This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
File:                     L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json)
Hash identifier:          ybu56mtSA3QusvkfLmHio3f7f/8SoD04ktT+LfERBq8=
Subject key identifier:   67:5D:A6:A4:A2:1B:C0:A3:B6:79:8C:21:D3:4B:48:43:53:6B:B8:3D
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Certificate issuer:       /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial:       0BDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
Manifest number:          0BC0
Signing time:             Sat 24 Jan 2026 18:30:43 +0000
Manifest this update:     Sat 24 Jan 2026 18:30:42 +0000
Manifest next update:     Sat 31 Jan 2026 18:30:42 +0000
Files and hashes:         1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: DAHhl7OfXWyZHQRe8IsjJhjWrU4rQyNLOlSBhSjoOvc=)
                          2: 843804BE744C11F0B13EF277C4F9AE02.roa (hash: KVcRx1AIexKUEoEWUnnAhnjFkWCaA/g6jhGPzAyzQQ4=)
                          3: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: eX92U/H+ZCVecCeGgTVqWhOCqzFSaTsYmsLKYsy4M8s=)
                          4: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: kiwqoX3h4ubEB/f3uAb3AdDh++JWYwrrl7T90TiKXzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3034 (0xbda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
        Validity
            Not Before: Jan 24 18:30:42 2026 GMT
            Not After : Jan 31 18:30:42 2026 GMT
        Subject: CN=69750fd2-4deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2b:aa:d9:8c:b4:16:ef:4c:6d:1a:df:a6:e8:
                    bc:52:8a:53:aa:b4:28:e0:97:8d:cb:bd:22:cb:a0:
                    05:5f:4e:fe:3b:e5:12:a6:cc:86:aa:ba:4e:3a:2b:
                    f4:96:06:f0:a3:3b:34:25:9a:89:44:fe:2c:f6:61:
                    2a:0b:9a:6f:93:b5:63:68:cc:46:ad:b3:ea:24:37:
                    a8:99:03:3e:2a:7d:92:2b:ca:dc:4b:b8:63:f8:b7:
                    8f:99:ab:af:28:67:a7:39:95:4b:d9:e7:23:9b:b3:
                    db:65:54:35:b3:44:71:c4:6e:a1:fd:87:5d:9e:05:
                    1f:cb:7b:94:29:d1:04:03:35:e3:d0:98:32:6f:9f:
                    31:32:68:06:74:51:4b:16:dd:cf:d1:66:74:95:5a:
                    bc:1d:53:e4:ae:00:9f:d9:25:2c:a1:0d:dc:ce:cf:
                    b6:2b:a8:bd:fa:ef:bc:9e:74:0e:56:28:7b:26:19:
                    3b:24:d9:65:66:2e:21:35:e6:e3:06:24:b2:d7:3a:
                    0d:31:cf:35:41:50:05:39:0f:4b:eb:1a:76:d2:9c:
                    8c:a6:44:31:2e:8d:af:b5:74:fd:16:cd:06:20:61:
                    f9:02:3d:96:fb:23:1c:c0:18:4e:54:79:b4:a6:e7:
                    78:eb:13:6d:7e:fc:62:09:09:da:e6:88:97:f1:f1:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5D:A6:A4:A2:1B:C0:A3:B6:79:8C:21:D3:4B:48:43:53:6B:B8:3D
            X509v3 Authority Key Identifier:
                keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2d:2a:98:96:ad:94:9b:34:75:fa:94:12:0e:6d:6e:ac:bd:
         66:e0:95:8d:d2:58:15:02:72:ad:92:3f:b3:86:5e:99:f9:e2:
         76:cd:53:1c:eb:e0:23:a8:76:a6:06:b8:5c:26:fa:2e:c3:a6:
         20:ed:7c:9a:66:00:ee:23:f2:20:98:44:b7:6e:d6:d7:e8:1d:
         be:d0:d2:88:7b:16:95:41:ef:f9:dd:4c:dc:40:62:39:5c:c4:
         d0:62:e3:1d:d4:d0:ec:2d:6c:c3:8a:f2:ab:95:71:7c:bc:93:
         9f:32:2f:b7:21:6b:39:4b:fd:2f:e2:3f:4a:4a:dc:51:66:c1:
         ad:e6:db:97:0a:3b:75:5d:98:2d:75:4b:91:91:3b:de:6e:11:
         ab:af:06:96:8d:36:8d:9d:b1:1c:bc:c1:c2:a7:4d:6f:eb:5e:
         6d:7f:82:9b:99:8f:8d:b5:e1:86:a5:20:37:ac:19:2d:59:8b:
         f1:01:9c:10:ba:b1:8d:f5:23:87:28:a9:1f:44:22:f9:15:bd:
         da:c5:c4:9b:93:e5:1d:e3:9a:d9:21:31:f5:8e:54:2c:9c:64:
         fd:5c:85:3c:d2:f6:04:b9:a3:d0:4c:2c:6c:b0:fe:05:88:96:
         8a:c3:cf:07:5b:cd:ec:b8:d3:42:e1:f8:cc:77:53:39:b3:69:
         ff:88:8b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:18 2026 by rpki-client