This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
File:                     lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json)
Hash identifier:          3ymK3ghv3LP+/KngejTsSonF+AeN7byEY39G2nj1wY4=
Subject key identifier:   81:10:C0:BB:A3:6E:5E:DB:38:26:2A:87:58:03:DD:A1:13:AF:1A:C3
Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A
Certificate issuer:       /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
Certificate serial:       1EFC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
Manifest number:          1EEC
Signing time:             Sat 24 Jan 2026 15:51:03 +0000
Manifest this update:     Sat 24 Jan 2026 15:51:02 +0000
Manifest next update:     Sat 31 Jan 2026 15:51:02 +0000
Files and hashes:         1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: nCm9tB7gBCaro3IE+T/uPp61fttm7+NXivvk3RJDEto=)
                          2: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: 0mgkLjgKwKqnZvyXs7R0/CM7YveV0fnq5l57+ocSN+k=)
                          3: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: mcsOJ/PSjF+pyGpbfB/eXtIe/0dKHqcd9NaSWEDdEYo=)
                          4: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: G8JFHwSz1ocsPfiu5EdB881TguSYEm9QZ2Yz9AovjhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl
                          rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7932 (0x1efc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
        Validity
            Not Before: Jan 24 15:51:02 2026 GMT
            Not After : Jan 31 15:51:02 2026 GMT
        Subject: CN=6974ea66-07e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a0:b1:8e:9a:c4:0a:2b:d3:e1:72:7a:28:25:
                    00:ec:4d:ea:0d:a3:bf:77:31:fd:91:ec:08:d1:68:
                    9b:01:2e:f2:64:ed:a1:d7:19:bb:63:d1:b7:28:04:
                    37:6a:33:8e:43:0c:99:11:1e:04:60:8e:9b:19:f6:
                    63:67:03:de:59:cc:21:b5:6a:80:4b:38:c9:b8:bf:
                    0b:fe:6a:a5:dd:1f:22:fe:b7:90:75:34:6a:de:87:
                    89:e8:d2:da:90:e1:e1:35:39:92:ff:12:eb:bd:18:
                    96:a2:ff:24:2b:1c:14:e0:c5:8a:01:f1:76:3e:e5:
                    31:42:09:16:67:cc:e5:b3:b9:7e:4e:d3:f2:37:3d:
                    28:d6:b3:26:05:4a:46:16:0b:ca:00:bf:2e:a7:e3:
                    56:88:5e:de:b2:77:ba:9a:1b:43:34:51:04:68:e5:
                    f0:5d:76:35:b0:6a:02:b7:a4:a7:0c:ba:cf:ad:96:
                    4f:35:ab:29:58:d0:82:5d:c3:17:b2:db:ba:36:f4:
                    9f:ee:39:79:b5:33:da:64:18:b2:03:01:b1:5f:2f:
                    10:83:5a:42:13:34:98:83:99:4e:29:be:ee:8b:cb:
                    c1:46:c2:4e:35:39:07:d0:53:0c:98:2b:8f:9a:77:
                    76:56:28:65:b3:fa:4d:3c:29:fa:76:6b:f8:62:66:
                    9b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:10:C0:BB:A3:6E:5E:DB:38:26:2A:87:58:03:DD:A1:13:AF:1A:C3
            X509v3 Authority Key Identifier:
                keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a0:61:b3:8f:b8:b0:49:99:72:2b:a5:e9:38:49:57:ef:20:
         f2:0e:09:eb:51:45:19:64:79:cf:22:17:8c:63:51:72:85:27:
         25:38:86:c3:17:7b:40:91:97:e9:e7:93:53:c7:5e:69:8d:66:
         3f:c2:2f:f3:09:a0:66:d8:75:35:e5:3e:19:36:a3:9f:a4:c5:
         e7:33:d6:50:99:40:39:69:26:18:08:1c:17:52:8b:9d:53:8d:
         01:53:f9:0c:09:fb:83:04:d9:4d:a4:fc:a6:7a:fb:5c:da:b3:
         fd:df:78:1c:0d:61:ef:17:d3:ba:6f:a7:5e:d0:07:68:53:99:
         18:8b:14:19:18:08:61:af:b7:28:54:58:6e:1d:01:7f:89:60:
         c5:9e:c6:49:49:35:75:7d:bb:a6:0e:b0:48:56:c7:f7:49:cd:
         c5:90:96:a3:2d:b5:67:9e:a9:6f:ef:f1:0b:b1:aa:22:61:a0:
         d2:ff:04:b5:49:6f:a6:9e:be:72:4d:50:61:3e:24:b4:47:9a:
         a8:10:95:c1:be:c6:49:6e:36:81:17:04:64:d9:25:70:64:c0:
         0d:d8:65:87:a4:40:0f:51:94:0a:ab:68:12:c0:73:b0:8a:f6:
         a8:55:90:8e:73:8b:7f:c8:8c:b8:f1:a9:05:e2:94:2b:8e:d4:
         45:b1:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:40 2026 by rpki-client