This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File:                     LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier:          ORJA4fCGYOe60dJ/RVCopazq7CLF7VaSCeRXtxnTA5A=
Subject key identifier:   35:C4:C5:85:89:0C:B9:8E:64:30:FB:7B:3E:CA:3D:0A:69:53:C2:68
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer:       /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial:       CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number:          CA
Signing time:             Sun 25 Jan 2026 04:58:48 +0000
Manifest this update:     Sun 25 Jan 2026 04:58:47 +0000
Manifest next update:     Sun 01 Feb 2026 04:58:47 +0000
Files and hashes:         1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: AqKLnFD52o+OwpvTvVKJqx4MOH/3efGa6Cx1cGXItKc=)
                          2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
        Validity
            Not Before: Jan 25 04:58:47 2026 GMT
            Not After : Feb  1 04:58:47 2026 GMT
        Subject: CN=6975a308-fa0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:33:d9:42:d5:98:03:10:85:bb:13:94:0a:57:
                    a1:ba:48:94:26:41:24:ce:0d:c8:c8:c4:74:dc:44:
                    1a:c7:f6:89:88:46:4b:b5:6f:7e:ea:8b:90:28:31:
                    1c:5a:65:06:93:75:7b:0f:23:c0:82:79:0e:fe:aa:
                    cf:7b:3e:b6:8a:34:8e:4c:f3:23:6a:a2:b8:0c:ee:
                    4c:56:c8:91:2a:b7:c5:8b:de:29:c1:98:e9:92:59:
                    d0:b0:74:64:b9:ac:1f:01:2e:38:b7:e7:48:56:9e:
                    f8:86:9c:1b:2b:18:7e:fa:bb:37:f5:37:14:cf:9f:
                    fb:01:30:1b:ed:c0:15:54:4f:dd:81:72:7d:46:0b:
                    98:54:8d:3d:cd:11:75:5d:ff:34:1c:83:49:2f:b6:
                    c8:c7:3d:92:49:2a:67:c4:a0:92:34:ad:a2:7b:40:
                    6e:ba:8c:6c:d9:ee:32:4c:f3:f1:68:53:70:7c:0f:
                    ba:22:19:c3:d8:f7:c8:47:6c:0b:c4:b7:30:d7:c0:
                    e6:3e:80:76:96:b9:c1:f8:fb:77:ef:ad:c3:64:6b:
                    5d:0b:5e:63:f6:8a:24:b9:32:94:70:bf:a5:61:cd:
                    d3:72:c8:27:a4:67:c0:7e:ff:46:31:fd:97:5f:24:
                    a1:9c:6b:97:2b:4b:5c:df:dc:48:de:45:9a:dc:8e:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C4:C5:85:89:0C:B9:8E:64:30:FB:7B:3E:CA:3D:0A:69:53:C2:68
            X509v3 Authority Key Identifier:
                keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5a:17:5c:e7:85:27:99:8b:d6:71:bb:72:9c:4d:03:93:ca:
         29:00:ed:7a:75:03:fd:83:34:19:05:cf:89:a3:e3:27:55:6f:
         7d:95:2c:b1:ad:29:23:08:84:c5:6c:e0:a7:f4:8f:b6:47:4c:
         a0:5f:2a:1c:f2:56:57:e8:88:3b:37:ff:d2:04:a3:c0:51:de:
         31:45:e5:b4:41:36:88:64:b4:bc:be:12:8f:6c:d1:31:a7:74:
         04:96:05:5f:4c:8d:e1:7e:93:b1:2b:ad:02:e9:2b:56:6b:58:
         14:3f:81:63:25:15:82:db:41:30:23:7f:4f:5e:df:60:e1:fb:
         01:2c:fe:a5:33:aa:aa:9d:fa:9a:e1:d8:76:48:88:b7:34:58:
         33:2f:70:b8:de:4e:33:41:3e:99:c8:3a:70:bb:ff:ce:7e:8e:
         37:74:09:ad:3e:37:c8:6b:f2:95:61:1b:07:e0:06:42:a6:83:
         47:44:b9:f2:53:df:e8:1f:4c:2e:44:ba:1a:f3:cb:98:83:c6:
         c5:1d:e3:04:8f:b8:38:92:e5:8f:ec:9f:e3:ab:99:9b:27:fe:
         98:2a:f6:20:4f:4e:53:49:18:b7:4c:6d:4b:57:94:85:ad:d3:
         0d:5f:b8:b7:7a:67:1d:d5:2f:78:5e:c8:9c:40:79:e5:be:40:
         65:c2:1c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:57:22 2026 by rpki-client