This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
File:                     L1yb73Dl0CO3HEbLZs_iof20g1s.mft (raw, json)
Hash identifier:          tweQ1QRgpqKKSQjsAv1qqQv7+6hHxg7fOF9+XShCWp0=
Subject key identifier:   95:9F:4B:E5:4E:32:89:3D:E2:9F:58:5F:BF:42:B5:BB:05:F9:60:E1
Authority key identifier: 2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B
Certificate issuer:       /CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B
Certificate serial:       07E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
Manifest number:          07DC
Signing time:             Sat 24 Jan 2026 20:36:46 +0000
Manifest this update:     Sat 24 Jan 2026 20:36:45 +0000
Manifest next update:     Sat 31 Jan 2026 20:36:45 +0000
Files and hashes:         1: L1yb73Dl0CO3HEbLZs_iof20g1s.crl (hash: dvE7KWYCeiZlT3Tjt4hJwHk/yhWOIsXj5wnY4OUyjMc=)
                          2: 2323F9621D5D11EBA3A7E71CC4F9AE02.roa (hash: V6nVYtxgABEEx59pXAhW4JauDnfyhwDJHmUDG1nlXFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl
                          rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D55E, serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B
        Validity
            Not Before: Jan 24 20:36:45 2026 GMT
            Not After : Jan 31 20:36:45 2026 GMT
        Subject: CN=69752d5e-5a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:80:3d:9a:1d:89:2f:15:13:ea:3e:60:1d:
                    bd:b0:67:58:19:bb:a4:63:e1:41:25:17:78:1f:19:
                    c8:12:20:73:39:44:a2:e6:5f:16:f3:b1:10:37:aa:
                    93:dd:16:8b:8d:06:f5:42:6a:6e:1c:8b:16:ca:ff:
                    f8:fd:a1:f5:27:70:0b:cd:44:20:64:85:93:69:10:
                    d0:dc:7b:22:f4:12:2b:0d:b3:ce:3c:22:8a:df:35:
                    bb:93:c0:93:da:e3:cc:eb:12:55:d5:38:18:61:59:
                    d9:e3:00:37:73:62:5c:01:b2:f1:46:94:19:37:56:
                    b3:03:27:6c:65:32:0c:6c:32:ad:d1:36:2f:44:97:
                    4b:fe:53:d1:ab:fd:d6:a4:00:48:a3:5b:dd:ce:ac:
                    13:4f:e4:08:1c:6d:5a:1f:80:02:d3:8b:31:23:c1:
                    92:f0:f3:96:30:7e:42:71:3b:3f:11:87:0b:d5:fe:
                    9e:24:e9:76:71:ae:3b:5c:3d:bb:2e:e6:24:aa:2a:
                    f4:41:8e:91:23:b3:02:3e:34:31:c5:ae:9f:1c:c6:
                    c8:7a:83:5f:46:ea:5b:43:9d:e7:0e:48:ad:f3:16:
                    c6:28:37:ad:08:ae:2f:1b:be:75:1f:c3:b4:65:ec:
                    2c:f1:1b:cd:7a:23:5e:3f:3a:da:2f:56:ea:87:13:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9F:4B:E5:4E:32:89:3D:E2:9F:58:5F:BF:42:B5:BB:05:F9:60:E1
            X509v3 Authority Key Identifier:
                keyid:2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:57:2a:50:a6:22:46:8e:14:35:c1:8c:73:7c:70:f3:8b:79:
         09:c7:be:a8:aa:11:f0:e3:0c:84:9e:1d:0f:fd:3d:21:76:84:
         c6:a8:2e:6e:d0:12:fd:e3:f4:35:a8:3b:c9:89:7b:f0:0a:58:
         ee:db:85:39:80:dd:fb:7a:a3:2c:ce:80:ab:65:91:34:82:c7:
         b7:17:c0:04:af:c9:16:47:df:03:14:1c:14:04:ad:bb:bd:cb:
         5f:e3:eb:bd:85:07:99:04:52:6a:e7:b4:ac:36:c0:e8:99:e1:
         e9:5a:fb:79:63:a9:ab:7c:91:54:a3:61:4f:b9:ed:68:83:ea:
         52:57:1d:5d:0c:75:22:f9:56:a2:bf:20:f4:90:e2:3f:c9:46:
         4c:00:81:7e:1d:9c:e5:df:63:94:b9:0a:d1:59:76:fe:6b:da:
         2d:e7:bf:d2:d9:3d:c0:db:5e:ef:06:9d:74:53:6a:f6:19:d5:
         1d:a7:82:20:b8:32:cc:03:07:c2:54:0e:99:15:19:36:44:86:
         50:48:61:52:89:20:29:db:73:5b:36:3c:46:7e:86:de:8f:6d:
         44:87:ef:66:5d:e8:42:a9:65:a2:d5:aa:7c:f8:74:90:c8:29:
         da:b1:c8:f1:5c:59:3e:2c:8e:fc:d3:bd:83:78:75:1a:ac:f9:
         fa:9a:8a:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ1NUUxMTAvBgNVBAUTKDJGNUM5QkVGNzBFNUQwMjNCNzFDNDZDQjY2Q0ZFMkEx
RkRCNDgzNUIwHhcNMjYwMTI0MjAzNjQ1WhcNMjYwMTMxMjAzNjQ1WjAYMRYwFAYD
VQQDDA02OTc1MmQ1ZS01YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAquWAPZodiS8VE+o+YB29sGdYGbukY+FBJRd4HxnIEiBzOUSi5l8W87EQN6qT
3RaLjQb1QmpuHIsWyv/4/aH1J3ALzUQgZIWTaRDQ3Hsi9BIrDbPOPCKK3zW7k8CT
2uPM6xJV1TgYYVnZ4wA3c2JcAbLxRpQZN1azAydsZTIMbDKt0TYvRJdL/lPRq/3W
pABIo1vdzqwTT+QIHG1aH4AC04sxI8GS8POWMH5CcTs/EYcL1f6eJOl2ca47XD27
LuYkqir0QY6RI7MCPjQxxa6fHMbIeoNfRupbQ53nDkit8xbGKDetCK4vG751H8O0
Zews8RvNeiNePzraL1bqhxMPtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWfS+VO
Mok94p9YX79CtbsF+WDhMB8GA1UdIwQYMBaAFC9cm+9w5dAjtxxGy2bP4qH9tINb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDU1RS82MkE1RUI2QTFE
NUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBDTzNIRWJMWnNfaW9mMjBn
MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wxeWI3M0RsMENPM0hFYkxac19pb2YyMGcxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDU1RS82MkE1RUI2QTFENUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBD
TzNIRWJMWnNfaW9mMjBnMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZVypQpiJGjhQ1wYxzfHDzi3kJx76oqhHw4wyEnh0P/T0hdoTGqC5u
0BL94/Q1qDvJiXvwClju24U5gN37eqMszoCrZZE0gse3F8AEr8kWR98DFBwUBK27
vctf4+u9hQeZBFJq57SsNsDomeHpWvt5Y6mrfJFUo2FPue1og+pSVx1dDHUi+Vai
vyD0kOI/yUZMAIF+HZzl32OUuQrRWXb+a9ot57/S2T3A217vBp10U2r2GdUdp4Ig
uDLMAwfCVA6ZFRk2RIZQSGFSiSAp23NbNjxGfobej21Eh+9mXehCqWWi1ap8+HSQ
yCnascjxXFk+LI78072DeHUarPn6mopd
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:24:07 2026 by rpki-client