This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
File:                     LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json)
Hash identifier:          XcX0vGMDuREmXl/gh5V8T1LS+OZ8m+FUzguVjs39mnU=
Subject key identifier:   38:1D:AC:54:22:E4:26:1C:A6:1F:2A:39:86:17:7E:5A:44:FA:D8:01
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Certificate issuer:       /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial:       092F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
Manifest number:          0918
Signing time:             Sat 24 Jan 2026 19:43:14 +0000
Manifest this update:     Sat 24 Jan 2026 19:43:14 +0000
Manifest next update:     Sat 31 Jan 2026 19:43:14 +0000
Files and hashes:         1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: VgGQ68/9kzimCBoAO3rQ1jPTHsOEcVw7jpzqp2igi6w=)
                          2: E984A66AAC3211F09AD8CA60C4F9AE02.roa (hash: 8zEE98x0PtTnTuANGMUxq1+2Rj/m6rmYMLTVUh60RuQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2351 (0x92f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
        Validity
            Not Before: Jan 24 19:43:14 2026 GMT
            Not After : Jan 31 19:43:14 2026 GMT
        Subject: CN=697520d2-742c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:ea:05:b8:75:6b:b2:2b:07:b8:f5:8a:af:
                    21:08:83:48:59:97:6f:b2:f3:e8:d1:ba:8c:77:d8:
                    89:76:89:ae:61:1c:96:f6:86:d4:47:53:78:e1:51:
                    98:e2:50:70:02:2a:ee:34:fa:c4:b8:44:45:1a:72:
                    82:88:6f:6a:a0:60:a2:bd:7c:ff:df:e2:63:68:26:
                    c9:0a:30:19:da:37:a1:14:0b:ab:17:06:f5:91:e0:
                    db:7e:f5:65:06:52:23:2f:ce:67:fa:5e:19:49:6b:
                    f1:c4:43:08:9a:fe:a1:8d:1c:87:67:61:5c:9e:df:
                    19:a0:63:b3:99:a3:7d:9f:9b:9a:df:2d:e6:7a:c0:
                    82:fa:20:d9:10:20:be:69:18:a9:3c:59:0a:09:61:
                    25:56:d6:c5:b0:61:b4:a7:72:fa:46:f9:39:89:b0:
                    81:13:a4:4a:16:a1:13:2c:dc:c4:07:f4:28:59:7a:
                    ef:5f:94:ba:e6:eb:32:20:0b:d2:f0:39:93:4e:84:
                    5b:d4:30:0b:ee:d7:8e:18:ee:f0:2b:c0:ef:eb:b8:
                    4c:ab:fa:ad:6b:48:2b:31:61:a5:80:84:28:c8:de:
                    b0:2b:63:01:f5:2e:4d:3f:a9:95:d3:c0:5e:ea:52:
                    fa:f3:61:ba:14:f0:72:0b:9b:f1:92:64:59:f8:7a:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1D:AC:54:22:E4:26:1C:A6:1F:2A:39:86:17:7E:5A:44:FA:D8:01
            X509v3 Authority Key Identifier:
                keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:42:d0:70:d9:8c:65:e0:c9:a8:dd:9c:e6:4b:14:ab:28:1a:
         b5:3a:f7:db:54:a3:3d:05:8c:1c:02:31:8e:70:9d:12:93:55:
         6e:ef:b1:7c:fe:5e:8e:f4:1d:29:d2:56:32:ac:a3:f3:73:3a:
         4d:e2:bb:c9:8e:fd:44:a6:4e:15:4f:aa:4e:17:c4:74:11:14:
         07:1b:50:2a:b9:e4:aa:62:59:67:be:4c:5e:6b:8d:8c:74:ae:
         9c:fb:a1:09:21:76:e1:bf:6f:50:19:de:ca:33:22:fd:d3:cc:
         a2:0b:27:23:56:87:4b:72:7a:79:cf:be:03:2b:11:9c:85:33:
         4c:fd:1f:7f:f7:ce:a3:c1:e6:2b:3a:4b:80:22:44:66:37:dc:
         3f:86:ff:d8:cd:ca:e5:41:4b:7d:b2:f4:ab:d9:d0:5d:37:49:
         8e:de:38:58:31:13:8a:f0:32:32:ed:6f:a8:d8:84:37:de:ed:
         be:4f:47:9b:b2:e6:69:05:d1:28:30:d8:f2:bf:bb:66:b3:66:
         fe:eb:60:ac:79:8c:be:82:f7:26:fa:96:cd:57:67:ca:b5:3a:
         dc:65:03:a3:64:74:b1:90:d7:73:5d:7e:27:be:53:25:ac:04:
         5a:21:eb:ea:98:7a:7d:bd:b9:a2:c6:bd:b4:e6:a2:91:09:2f:
         cc:75:11:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC
MERGRTNDRjQwHhcNMjYwMTI0MTk0MzE0WhcNMjYwMTMxMTk0MzE0WjAYMRYwFAYD
VQQDDA02OTc1MjBkMi03NDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmmLqBbh1a7IrB7j1iq8hCINIWZdvsvPo0bqMd9iJdomuYRyW9obUR1N44VGY
4lBwAiruNPrEuERFGnKCiG9qoGCivXz/3+JjaCbJCjAZ2jehFAurFwb1keDbfvVl
BlIjL85n+l4ZSWvxxEMImv6hjRyHZ2Fcnt8ZoGOzmaN9n5ua3y3mesCC+iDZECC+
aRipPFkKCWElVtbFsGG0p3L6Rvk5ibCBE6RKFqETLNzEB/QoWXrvX5S65usyIAvS
8DmTToRb1DAL7teOGO7wK8Dv67hMq/qta0grMWGlgIQoyN6wK2MB9S5NP6mV08Be
6lL682G6FPByC5vxkmRZ+Hq2PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgdrFQi
5CYcph8qOYYXflpE+tgBMB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF
MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw
QllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrQtBw2Yxl4Mmo3ZzmSxSrKBq1OvfbVKM9BYwcAjGOcJ0Sk1Vu77F8
/l6O9B0p0lYyrKPzczpN4rvJjv1Epk4VT6pOF8R0ERQHG1AqueSqYllnvkxea42M
dK6c+6EJIXbhv29QGd7KMyL908yiCycjVodLcnp5z74DKxGchTNM/R9/986jweYr
OkuAIkRmN9w/hv/YzcrlQUt9svSr2dBdN0mO3jhYMROK8DIy7W+o2IQ33u2+T0eb
suZpBdEoMNjyv7tms2b+62CseYy+gvcm+pbNV2fKtTrcZQOjZHSxkNdzXX4nvlMl
rARaIevqmHp9vbmixr205qKRCS/MdRGg
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:11 2026 by rpki-client