This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
File:                     l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json)
Hash identifier:          v2deJO+FrHjztSwdRjHPevrfS8K56TDbsPJLyjQI3p0=
Subject key identifier:   84:85:D4:4E:D7:72:D4:F8:CA:1A:8A:13:BE:BF:3E:95:A4:31:5F:5A
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Certificate issuer:       /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial:       0C2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
Manifest number:          0C1A
Signing time:             Sat 24 Jan 2026 18:21:56 +0000
Manifest this update:     Sat 24 Jan 2026 18:21:56 +0000
Manifest next update:     Sat 31 Jan 2026 18:21:56 +0000
Files and hashes:         1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: T67voG4I5ou9LI2J24YMqXRJCmwIeTAOx2TBHhhIUE0=)
                          2: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: 1JZC+YNgjMx+K+MDr445Xif/I5gERZj+9WpcW7BqlVs=)
                          3: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: N0WCtgkaNZeOTo3I3oEHp89wJvvLye1ENYthm+qu0UA=)
                          4: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: E8AriLCWZxuvCsqIouWQqeJv8TlOzugnbqYiiRVnwpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
                          rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3119 (0xc2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
        Validity
            Not Before: Jan 24 18:21:56 2026 GMT
            Not After : Jan 31 18:21:56 2026 GMT
        Subject: CN=69750dc4-42ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:9a:2f:e8:c5:72:ca:33:8a:25:74:fc:bb:
                    e4:67:28:2a:68:ab:09:de:41:ad:ca:dd:6c:93:91:
                    c6:b7:c2:6e:f6:f3:32:b6:0b:11:fd:61:a4:6c:4b:
                    0a:91:0c:49:cd:d9:24:34:0a:18:76:b3:77:84:f7:
                    07:c7:d7:e8:c1:4f:5d:d1:ca:01:6b:d7:a5:17:3d:
                    8d:6d:31:22:ec:26:74:10:63:27:6c:c8:46:ca:14:
                    16:35:18:63:30:3e:99:ec:5f:f3:ba:24:f4:dd:4c:
                    ee:60:c8:67:82:1b:6b:c2:9a:ac:82:a8:e3:4a:1c:
                    9e:98:cf:30:b1:26:71:3d:40:20:33:0e:91:d9:8e:
                    7b:68:2c:03:04:a1:8a:11:b3:27:26:05:9f:37:a9:
                    87:11:d8:95:23:16:7d:bc:87:13:39:5c:79:dc:15:
                    06:7e:fb:3d:42:84:39:d0:d4:2e:7d:a4:86:e4:ae:
                    d6:87:b5:59:73:9f:ac:c1:2b:f0:b0:e7:2d:7d:e4:
                    a8:b9:99:41:fc:dc:84:81:d8:db:66:41:46:fd:bf:
                    a6:42:d1:63:78:b5:04:03:cb:ad:d8:05:78:e8:ae:
                    21:13:96:3b:83:0e:f8:7a:ad:fc:96:3a:e0:f1:3c:
                    1b:0b:f1:b6:ad:49:b3:b7:25:79:b0:f6:53:6c:96:
                    fa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:85:D4:4E:D7:72:D4:F8:CA:1A:8A:13:BE:BF:3E:95:A4:31:5F:5A
            X509v3 Authority Key Identifier:
                keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:36:d2:0b:2b:9d:9c:ad:b8:4a:cf:3c:3b:0f:89:e7:14:e3:
         ad:96:30:e2:4f:bd:ae:96:78:35:b2:b6:7a:75:16:a2:21:07:
         df:6e:da:3a:64:21:8f:1f:4c:98:d8:4c:6b:63:f5:dd:60:6d:
         56:60:a4:56:b2:6d:70:91:21:36:44:8b:03:a0:cb:9b:01:3c:
         7b:0f:32:82:eb:99:94:b3:30:d2:85:56:ce:bd:3b:e1:bc:51:
         d9:e8:bd:aa:99:01:0b:d2:12:85:18:d7:ac:7e:91:0e:21:26:
         09:82:c5:c8:51:31:28:b3:10:ed:90:d4:35:9e:dd:5d:41:8f:
         83:38:f5:de:20:0f:58:58:68:80:59:b2:ed:5a:1e:38:70:be:
         df:49:09:46:6e:b5:27:4c:06:3a:31:66:13:df:fc:87:cb:a0:
         90:57:41:0e:97:24:73:bb:81:ab:50:49:6f:70:d6:26:a1:fa:
         8c:11:bb:90:2c:ee:ba:04:b0:eb:b4:d2:89:5c:48:00:86:4e:
         90:99:f1:40:54:a5:2b:3e:0f:a2:da:98:78:82:dc:7b:84:89:
         0b:da:04:ba:6a:c9:e2:6b:35:de:68:48:ad:00:a7:47:49:ee:
         a1:de:2f:e0:53:e0:d6:77:5e:8b:0a:4f:7b:a8:e9:d5:fe:86:
         09:93:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:15:06 2026 by rpki-client