This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
File:                     ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json)
Hash identifier:          npOi8D/2xXZrBghm98WRgTlyisV3/4KkS+6o0wktpu0=
Subject key identifier:   08:E3:FA:E8:3B:C1:FC:E3:6F:5F:27:63:5F:93:49:79:B0:5B:3A:B2
Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17
Certificate issuer:       /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
Certificate serial:       04CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
Manifest number:          04C6
Signing time:             Sat 24 Jan 2026 23:05:46 +0000
Manifest this update:     Sat 24 Jan 2026 23:05:45 +0000
Manifest next update:     Sat 31 Jan 2026 23:05:45 +0000
Files and hashes:         1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: XAnkjrDCj01GtEdbX8Ab3e0AgToQLUtWK8pXrJu/Cxc=)
                          2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: 921JP5H5fjH76EWVU9vP1eft5QkxWkqi2+HDxiCXE7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl
                          rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1228 (0x4cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
        Validity
            Not Before: Jan 24 23:05:45 2026 GMT
            Not After : Jan 31 23:05:45 2026 GMT
        Subject: CN=6975504a-7ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:7e:e9:94:d9:74:fd:07:43:00:e0:4f:90:
                    b1:12:ff:9d:4a:94:86:91:ec:c1:a2:42:8d:28:f5:
                    25:a1:d4:65:d6:c5:09:2f:34:bc:a5:00:56:b5:29:
                    a6:90:64:05:da:ca:c5:1e:21:de:b5:c0:17:6f:63:
                    80:61:8a:8b:96:b6:52:e8:97:53:e4:31:d1:6d:62:
                    25:77:23:13:04:ec:b4:9a:26:88:b0:88:88:23:81:
                    07:19:5b:e5:64:60:96:12:98:d2:17:b2:ae:5a:78:
                    9d:be:a4:ba:35:a7:df:f4:ee:f1:59:75:d1:01:f0:
                    8d:6c:1c:ba:89:41:34:96:41:58:4f:84:26:64:7b:
                    d7:0d:d3:41:86:26:db:7c:3b:c0:71:01:5c:56:28:
                    a4:99:36:60:66:a6:48:1b:aa:80:13:d9:fe:51:ba:
                    76:4a:10:9e:31:4d:07:69:9d:af:42:58:4b:fa:43:
                    a5:d2:74:09:04:a9:2d:6a:6d:9a:e4:ad:e4:f7:f8:
                    99:50:23:5a:e1:90:58:94:1e:7e:84:77:a7:6d:51:
                    af:8a:99:d7:41:a1:8e:45:c3:d3:f5:cc:0a:4f:43:
                    14:e1:7c:7f:92:03:84:6f:ce:11:18:06:1d:74:1c:
                    74:8a:f2:dd:8c:b6:98:ed:a1:ab:0a:b2:12:53:bf:
                    ca:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E3:FA:E8:3B:C1:FC:E3:6F:5F:27:63:5F:93:49:79:B0:5B:3A:B2
            X509v3 Authority Key Identifier:
                keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2f:10:ed:9e:c3:38:87:24:2e:53:42:49:70:ea:7e:b0:02:
         b7:38:ef:92:58:40:2b:0e:94:13:c0:4b:51:49:19:9c:0c:55:
         c3:c9:8d:6a:22:65:8b:5b:cb:e8:9f:95:f5:ca:72:67:25:c8:
         1a:10:71:81:99:06:8e:da:1c:5c:1c:d0:c8:02:f6:65:ff:00:
         1c:0a:0e:e0:1a:8e:be:c1:99:55:18:03:30:1c:73:81:78:e7:
         25:42:54:e9:4a:a7:68:02:8f:3b:51:ca:fb:3a:57:cd:b0:ca:
         31:4e:40:db:d6:a0:4e:52:e8:e6:c3:f5:1d:a4:f4:5f:9b:3b:
         6a:be:f2:45:86:0b:73:6a:1b:2c:38:d4:6d:1e:f2:80:a0:4a:
         a9:26:6d:3e:5d:aa:61:ec:28:d2:af:fd:13:c8:30:79:cc:62:
         9c:78:33:96:d7:75:20:aa:e6:1d:bf:7d:37:ab:dd:5e:fe:3f:
         5a:0c:26:f0:1f:9f:b9:19:d3:d7:65:7a:d3:9a:4c:be:cd:3c:
         3b:34:63:02:df:25:ba:e8:c0:81:2e:ad:7e:f7:ee:97:c1:9b:
         01:43:cf:96:6f:f2:7c:64:c7:d2:b4:38:8e:2d:62:17:9a:92:
         4f:32:a1:c9:07:b6:41:52:7e:df:83:74:96:03:6d:ac:fc:9a:
         f9:c3:4f:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QUIwMDExMTAvBgNVBAUTKDk2RDFBNTk5NDlBMUJCN0EyNjZENzJBMEYxMkZGQ0Q1
RjUwNTlGMTcwHhcNMjYwMTI0MjMwNTQ1WhcNMjYwMTMxMjMwNTQ1WjAYMRYwFAYD
VQQDDA02OTc1NTA0YS03ZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0td+6ZTZdP0HQwDgT5CxEv+dSpSGkezBokKNKPUlodRl1sUJLzS8pQBWtSmm
kGQF2srFHiHetcAXb2OAYYqLlrZS6JdT5DHRbWIldyMTBOy0miaIsIiII4EHGVvl
ZGCWEpjSF7KuWnidvqS6Naff9O7xWXXRAfCNbBy6iUE0lkFYT4QmZHvXDdNBhibb
fDvAcQFcViikmTZgZqZIG6qAE9n+Ubp2ShCeMU0HaZ2vQlhL+kOl0nQJBKktam2a
5K3k9/iZUCNa4ZBYlB5+hHenbVGvipnXQaGORcPT9cwKT0MU4Xx/kgOEb84RGAYd
dBx0ivLdjLaY7aGrCrISU7/KBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjj+ug7
wfzjb18nY1+TSXmwWzqyMB8GA1UdIwQYMBaAFJbRpZlJobt6Jm1yoPEv/NX1BZ8X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjAwMS84M0Q1NEU1MjU3
NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUzb21iWEtnOFNfODFmVUZu
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x0R2xtVW1odTNvbWJYS2c4U184MWZVRm54Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjAwMS84M0Q1NEU1MjU3NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUz
b21iWEtnOFNfODFmVUZueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1LxDtnsM4hyQuU0JJcOp+sAK3OO+SWEArDpQTwEtRSRmcDFXDyY1q
ImWLW8von5X1ynJnJcgaEHGBmQaO2hxcHNDIAvZl/wAcCg7gGo6+wZlVGAMwHHOB
eOclQlTpSqdoAo87Ucr7OlfNsMoxTkDb1qBOUujmw/UdpPRfmztqvvJFhgtzahss
ONRtHvKAoEqpJm0+Xaph7CjSr/0TyDB5zGKceDOW13UgquYdv303q91e/j9aDCbw
H5+5GdPXZXrTmky+zTw7NGMC3yW66MCBLq1+9+6XwZsBQ8+Wb/J8ZMfStDiOLWIX
mpJPMqHJB7ZBUn7fg3SWA22s/Jr5w08j
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:59:01 2026 by rpki-client