This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
File:                     4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json)
Hash identifier:          vUq1XWU+9PvyMA3h3yfTZXZ1N0Fwb5WXSHSMD8FAYII=
Subject key identifier:   31:85:1C:B4:A2:35:94:4C:DF:45:D5:5C:3D:1C:5F:23:CE:28:50:DF
Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
Certificate issuer:       /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Certificate serial:       0DFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
Manifest number:          0DED
Signing time:             Sat 24 Jan 2026 17:31:10 +0000
Manifest this update:     Sat 24 Jan 2026 17:31:10 +0000
Manifest next update:     Sat 31 Jan 2026 17:31:10 +0000
Files and hashes:         1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: 6cdS/1IdJTiuSqHRUgu+DKxqfLv8XT6HQLlIeLxu6E4=)
                          2: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: XfxZHGEC6L2I7lf4RHsiD8/699vyTVMdYrB6wZFXmUY=)
                          3: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: r12gsCo6iUFC5f/jSOBGicDzV0QxP8G0HCiUT+DfDFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
                          rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3578 (0xdfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
        Validity
            Not Before: Jan 24 17:31:10 2026 GMT
            Not After : Jan 31 17:31:10 2026 GMT
        Subject: CN=697501de-b393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:64:8d:37:5e:f8:2b:48:3b:f6:bd:6d:89:
                    99:e4:ab:ac:71:5a:45:2c:18:ab:d1:64:61:0f:d6:
                    4d:d7:35:0d:51:9b:41:a7:cb:96:ff:8f:8c:e6:d8:
                    f1:c8:20:9c:30:1a:b0:0e:a4:14:84:63:82:b1:5c:
                    18:6d:bd:61:f1:3d:da:de:c9:4d:13:96:d5:fb:6e:
                    1d:de:96:d1:f4:ac:4b:39:9c:aa:dd:e9:7f:55:5a:
                    de:7b:4a:a8:37:ab:ce:19:db:ea:6b:ca:ca:a2:c7:
                    ca:d8:c9:44:e6:63:3f:71:8f:30:ed:00:66:3b:11:
                    a6:59:52:c6:23:cc:c7:ae:37:d8:73:6f:8f:94:86:
                    e7:46:d0:25:aa:5d:c9:bf:6d:09:c4:40:00:9c:5e:
                    e9:ea:65:e1:03:0f:fb:ef:2d:78:c0:a0:d8:7d:a7:
                    b0:fd:06:41:8b:7c:90:e7:cd:61:cf:de:40:6e:d7:
                    b1:a9:6c:3b:1a:48:00:f8:c3:d2:a8:3c:8e:c2:eb:
                    2c:05:ce:16:d3:09:96:ef:b2:af:86:11:b0:25:0b:
                    c6:02:d2:5f:da:d8:2e:f7:88:11:e5:ef:3d:12:62:
                    e4:ad:af:b5:55:a8:b6:59:16:77:91:bf:a5:f0:9d:
                    77:33:87:76:a0:cf:3c:e6:40:1b:cb:cb:a3:8d:14:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:85:1C:B4:A2:35:94:4C:DF:45:D5:5C:3D:1C:5F:23:CE:28:50:DF
            X509v3 Authority Key Identifier:
                keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:56:2e:44:29:11:e0:17:e9:8e:ed:1f:a1:5a:79:c6:23:b7:
         5a:38:01:eb:d3:93:1a:c9:a4:81:c1:5e:5a:4a:27:b3:db:82:
         cb:99:ba:fb:b3:65:6d:a0:16:5e:fc:b9:13:b3:55:b7:40:75:
         5f:be:0a:06:c0:eb:ee:31:e8:1e:b6:c8:ee:82:31:0c:ee:c0:
         44:9f:68:09:0f:10:64:b7:d5:aa:bb:4f:63:44:15:e9:e8:38:
         ba:02:53:48:d2:59:5e:35:06:fc:a3:50:e8:97:20:c3:29:0e:
         6a:3a:49:ff:39:97:b8:8d:fa:d7:ec:b2:17:98:3c:32:82:38:
         39:5d:95:80:18:31:9a:38:d3:a9:7c:d5:40:7f:80:c0:cc:76:
         d8:ef:97:53:c8:f9:6e:c6:c3:64:d7:10:e7:be:20:cf:f6:44:
         c9:42:18:90:4a:2d:f4:34:99:17:43:c4:11:e6:33:78:a3:71:
         e3:9e:cc:ec:79:a2:4b:4d:4d:93:de:c3:bb:25:5a:38:86:2e:
         c0:41:b2:3c:e5:ec:e6:fc:f6:5c:35:4a:fd:e1:d2:6a:40:60:
         b2:00:f0:b2:af:2f:ff:00:b7:ca:00:7f:fa:f0:76:ae:52:58:
         e4:e4:4a:c5:cc:bf:90:34:90:11:2c:ac:ec:78:e7:e7:b0:0d:
         5b:05:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:09 2026 by rpki-client