This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
File:                     l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json)
Hash identifier:          TDEu/FnM79PrVffPCn+sM/khAsjgWdWGygV+JY3nOik=
Subject key identifier:   B3:73:47:66:35:9C:57:73:0C:39:5B:39:F2:07:13:2C:BB:88:CE:D4
Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
Certificate issuer:       /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Certificate serial:       0D04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
Manifest number:          0CD5
Signing time:             Sat 24 Jan 2026 18:01:02 +0000
Manifest this update:     Sat 24 Jan 2026 18:01:01 +0000
Manifest next update:     Sat 31 Jan 2026 18:01:01 +0000
Files and hashes:         1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: UHD/nRnb3kQOIFH7K9lujc+0elMcb+GAXwGadEUJHSc=)
                          2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: /Guh9JZ2GlA6fGHvz6IyFArNWYosj9/jyWCo/gIcAcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3332 (0xd04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
        Validity
            Not Before: Jan 24 18:01:01 2026 GMT
            Not After : Jan 31 18:01:01 2026 GMT
        Subject: CN=697508de-0752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:ec:f6:a4:f9:c4:c3:4a:49:7d:17:2c:b1:
                    68:62:91:2d:0a:39:ce:6e:d2:f6:83:83:53:ea:2a:
                    b7:a7:33:85:f3:ea:43:0b:e8:b2:7e:bb:36:91:74:
                    39:0c:03:67:5a:25:8b:47:a8:d8:69:b1:6f:41:e2:
                    cf:23:82:b3:1d:1a:f9:e2:ee:24:02:a8:00:3f:dc:
                    22:c2:1c:27:f8:81:24:e4:b0:25:64:5d:70:a7:b3:
                    52:98:25:3b:41:79:a8:50:ab:e9:ce:63:8e:23:9e:
                    a8:fb:ae:2c:d4:28:0b:e3:56:ce:c9:ce:91:4a:f7:
                    92:7c:e6:fe:92:51:10:be:66:72:48:6a:f5:05:8b:
                    7e:0b:42:77:49:66:a1:65:93:73:8a:da:9b:6e:af:
                    36:86:10:0b:c3:50:72:a5:a9:f4:2c:e2:6e:9a:97:
                    f9:5c:56:77:56:7a:93:c4:54:c5:01:cb:13:0f:80:
                    c2:b9:64:6a:82:e4:9b:1e:fd:e0:e7:20:b9:7b:b0:
                    45:b8:da:21:54:1f:12:2f:f6:3c:c1:c4:ab:a5:14:
                    7f:bf:cb:91:27:b7:e7:4b:07:08:d6:24:ec:cb:8c:
                    f8:0e:7d:35:e0:2a:63:a9:24:89:69:70:51:f9:c4:
                    2e:5e:46:44:d2:c3:b7:58:07:dd:e9:8f:f3:0e:ec:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:73:47:66:35:9C:57:73:0C:39:5B:39:F2:07:13:2C:BB:88:CE:D4
            X509v3 Authority Key Identifier:
                keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6d:ce:1d:92:8f:e4:ef:4b:66:22:77:c3:a8:2a:61:be:58:
         ca:ee:b0:d3:b5:60:8f:ee:08:d9:58:24:61:27:c3:29:fd:46:
         d1:33:a0:7e:01:74:2b:da:06:86:e5:d0:d2:22:6c:00:3d:83:
         0d:ed:92:69:89:bd:79:4e:92:18:0d:26:cc:f2:66:61:70:ec:
         a0:fc:a5:03:19:87:2b:b2:30:20:62:13:53:f4:44:8e:5c:e4:
         74:14:19:97:f5:21:2f:50:9b:7e:87:51:95:5e:d0:ad:59:cf:
         4f:3d:85:a1:de:f9:e0:66:06:0d:1c:15:a2:d7:c2:88:bb:6d:
         b3:ed:58:5c:8e:d6:61:a8:9a:2d:5f:fb:2e:65:1c:8f:65:75:
         04:fd:76:c1:20:13:58:d1:97:cd:56:15:db:08:f4:37:e8:88:
         ff:b7:2c:48:45:98:3b:8c:e0:b4:f3:a4:db:50:63:50:ed:84:
         51:d1:26:6e:da:37:db:8b:3e:b1:63:ac:3f:9e:9a:11:8e:11:
         24:31:79:05:bd:98:d4:81:33:8d:83:05:c4:82:c6:eb:bc:0b:
         fc:6a:d6:12:6c:71:70:4a:93:36:03:a2:05:7e:20:ec:97:c0:
         c0:c6:88:3b:20:29:25:7c:81:f6:cd:1a:8e:a5:82:8b:9f:c0:
         de:46:28:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:43 2026 by rpki-client