This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft
File:                     ldQuwvRot-OPlYyPupMYARfcJuA.mft (raw, json)
Hash identifier:          jmQDdC3o9Qkp/1j91eXxm7NRvZTQMcV4QErhLzmcbME=
Subject key identifier:   F0:EE:87:3D:F7:6B:86:09:8D:6D:F2:70:F6:32:78:56:D7:17:78:FD
Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0
Certificate issuer:       /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft
Manifest number:          A6
Signing time:             Sun 25 Jan 2026 05:32:59 +0000
Manifest this update:     Sun 25 Jan 2026 05:32:58 +0000
Manifest next update:     Sun 01 Feb 2026 05:32:58 +0000
Files and hashes:         1: ldQuwvRot-OPlYyPupMYARfcJuA.crl (hash: JTMWVEq0W/xrzjclg11MQd4hsSYEseflA8VYgiUPLsM=)
                          2: 4210D4508CD711F0A2DFAA45C4F9AE02.roa (hash: 2JnfU/Mgp4zZ19X7p0k0eCs4HoUbNZM1uROYF0brrz8=)
                          3: B3849A9A359311F09B54926FC4F9AE02.roa (hash: Y+aC1xM6nmmoKwU/+TkwylgFTc7TBvkghCXTXAy84ng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0
        Validity
            Not Before: Jan 25 05:32:58 2026 GMT
            Not After : Feb  1 05:32:58 2026 GMT
        Subject: CN=6975ab0b-55de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:88:db:47:4a:7e:6a:3c:a8:9b:4d:18:6c:
                    44:15:6d:d3:06:82:ed:91:92:ea:99:6f:a3:c7:33:
                    39:57:3c:91:a0:03:f4:34:90:71:c6:90:a3:06:79:
                    10:33:1d:39:39:15:96:18:98:cd:60:10:05:60:65:
                    12:ed:e1:cc:49:57:19:87:9f:ab:92:63:06:db:c9:
                    e5:d2:05:f9:9c:88:35:8e:be:9f:28:30:f8:62:e3:
                    05:7b:ae:bb:cb:be:1f:c1:9e:6d:33:b0:a1:99:7c:
                    03:cc:b6:1e:a3:a8:86:11:4b:75:29:cf:a2:a2:52:
                    c6:d5:1d:c4:99:3d:85:fa:29:d7:96:72:b4:f6:ef:
                    32:73:f6:91:ef:b7:c0:a5:40:d4:bb:6a:f2:f0:8e:
                    2e:c7:6f:53:f7:c8:75:b7:0e:03:4a:32:53:81:78:
                    5e:84:f6:0e:5b:ee:6f:5b:d1:0b:e5:24:2a:d4:c2:
                    61:95:e8:0a:f5:31:2b:7b:8f:71:5e:00:6f:fa:5d:
                    68:1c:0a:26:7e:37:53:52:f4:d5:ca:26:d4:2b:04:
                    9f:e3:46:45:12:13:b2:20:a3:f9:4e:27:a9:ea:62:
                    04:f4:c8:34:df:f6:dc:ba:c2:1f:f0:9b:3e:cc:b0:
                    a5:04:a7:c8:55:67:52:7e:b5:96:20:8e:d0:7e:fd:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EE:87:3D:F7:6B:86:09:8D:6D:F2:70:F6:32:78:56:D7:17:78:FD
            X509v3 Authority Key Identifier:
                keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:16:ee:43:c4:99:07:03:b8:97:38:9e:1f:71:9e:06:28:fd:
         60:16:14:6b:f8:da:53:90:67:b3:14:9c:b5:35:32:b1:03:09:
         85:75:8b:a1:7f:e0:4f:db:e8:8c:24:c2:cc:d3:27:7a:e9:dc:
         e1:91:f9:84:01:7a:74:5d:a2:23:3b:cc:dc:e2:51:73:53:51:
         47:23:a5:f1:d1:96:7b:79:8c:6d:e8:01:6b:f6:66:66:87:90:
         85:31:d0:5e:2b:39:36:e1:29:38:8e:f7:6b:ba:83:3d:c0:e5:
         82:ed:1e:f3:64:68:0f:a8:17:fb:48:53:95:50:c1:6f:67:e1:
         f9:df:71:10:7f:12:08:ad:29:ae:28:9e:dd:20:35:2b:1e:87:
         13:9b:a1:8f:3f:d2:fa:f9:ec:4b:05:74:0c:33:f0:e2:12:7b:
         1f:38:d1:9a:10:f4:12:6a:f0:07:09:3a:37:ef:46:55:62:41:
         c2:1a:b8:c8:12:7e:4f:0b:25:fb:86:59:90:0e:6e:95:76:36:
         e5:6f:d2:d1:ed:c7:0d:7b:93:12:4c:32:cf:c7:de:cb:36:11:
         de:76:d4:bb:e1:0f:ba:d3:ef:8c:fb:b7:c6:cf:3d:50:1e:41:
         4d:ce:60:de:56:0e:e9:5e:dd:03:a3:0d:c9:7e:15:fc:cb:39:
         a4:64:6e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:29:58 2026 by rpki-client