This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
File:                     LViYkEjCGfAQiK5yv64JcN9dpjY.mft (raw, json)
Hash identifier:          viD0kZS7qE6s/X7hL0QUZXALP3BvtNqyrxWOP1JE770=
Subject key identifier:   F4:CF:7A:C0:DB:29:2A:EE:F1:98:D0:58:79:24:AB:CA:9C:0E:E1:D2
Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
Certificate issuer:       /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Certificate serial:       0A10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
Manifest number:          09FE
Signing time:             Sat 24 Jan 2026 19:19:50 +0000
Manifest this update:     Sat 24 Jan 2026 19:19:50 +0000
Manifest next update:     Sat 31 Jan 2026 19:19:50 +0000
Files and hashes:         1: LViYkEjCGfAQiK5yv64JcN9dpjY.crl (hash: sOQYM9cK32JJ2IxdeAlHShpLmQxyCaZFfIvcuTQkzmM=)
                          2: 87818166020D11EF916F0D65C4F9AE02.roa (hash: 4GMMhSURpIBkWAvEdhOIay2AAC4Jz1BwpUEUv1geigk=)
                          3: B0EE80B28FBB11EAA0855C73C4F9AE02.roa (hash: H4bAXJJ+0ihkBBeD63YdMNR3q/0ZrnIacu1H+UbOy6o=)
                          4: E5E0FAAC020D11EF9DEBCD65C4F9AE02.roa (hash: /FujlFAyrY1jTg6+i8dggU4h4o/QM+HKDMk+iHCipo8=)
                          5: 76A97C669D2C11F0AB031860C4F9AE02.roa (hash: Rh+7VaIgTDzOZzxYufOQIB2tf+6Tujram/pUAZ0Ovn4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
                          rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2576 (0xa10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
        Validity
            Not Before: Jan 24 19:19:50 2026 GMT
            Not After : Jan 31 19:19:50 2026 GMT
        Subject: CN=69751b56-050b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:d1:11:74:c1:ce:34:1c:5a:3d:51:8a:a4:
                    55:36:46:5d:32:c6:2a:9e:2b:44:92:23:68:05:f4:
                    ef:af:03:69:59:e2:32:ba:fb:1b:89:42:40:be:4a:
                    01:8c:72:fc:b5:78:ab:c2:1f:90:0a:7e:16:46:00:
                    04:40:f3:e7:f3:f1:cd:73:53:39:1b:6c:10:6c:6e:
                    f9:93:93:88:01:dd:4a:e1:6d:81:9f:1d:c9:10:0a:
                    bb:9d:4a:6c:8e:fe:c8:03:59:d4:a3:df:13:25:d5:
                    87:94:c7:a2:e6:2e:48:e5:94:44:ce:8c:07:bf:e4:
                    06:49:37:05:1d:17:36:3a:cf:dc:07:71:3a:e4:ac:
                    32:b8:ef:06:84:ad:65:13:27:b6:28:c6:86:3b:e8:
                    7b:94:77:b7:1a:a4:39:44:84:61:72:6e:81:d8:ae:
                    8a:32:e5:0f:76:13:c4:c5:83:50:2a:89:83:be:28:
                    b2:5f:33:d0:2c:bc:bb:a3:f6:2d:7c:28:43:df:48:
                    dd:3e:4a:b7:5c:f9:6c:97:37:2a:70:79:01:57:45:
                    ad:69:2d:3c:02:ea:ac:13:6d:6e:55:33:8d:36:b3:
                    ea:f1:93:33:87:38:2b:c3:5d:94:a9:c8:a6:db:c6:
                    51:29:d5:92:7e:e3:f8:62:37:0d:2f:9b:4b:0b:5e:
                    84:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CF:7A:C0:DB:29:2A:EE:F1:98:D0:58:79:24:AB:CA:9C:0E:E1:D2
            X509v3 Authority Key Identifier:
                keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:48:7a:71:89:06:39:d1:87:a6:8b:7f:e3:94:06:bf:71:78:
         09:4c:87:f0:c8:7d:b8:bb:ba:80:d5:cb:76:c5:50:c0:7d:e9:
         b5:be:c4:7c:d9:3b:a2:aa:b6:e4:3f:a7:70:6b:d7:7a:8d:29:
         44:c0:f9:a3:3e:33:8b:5c:9f:92:d6:d1:8a:10:19:09:c4:60:
         26:14:ff:df:3d:74:b7:74:99:88:0d:e2:fd:06:29:78:33:2f:
         d6:0c:e9:d4:76:37:a6:6b:72:a5:59:4d:e3:60:79:af:46:47:
         80:1e:8a:00:9a:09:61:8a:ec:43:ae:cc:1b:21:2e:13:f2:49:
         dc:1b:c9:94:cc:3a:bb:30:e1:ec:95:e6:82:6e:58:68:11:a4:
         5a:be:f2:85:63:61:f1:f6:c9:3b:de:63:26:8e:e8:7f:d3:48:
         a1:23:23:65:53:99:2f:31:84:b7:b3:46:b1:23:29:b8:15:91:
         9a:53:86:81:bc:94:e3:1e:71:e1:29:1d:e3:39:ca:77:28:c2:
         90:0d:22:1d:36:2f:cb:ba:05:f9:10:91:3a:ab:dc:d9:a2:23:
         6c:bb:c8:a2:2f:dd:08:fe:08:ed:37:aa:51:66:b7:74:f7:ad:
         fa:e2:8b:ac:a1:9f:80:5b:72:4d:d1:81:27:90:3a:13:bc:cd:
         e5:bc:bc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:00:57 2026 by rpki-client