This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
File:                     lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json)
Hash identifier:          +AoywIL9CXrloXbRiEFFw2NeCd/HUoxmmmqv4sjn9y0=
Subject key identifier:   75:34:63:30:43:C9:FC:A8:AA:93:04:CF:69:2F:9F:7B:79:80:C4:E8
Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
Certificate issuer:       /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Certificate serial:       0335
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
Manifest number:          032C
Signing time:             Sun 25 Jan 2026 00:15:48 +0000
Manifest this update:     Sun 25 Jan 2026 00:15:47 +0000
Manifest next update:     Sun 01 Feb 2026 00:15:47 +0000
Files and hashes:         1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: z8ozt53VLAYYMWfWauX+Wxclz8ixrVvu+yYWdrJlDK4=)
                          2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: Gkpwn3+qaXPLAggtUnFxSv/8MK3BM4swBT14YB5sClw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
                          rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821 (0x335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
        Validity
            Not Before: Jan 25 00:15:47 2026 GMT
            Not After : Feb  1 00:15:47 2026 GMT
        Subject: CN=697560b3-3564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:02:85:c8:8f:f9:51:4e:b2:20:17:61:03:
                    aa:4c:96:d7:55:a3:98:72:d4:bd:8f:30:8e:1b:a6:
                    73:02:ee:44:c3:24:47:9d:20:13:40:d0:bc:d7:33:
                    1f:08:78:e7:c7:56:bf:ea:73:b7:f4:68:39:0e:19:
                    46:08:99:5a:a6:35:e0:77:61:0f:a1:62:70:26:dc:
                    ac:a6:87:58:9c:52:6c:cd:de:c8:16:5f:d9:18:73:
                    f9:03:ba:1d:e0:df:0d:ad:87:dd:93:ec:58:d3:bc:
                    5f:c9:32:39:dc:1c:30:0f:88:a1:53:2b:2a:f6:d7:
                    06:30:65:96:ca:20:e5:f9:36:a5:9a:65:89:35:3a:
                    44:48:b2:d3:66:3c:46:70:e5:eb:ef:29:35:bd:73:
                    a9:42:f1:cc:0b:b0:12:e2:35:55:f1:47:b6:21:a8:
                    e6:b6:d4:39:b9:0c:0f:bf:69:aa:75:62:f3:d5:98:
                    b6:63:eb:f6:53:51:03:41:38:12:49:ea:ea:d6:07:
                    f7:c2:96:0f:84:13:a5:16:de:0c:b4:fa:f3:fd:08:
                    4f:6f:63:3f:1c:3e:21:bf:0a:f4:19:09:49:e7:6d:
                    d1:67:b5:47:0f:4b:6a:73:fa:c5:a3:f6:db:5e:33:
                    b4:d7:f6:62:12:e8:b0:3e:e2:1e:46:2d:9e:e0:61:
                    05:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:34:63:30:43:C9:FC:A8:AA:93:04:CF:69:2F:9F:7B:79:80:C4:E8
            X509v3 Authority Key Identifier:
                keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:ca:ba:51:ea:f7:40:b5:bc:03:13:65:66:32:77:bb:c2:
         67:8d:b6:b6:27:40:17:34:2c:97:e2:be:87:dd:cb:ce:48:c8:
         ac:15:8b:0a:dd:e1:2b:6c:75:20:9d:dd:b7:7e:f5:cc:69:29:
         a7:9e:1c:77:f6:9f:b3:4c:f7:be:b5:bf:e5:6d:0f:c1:b4:8e:
         88:6a:4c:b8:c3:02:31:bc:af:f6:1a:24:12:3b:2a:56:92:c7:
         69:f3:55:df:7b:32:71:05:3e:fe:2a:fb:19:d4:37:60:0d:8f:
         09:10:2a:3e:1c:63:a7:3e:3d:5f:c8:e4:d8:b2:97:86:54:7d:
         58:9e:eb:dc:6c:5e:78:1c:d1:56:1d:46:33:57:0e:41:ad:1d:
         8a:43:1b:ee:33:16:e3:5f:cc:65:f8:c9:1b:32:3b:2f:f8:fa:
         16:3e:d0:79:9a:50:6d:80:23:c8:be:14:91:5f:cd:69:26:66:
         a4:d5:cc:e0:cf:0d:d6:94:c5:44:2e:66:64:e0:b8:44:08:ec:
         e7:48:47:cb:a5:ef:3d:23:33:44:15:51:aa:12:75:de:51:1c:
         13:31:5e:e0:ec:fe:93:94:47:ae:7c:17:d8:16:be:d0:47:42:
         9e:81:20:34:7d:f2:b8:bf:74:14:1c:7f:70:2b:57:41:f4:ea:
         f3:21:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:11:38 2026 by rpki-client