This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
File:                     Lfmh43Whe46lYCe0WovWb5Z0fYY.mft (raw, json)
Hash identifier:          ELtj9NF+o7xLp93G8cOF+QKC/YGlapjtkyW3Rkfn234=
Subject key identifier:   DA:34:F5:16:1F:08:95:40:34:29:50:BE:E6:00:62:7E:03:58:AF:EA
Authority key identifier: 2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
Certificate issuer:       /CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
Manifest number:          0170
Signing time:             Sun 25 Jan 2026 03:23:31 +0000
Manifest this update:     Sun 25 Jan 2026 03:23:31 +0000
Manifest next update:     Sun 01 Feb 2026 03:23:31 +0000
Files and hashes:         1: Lfmh43Whe46lYCe0WovWb5Z0fYY.crl (hash: yW11cXY/2O85AehXq3+e1xCJ1eqXV8rUkNdqdDD6hGc=)
                          2: BA6555344DEE11F0B209371DC4F9AE02.roa (hash: CQr2hobxwoFHY9a4Ev/A2yb3z142YhpnnpTJ8f2F528=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
                          rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B6D, serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
        Validity
            Not Before: Jan 25 03:23:31 2026 GMT
            Not After : Feb  1 03:23:31 2026 GMT
        Subject: CN=69758cb3-f950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:0d:00:1d:6f:38:7e:80:0b:00:81:13:e8:
                    f6:64:c0:89:a8:cc:e4:1f:df:ae:80:be:98:47:0d:
                    5f:74:dc:a3:30:18:a7:2c:dd:35:84:c9:ab:5d:1d:
                    d9:0e:f1:9a:d1:f6:60:6b:be:a0:32:e9:af:20:82:
                    f1:82:e9:65:6d:e2:94:fb:c1:f6:1a:a9:eb:c7:e7:
                    a7:2d:1a:44:85:27:fb:0f:d5:b0:96:aa:1f:3e:57:
                    16:1f:19:2e:67:9e:2d:3b:15:19:34:3d:a1:03:5c:
                    7a:00:ca:b2:87:18:41:a8:67:09:10:60:37:97:a7:
                    ff:b9:72:c1:2e:d8:ca:7a:e9:a4:34:89:86:08:67:
                    0f:1b:5f:40:25:b1:de:54:79:6f:ef:7e:72:8b:7f:
                    cf:25:8b:a6:b3:c7:3c:04:cd:66:5d:c1:4e:10:3f:
                    2a:1e:0d:ab:cc:b3:c8:36:35:fa:fd:0e:0c:ec:5c:
                    02:9a:04:46:32:b6:f6:14:d7:a0:02:19:f7:7d:db:
                    58:57:a0:58:75:f1:a4:fe:fd:5e:6f:fa:c0:3a:86:
                    40:aa:21:1d:15:16:9e:33:35:97:db:57:ff:b8:71:
                    d4:38:5a:69:3e:15:e1:70:71:ef:43:3f:30:dd:f9:
                    c1:15:1e:cc:23:31:eb:c7:51:6a:46:92:44:88:06:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:34:F5:16:1F:08:95:40:34:29:50:BE:E6:00:62:7E:03:58:AF:EA
            X509v3 Authority Key Identifier:
                keyid:2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:55:06:85:d3:9c:1d:e3:50:37:ee:81:b7:8d:f4:e1:8f:51:
         5a:09:9c:12:63:ba:56:56:72:e0:7b:57:e7:bc:10:0c:93:82:
         9a:bc:eb:5e:5a:ad:27:ea:54:1d:98:17:3e:b1:f5:a1:21:ac:
         ec:61:e7:b9:19:57:2b:8c:6e:d3:10:3a:1f:31:21:1c:8f:76:
         a4:b4:3b:39:ad:10:54:e2:7a:e3:78:b3:d0:fa:e0:ac:51:c2:
         14:60:7b:a7:2e:ea:82:85:4e:0d:05:bb:a5:e6:87:da:c3:3f:
         d7:7b:02:48:5a:d4:ea:8f:55:2b:b5:5a:71:aa:9e:15:e5:46:
         00:b2:66:0e:1f:21:bd:cd:a4:e3:87:1a:5b:7c:42:e3:ef:d3:
         0c:83:5d:7f:91:85:df:8c:05:df:93:c4:40:23:7b:75:7b:a3:
         5b:b0:09:0c:5f:d3:c2:7e:60:10:32:51:6f:b4:c9:57:b4:36:
         75:a3:04:fd:cc:19:94:08:25:66:ba:1f:4f:32:78:3e:fa:d3:
         e8:93:46:49:bc:20:9e:1b:6a:cf:4e:ab:6c:98:59:28:7e:33:
         4c:23:e4:ab:b8:d2:91:15:47:f4:00:ac:d1:39:e0:cb:34:cd:
         17:74:08:ef:b7:33:f1:d4:dc:10:c9:8e:3f:52:37:f0:ff:50:
         46:66:81:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCNkQxMTAvBgNVBAUTKDJERjlBMUUzNzVBMTdCOEVBNTYwMjdCNDVBOEJENjZG
OTY3NDdEODYwHhcNMjYwMTI1MDMyMzMxWhcNMjYwMjAxMDMyMzMxWjAYMRYwFAYD
VQQDDA02OTc1OGNiMy1mOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApx0NAB1vOH6ACwCBE+j2ZMCJqMzkH9+ugL6YRw1fdNyjMBinLN01hMmrXR3Z
DvGa0fZga76gMumvIILxgullbeKU+8H2Gqnrx+enLRpEhSf7D9WwlqofPlcWHxku
Z54tOxUZND2hA1x6AMqyhxhBqGcJEGA3l6f/uXLBLtjKeumkNImGCGcPG19AJbHe
VHlv735yi3/PJYums8c8BM1mXcFOED8qHg2rzLPINjX6/Q4M7FwCmgRGMrb2FNeg
Ahn3fdtYV6BYdfGk/v1eb/rAOoZAqiEdFRaeMzWX21f/uHHUOFppPhXhcHHvQz8w
3fnBFR7MIzHrx1FqRpJEiAa24QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNo09RYf
CJVANClQvuYAYn4DWK/qMB8GA1UdIwQYMBaAFC35oeN1oXuOpWAntFqL1m+WdH2G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8xODFCODIyMEU3
OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9MZm1oNDNXaGU0NmxZQ2UwV292V2I1WjBm
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xmbWg0M1doZTQ2bFlDZTBXb3ZXYjVaMGZZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUI2RC8xODFCODIyMEU3OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9MZm1oNDNXaGU0
NmxZQ2UwV292V2I1WjBmWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHVQaF05wd41A37oG3jfThj1FaCZwSY7pWVnLge1fnvBAMk4KavOte
Wq0n6lQdmBc+sfWhIazsYee5GVcrjG7TEDofMSEcj3aktDs5rRBU4nrjeLPQ+uCs
UcIUYHunLuqChU4NBbul5ofawz/XewJIWtTqj1UrtVpxqp4V5UYAsmYOHyG9zaTj
hxpbfELj79MMg11/kYXfjAXfk8RAI3t1e6NbsAkMX9PCfmAQMlFvtMlXtDZ1owT9
zBmUCCVmuh9PMng++tPok0ZJvCCeG2rPTqtsmFkofjNMI+SruNKRFUf0AKzROeDL
NM0XdAjvtzPx1NwQyY4/Ujfw/1BGZoH4
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:24 2026 by rpki-client