This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
File:                     lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json)
Hash identifier:          dIKH3Uo4vItt6r0/o8cQsKbByLQM8CnGbBw6shM/hSM=
Subject key identifier:   DF:B9:14:B4:08:04:B8:54:D1:C6:A3:E5:A8:51:53:9C:38:C1:CA:B3
Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
Certificate issuer:       /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
Manifest number:          019A
Signing time:             Sun 25 Jan 2026 02:44:31 +0000
Manifest this update:     Sun 25 Jan 2026 02:44:30 +0000
Manifest next update:     Sun 01 Feb 2026 02:44:30 +0000
Files and hashes:         1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: ZEKhbUW+3lnFt/LyjMI3g4ewwf9U+Hz8nx7WVPjdouA=)
                          2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: OYcqPPoNzZ0mU98SLaUwZKPqGtyytHy4I1e+KVz3rEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
                          rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
        Validity
            Not Before: Jan 25 02:44:30 2026 GMT
            Not After : Feb  1 02:44:30 2026 GMT
        Subject: CN=6975838f-cec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:aa:e0:ef:d4:12:ed:55:86:3c:dd:2d:4e:52:
                    31:bb:c5:b3:e1:2e:e3:95:fc:50:34:17:68:a9:96:
                    34:a2:79:7a:14:26:0f:6b:27:a8:58:2f:dd:59:ce:
                    27:87:8b:e9:3a:a3:e5:50:b4:3b:3d:b5:ba:32:b7:
                    0f:ab:e6:09:81:d6:33:5a:36:2d:e6:d6:59:ee:13:
                    21:a7:a3:e7:e1:c9:34:63:41:33:7d:87:a1:05:97:
                    5a:13:1e:90:48:0b:26:b0:e7:76:60:c1:ea:5c:5d:
                    41:cd:90:96:b6:5f:c7:30:28:93:51:60:fd:cc:87:
                    c5:d9:e8:3e:ee:1e:ce:fb:2c:a7:a0:44:28:28:b4:
                    51:71:b2:6f:85:2a:0c:92:4a:f7:5e:6d:2f:02:66:
                    d8:83:13:43:1a:7b:e5:15:59:6d:22:ae:2e:e5:76:
                    59:23:a1:35:a4:90:60:91:e3:b4:a3:d8:6f:31:cd:
                    1b:bd:d4:3f:58:ac:e5:41:dd:b9:d9:1b:c7:f9:46:
                    b7:82:fa:58:f3:52:1d:56:db:2a:2c:32:cb:b3:7f:
                    c5:90:5a:06:50:0d:f6:38:5b:7f:ee:e0:6c:9d:a1:
                    78:23:60:68:32:10:66:6d:ac:24:4e:45:ee:c1:e0:
                    75:ca:c3:1f:8a:47:8b:a6:e4:64:58:de:db:99:95:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B9:14:B4:08:04:B8:54:D1:C6:A3:E5:A8:51:53:9C:38:C1:CA:B3
            X509v3 Authority Key Identifier:
                keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3c:f0:99:b9:18:a4:a9:73:e2:a9:4d:86:93:67:02:fd:c9:
         e6:28:d6:55:80:c1:b2:2a:06:cf:ac:e7:b0:d4:d6:be:01:88:
         b2:e1:fa:ec:ba:74:c0:c1:1b:ff:20:93:9f:9a:1d:df:86:19:
         9a:f7:3d:a9:83:f6:e2:8b:63:83:d5:47:6c:e1:b2:94:43:86:
         4b:0a:c4:68:cb:11:ca:23:db:db:f7:6d:97:b1:99:1f:b6:47:
         8c:a0:57:30:af:4c:7e:a4:61:b7:b2:36:38:3d:99:7a:8e:18:
         e8:63:9b:09:47:94:0d:8f:61:e2:90:7c:5a:f3:19:af:4b:b6:
         e6:5d:f2:69:1c:cf:21:44:a9:e9:7a:45:36:79:12:61:e9:59:
         2a:35:a5:34:bd:da:a2:46:77:42:02:d0:a9:a7:34:bc:07:ce:
         fd:ed:90:3b:44:c0:1a:9c:bb:2f:35:ab:a9:18:e6:2c:c1:e6:
         8e:5f:ca:16:3e:78:22:aa:80:65:07:92:0a:e6:c4:c9:f3:4e:
         8b:e9:1e:5d:3c:15:cf:fc:af:c8:41:3b:72:c2:1e:31:76:55:
         9b:7d:3a:05:97:ea:46:a4:af:0b:fc:2d:1e:af:0e:ef:67:37:
         fa:f5:59:0b:16:1c:89:2c:db:60:4c:34:1f:b2:d5:c7:ff:d3:
         12:48:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:29 2026 by rpki-client