1b:
                    b0:9a:27:8d:f4:de:a8:9c:fc:85:05:a7:5e:25:79:
                    2a:99:ef:0a:32:7f:b4:3c:b4:8f:51:95:e3:54:53:
                    38:fc:1c:19:b6:99:ae:41:fe:33:5c:51:f4:16:0b:
                    b1:fe:fa:b1:1a:b3:9f:47:3e:80:95:39:65:3f:7b:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:45:FE:C5:0E:35:43:C3:9E:EF:32:55:A9:DB:0A:F7:31:A5:48:6A
            X509v3 Authority Key Identifier:
                keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f1:2d:19:2a:4d:24:29:d0:d5:f9:12:04:d0:c6:97:e9:52:
         df:a2:7c:f7:0b:1e:3f:fa:7e:ad:21:c2:4e:83:64:11:a9:b9:
         12:f4:3a:41:01:e6:77:06:19:10:76:95:2d:75:c5:a8:99:56:
         53:3a:19:e9:bf:b9:ad:a2:98:5a:50:c9:93:f0:63:78:9c:0d:
         84:d2:7e:0f:51:a3:98:10:74:b6:b0:dc:5e:e5:f0:0b:ff:d7:
         6a:12:16:f0:b6:b1:77:74:11:f0:ac:b3:d2:72:1a:d2:14:db:
         b5:10:51:ba:43:e5:7a:b9:9c:c0:5f:49:02:4b:85:82:e2:6a:
         d1:1d:c1:d5:25:49:81:51:89:b0:50:3a:f4:36:ed:f0:cc:18:
         8d:98:c9:a4:e3:c4:6d:83:9b:80:01:d5:4d:a3:f4:35:f3:14:
         83:8e:04:52:b7:eb:b7:e5:10:4b:7a:a4:fc:b2:8a:fc:c6:8b:
         77:f6:77:65:2c:84:51:16:ad:82:c8:6d:f9:c3:aa:67:cd:a9:
         87:e2:89:3e:62:51:e2:b1:dd:25:18:09:47:0d:47:ff:ba:83:
         71:84:dd:18:ab:8a:d2:09:b9:f4:cf:fa:59:97:f8:26:0a:ab:
         db:af:b9:55:8a:88:2b:42:61:38:e8:c8:97:c5:bf:cc:be:fe:
         7e:d5:73:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:43 2026 by rpki-client