This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File:                     0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier:          kGQrkpWno7vO9M6VmpURPFfYO1Hu+J+aBZNvwIdSmFw=
Subject key identifier:   FE:B7:1E:D8:3A:F6:EB:D4:6B:83:54:84:B0:73:18:ED:F6:A3:91:5E
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer:       /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number:          0188
Signing time:             Fri 23 Jan 2026 02:50:26 +0000
Manifest this update:     Fri 23 Jan 2026 02:50:26 +0000
Manifest next update:     Fri 30 Jan 2026 02:50:26 +0000
Files and hashes:         1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: MyVgk5jKWsGe6jr/jILYfPsQb/ZrnRT1foh0YVOd904=)
                          2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: 7696MMuvciabX1nFuz0iuQ3b+zF4t5sdAPgAUCluYpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
                          rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
        Validity
            Not Before: Jan 23 02:50:26 2026 GMT
            Not After : Jan 30 02:50:26 2026 GMT
        Subject: CN=6972e1f2-495a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:59:d1:c8:e4:39:6b:76:d5:fa:46:e5:d1:65:
                    46:3d:bb:33:90:a8:a2:8f:7e:08:84:f4:56:8c:a3:
                    2b:70:bc:d4:be:80:99:6b:14:69:64:ab:da:54:5e:
                    10:08:9e:a9:b7:a2:1d:ac:8a:82:ab:33:0e:ec:4b:
                    55:ef:a3:f0:61:c4:d8:39:0b:10:f4:68:a8:84:42:
                    e9:50:e3:4a:45:7c:5e:38:69:7f:33:69:c3:06:df:
                    a4:33:37:23:25:14:06:ca:f2:a6:ba:3f:a6:80:a1:
                    9c:cf:63:3a:ac:ed:7b:0d:4c:eb:85:ea:fd:53:97:
                    05:72:e7:a8:c7:5f:d2:30:5b:83:45:d9:08:b2:ef:
                    ea:92:e7:8d:ad:5a:79:bd:6b:d7:a1:8a:2a:71:0a:
                    2c:68:18:01:95:36:a5:d8:8b:46:31:d7:4c:f9:29:
                    44:8f:17:cd:03:47:99:1b:94:80:60:45:39:8d:15:
                    bf:aa:97:e0:06:30:11:04:d4:d9:45:92:3c:f1:b2:
                    10:bc:17:af:69:96:4e:8d:b6:7f:66:81:f0:99:d1:
                    70:4c:63:69:b7:8c:58:79:5c:36:6f:3b:b0:7a:11:
                    4b:db:e1:ef:eb:c6:c8:71:34:3a:dc:69:7b:00:a8:
                    59:ef:d6:4d:f8:19:85:99:b6:50:ee:ad:d2:e2:07:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B7:1E:D8:3A:F6:EB:D4:6B:83:54:84:B0:73:18:ED:F6:A3:91:5E
            X509v3 Authority Key Identifier:
                keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:07:b8:38:29:56:21:9c:dc:6b:e1:63:a0:0d:05:3e:dd:38:
         80:b7:09:11:92:ac:ab:6a:8e:c5:d9:bf:31:60:60:e5:b8:ee:
         0c:7f:48:e5:28:1d:d9:4f:54:99:40:16:b3:f4:bd:2a:5e:5b:
         f1:02:01:21:e5:db:a6:76:d5:c1:b7:f7:ce:e1:65:49:4d:ae:
         6d:13:3b:51:03:dd:33:b6:64:04:84:a7:9a:f4:29:d4:10:87:
         62:ec:65:74:2a:e3:57:85:11:7c:6e:1f:91:61:45:a7:4e:26:
         36:ca:3d:80:bd:f6:80:eb:9e:48:31:7b:d1:8d:50:2b:f9:31:
         22:8a:6b:a3:74:6e:8c:db:a5:ce:7e:43:4d:51:24:7d:b1:31:
         cb:08:dc:d0:7d:41:03:77:11:dc:4d:2d:79:e6:df:d1:52:b3:
         16:83:62:e2:87:ea:10:16:2a:2d:0c:e9:e2:36:b6:55:8d:2d:
         70:26:6a:c4:e1:d9:f6:ee:e0:db:fb:c9:6c:b0:17:ff:16:27:
         34:7f:de:e1:c4:1a:8c:47:4f:d9:af:0a:2f:c9:13:e7:56:0a:
         d9:ce:e6:16:ab:9a:3e:9e:aa:07:8a:0b:26:d2:4d:dc:e2:67:
         1e:30:8d:13:2f:e5:19:81:f6:b7:8b:26:9c:a6:13:e6:f7:2a:
         cb:dd:ed:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3
MjhGOTVDRjUwHhcNMjYwMTIzMDI1MDI2WhcNMjYwMTMwMDI1MDI2WjAYMRYwFAYD
VQQDDA02OTcyZTFmMi00OTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkVnRyOQ5a3bV+kbl0WVGPbszkKiij34IhPRWjKMrcLzUvoCZaxRpZKvaVF4Q
CJ6pt6IdrIqCqzMO7EtV76PwYcTYOQsQ9GiohELpUONKRXxeOGl/M2nDBt+kMzcj
JRQGyvKmuj+mgKGcz2M6rO17DUzrher9U5cFcueox1/SMFuDRdkIsu/qkueNrVp5
vWvXoYoqcQosaBgBlTal2ItGMddM+SlEjxfNA0eZG5SAYEU5jRW/qpfgBjARBNTZ
RZI88bIQvBevaZZOjbZ/ZoHwmdFwTGNpt4xYeVw2bzuwehFL2+Hv68bIcTQ63Gl7
AKhZ79ZN+BmFmbZQ7q3S4gf6wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP63Htg6
9uvUa4NUhLBzGO32o5FeMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy
RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY
UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i
TlI0ZFFsYXRBclp5ajVYUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDGB7g4KVYhnNxr4WOgDQU+3TiAtwkRkqyrao7F2b8xYGDluO4Mf0jl
KB3ZT1SZQBaz9L0qXlvxAgEh5dumdtXBt/fO4WVJTa5tEztRA90ztmQEhKea9CnU
EIdi7GV0KuNXhRF8bh+RYUWnTiY2yj2AvfaA655IMXvRjVAr+TEiimujdG6M26XO
fkNNUSR9sTHLCNzQfUEDdxHcTS155t/RUrMWg2Lih+oQFiotDOniNrZVjS1wJmrE
4dn27uDb+8lssBf/Fic0f97hxBqMR0/ZrwovyRPnVgrZzuYWq5o+nqoHigsm0k3c
4mceMI0TL+UZgfa3iyacphPm9yrL3e3T
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:55 2026 by rpki-client