This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
File:                     L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft (raw, json)
Hash identifier:          EoCwcBCtVUR3wVSWUVfghBsTGZJZseVHLEfRBE82ao8=
Subject key identifier:   55:17:B7:A4:38:BC:C0:8B:FA:23:FB:26:D3:61:BB:FE:4B:75:02:A0
Authority key identifier: 2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59
Certificate issuer:       /CN=A918049D/serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
Manifest number:          30
Signing time:             Sun 25 Jan 2026 06:38:22 +0000
Manifest this update:     Sun 25 Jan 2026 06:38:22 +0000
Manifest next update:     Sun 01 Feb 2026 06:38:22 +0000
Files and hashes:         1: L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl (hash: UWAKsZS+fHnMOxf2jWkzNDangYtaMDllAoGlJlyvooM=)
                          2: 541D17D2B2C811F092F27081C4F9AE02.roa (hash: Bo/+kZ5KOHNuiEOOVJQGjVbjfu7e6AaHxR3mGm0eu6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl
                          rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918049D, serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
        Validity
            Not Before: Jan 25 06:38:22 2026 GMT
            Not After : Feb  1 06:38:22 2026 GMT
        Subject: CN=6975ba5e-438d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:47:1b:17:75:26:0d:9b:20:c9:ae:e4:c9:
                    77:04:ee:88:24:3b:18:51:6d:75:8f:ae:83:8c:cd:
                    df:91:c3:3a:9e:8b:4f:e4:1d:cf:54:21:8f:65:27:
                    11:88:61:50:03:53:37:85:18:66:7d:93:30:20:ab:
                    87:44:84:2f:49:a5:3e:6f:af:8d:19:07:59:75:28:
                    c9:6d:22:20:83:35:2a:3f:3d:02:fe:d0:36:1a:87:
                    24:51:46:f7:42:0e:bc:40:45:4d:00:c7:c1:ff:04:
                    5f:a4:17:c1:40:62:3f:4a:a4:14:cd:c5:00:37:97:
                    b9:d2:31:6f:7d:b0:3a:af:b6:c1:d1:70:c3:1b:89:
                    cd:52:f6:1e:7d:ed:ea:0f:03:c0:02:3b:e3:e5:cd:
                    e8:f6:62:f9:4b:8e:a0:63:29:3b:79:17:89:9a:03:
                    6a:fa:3c:3e:91:96:ab:c6:4a:37:ec:db:e4:14:ed:
                    07:2e:9e:13:60:3c:b9:0c:6e:fc:97:99:a3:7a:fb:
                    4e:c2:5b:73:dd:fe:40:c8:61:8e:c5:26:e8:39:19:
                    33:ec:c7:a8:a1:2c:4c:f4:d8:44:16:ee:c7:dc:c0:
                    85:2d:ff:02:ff:60:0e:24:41:3d:33:8a:b4:ef:8f:
                    7c:37:ed:7f:69:1b:da:8c:73:9a:27:ff:24:67:d2:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:17:B7:A4:38:BC:C0:8B:FA:23:FB:26:D3:61:BB:FE:4B:75:02:A0
            X509v3 Authority Key Identifier:
                keyid:2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d2:25:db:31:9e:63:f0:54:96:44:7a:5e:fc:2f:d4:af:8f:
         05:7e:4a:b4:63:78:21:14:ed:23:93:26:c7:c1:ec:f8:65:a9:
         11:92:c2:f5:6a:11:ad:81:59:59:38:45:d6:0a:69:85:1f:67:
         18:4d:ef:f6:25:4a:19:f5:c6:73:97:08:04:c4:94:75:cc:dd:
         71:6a:42:bc:c6:ee:c2:3c:6e:53:c7:b3:f6:8f:cf:18:2b:53:
         c9:8d:1b:ea:19:95:06:49:9f:86:c0:f7:2d:57:bf:f1:62:f8:
         01:86:04:e3:0f:65:82:52:f4:ad:d7:44:32:b0:1c:9e:3e:e8:
         34:62:c4:5a:e5:2e:66:7a:58:30:c7:38:eb:2c:eb:96:d6:d9:
         6a:f8:56:4c:f9:47:ad:d0:fd:46:d9:42:00:e4:53:ae:40:6e:
         4c:1a:45:77:85:82:4e:a1:b6:39:0f:d3:d4:56:d7:e1:0d:bb:
         07:55:90:5c:bf:41:07:31:e4:d5:88:41:bb:af:7c:9a:51:31:
         bd:23:da:db:ea:b7:fe:2d:b3:00:fb:84:e4:7a:e1:0d:c0:47:
         77:1b:16:a0:34:03:30:1b:22:7e:8e:a8:7f:4c:5d:dc:44:1e:
         d7:cf:7d:7c:4b:cc:e4:16:e4:5b:20:0f:91:f8:89:9a:ca:21:
         1f:57:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:34 2026 by rpki-client