This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
File:                     LDapC6RHk-UIQM9l9mUogr_PuPI.mft (raw, json)
Hash identifier:          z3aOwvQp6rtXiJX827UWFRTsfUK7qIT8qmFI8juU1kc=
Subject key identifier:   0F:05:79:BE:7D:21:CF:EA:72:8F:B5:C2:BD:8F:EC:DF:EA:B1:EC:60
Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2
Certificate issuer:       /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2
Certificate serial:       0680
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
Manifest number:          0679
Signing time:             Sat 24 Jan 2026 21:49:18 +0000
Manifest this update:     Sat 24 Jan 2026 21:49:17 +0000
Manifest next update:     Sat 31 Jan 2026 21:49:17 +0000
Files and hashes:         1: LDapC6RHk-UIQM9l9mUogr_PuPI.crl (hash: bCCYWqZlAQC2aDTpak1d8GN16mBnK2a/p92xKAVUGAk=)
                          2: 7054AB4AAC5611EBA1C1D381C4F9AE02.roa (hash: OFrwiJWAkGGk5FsDremtK39rCrSaFqlUshUtXmOJ9aQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl
                          rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664 (0x680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D00, serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2
        Validity
            Not Before: Jan 24 21:49:17 2026 GMT
            Not After : Jan 31 21:49:17 2026 GMT
        Subject: CN=69753e5e-830e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:7e:5e:6a:b9:70:50:db:44:52:88:87:73:
                    3b:ba:1f:7c:37:62:69:1c:5f:2d:07:3b:7b:0d:f2:
                    37:c4:7e:d5:a4:38:19:36:10:da:80:9a:fa:9e:60:
                    6c:8e:4d:13:14:b9:fd:9b:7e:ab:1c:ac:aa:b8:b9:
                    4a:7a:77:4d:f1:70:ef:82:a2:4f:fc:97:b1:fb:a2:
                    fd:ae:dd:19:14:a2:60:d2:06:f0:e7:1c:65:a9:99:
                    ae:5f:97:63:23:44:cb:e9:89:6d:6d:54:39:37:c5:
                    09:bd:de:46:76:c2:8d:e2:f8:a6:85:79:25:27:a4:
                    64:a8:5e:a6:de:e0:ea:4e:00:42:e0:70:04:cc:f1:
                    f1:61:35:76:4e:f8:43:78:75:e5:99:c3:b0:fe:28:
                    b9:49:4e:05:dd:7a:85:03:68:74:25:9d:a0:fd:e1:
                    19:9a:00:c6:d2:87:41:2c:d5:6f:92:f1:03:a8:f1:
                    56:a4:94:3d:44:29:11:d7:2a:18:7a:ab:c3:c6:57:
                    7b:af:69:f6:d1:80:a9:74:84:ad:94:d8:6b:37:fc:
                    da:f4:2b:78:1c:79:d7:c4:8c:6d:c0:36:e4:90:9f:
                    5d:41:f8:d8:ec:69:86:fb:a8:62:21:62:fc:e3:37:
                    89:fe:ab:eb:7b:a2:de:28:7b:15:53:fa:b7:2b:de:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:05:79:BE:7D:21:CF:EA:72:8F:B5:C2:BD:8F:EC:DF:EA:B1:EC:60
            X509v3 Authority Key Identifier:
                keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:57:36:f9:e3:72:bb:6b:76:1a:f3:7d:b5:1f:0b:88:ae:20:
         0a:d2:0c:cb:b8:32:fa:bd:e3:0f:c6:66:38:77:ee:fc:ec:b2:
         d7:10:4e:72:e4:06:46:c3:e8:3a:38:b8:78:23:09:92:04:50:
         b6:0f:ef:4c:e3:78:ed:dd:bf:a8:d5:c7:c5:58:55:ef:e6:77:
         7a:f6:ae:66:42:fe:15:62:06:4e:85:be:62:b8:28:7c:34:94:
         80:7c:ec:71:9b:0c:02:d3:d2:65:99:67:dd:be:05:3c:42:69:
         99:29:9a:26:20:74:f7:d2:27:bd:fa:20:4c:db:8d:68:57:59:
         8d:ec:b5:0e:35:3d:f5:20:f5:74:55:3d:46:f2:f0:9f:1b:68:
         e4:26:ed:4d:89:37:28:52:3a:82:6c:7c:3a:93:8e:79:92:24:
         c8:9e:c7:3c:cf:b9:44:71:de:13:7a:da:76:8f:84:4c:b4:a4:
         6c:4e:73:4b:ed:07:c4:c1:30:e6:39:3e:02:2b:d5:4d:12:95:
         2b:46:60:34:f5:94:38:57:c3:50:6c:fd:85:c1:51:d8:40:bc:
         39:e8:f3:47:b1:75:5d:97:c6:c5:65:8f:89:03:a7:58:04:40:
         bd:f7:90:62:2f:ec:2d:11:9a:f3:66:cc:74:85:cf:74:da:47:
         4c:17:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:04:21 2026 by rpki-client