This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
File:                     LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json)
Hash identifier:          gOnT7fqp7SjRTGLndjMakjHEFBL1Mtpuotlg3+DcJ8g=
Subject key identifier:   40:02:34:29:44:E2:29:1F:78:FA:AF:E1:AC:41:9B:C1:73:76:48:3F
Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31
Certificate issuer:       /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31
Certificate serial:       126D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
Manifest number:          124C
Signing time:             Sat 24 Jan 2026 16:51:03 +0000
Manifest this update:     Sat 24 Jan 2026 16:51:03 +0000
Manifest next update:     Sat 31 Jan 2026 16:51:03 +0000
Files and hashes:         1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: 0qiGiJizzo4UVfG31lEam+tcFw8ss5BsAz8/M5Z2N/U=)
                          2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: nRERsNzlprKA9xVdUB5MTKCV5NYn4X6gB4JWqfSoRiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl
                          rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4717 (0x126d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31
        Validity
            Not Before: Jan 24 16:51:03 2026 GMT
            Not After : Jan 31 16:51:03 2026 GMT
        Subject: CN=6974f877-2641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:ad:b0:c1:b3:3a:e7:c5:8a:e4:d4:d3:c1:
                    16:69:5a:ea:cd:b1:fa:8f:2b:0d:dd:ce:cf:60:32:
                    31:c3:0e:ee:a0:e5:78:d9:4d:ae:44:47:41:86:a0:
                    0d:4e:53:69:bb:92:81:53:fb:c7:73:21:7f:36:e4:
                    af:9b:9d:18:81:e4:1b:ef:95:89:27:5a:e4:5a:1c:
                    6e:46:dd:09:98:7d:ec:fd:34:57:eb:12:97:df:db:
                    9a:f6:12:6e:e3:9e:cb:95:80:c1:0c:cd:c6:ec:28:
                    66:19:0a:8d:66:7d:67:e6:5a:c1:10:c0:81:bc:e6:
                    06:4e:d1:17:77:d9:74:70:fd:1e:33:5a:73:9a:e5:
                    40:b5:c1:98:2e:44:44:47:16:40:5d:7b:79:1b:20:
                    a6:b7:cc:ec:b3:30:9c:9f:6e:15:28:ad:4d:ac:fe:
                    24:10:18:dc:27:9a:06:25:2e:d8:b9:dd:da:40:cc:
                    da:9c:b4:df:ff:8c:e5:5c:35:d4:b2:77:d8:e1:b8:
                    46:1f:90:21:d1:70:c0:5f:00:a1:d6:f7:df:60:ff:
                    63:df:ca:b4:18:a7:fc:a0:25:5e:7a:99:30:a8:09:
                    cb:4b:38:7c:91:2a:32:2f:be:5e:13:4b:16:e5:d1:
                    62:ef:0e:e6:39:b4:38:ad:d7:35:75:08:a8:62:02:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:02:34:29:44:E2:29:1F:78:FA:AF:E1:AC:41:9B:C1:73:76:48:3F
            X509v3 Authority Key Identifier:
                keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:be:18:92:dd:b9:26:e9:b8:01:c4:60:ad:04:95:02:65:06:
         63:c8:d8:ea:1d:0c:c2:69:2e:0e:a9:dd:72:68:f5:a0:c5:55:
         6c:9b:f2:c2:fc:f2:60:d5:20:05:18:28:ff:cc:5f:58:fa:4b:
         83:43:5a:39:a8:f8:bf:ff:2b:06:8e:0e:f4:68:d0:53:4a:25:
         28:c9:bb:a2:77:12:64:65:89:df:dd:ab:fd:7e:31:7a:1f:f2:
         8f:ac:f5:68:14:a6:db:56:36:bf:78:36:5b:26:08:e5:59:5e:
         32:b9:ec:c0:64:55:0d:72:8b:66:10:ea:a5:bf:15:25:b3:a2:
         f4:ed:91:cf:d4:c5:22:78:a2:9e:de:01:c5:e9:e0:e7:94:f9:
         17:10:e7:97:44:32:ab:5f:85:83:6f:ec:fb:20:9b:52:a3:69:
         16:db:2f:d1:e1:7a:0d:a2:45:56:4e:4c:e3:90:bd:60:ad:5d:
         5a:56:d7:1b:20:74:e8:69:68:40:c7:01:58:f4:60:16:65:f6:
         cd:6d:a4:29:83:9a:b4:38:5e:c2:01:41:0d:6f:14:d6:93:40:
         6e:3e:8c:ea:0c:e1:a2:1e:1f:23:b5:3d:cb:22:d0:d3:7b:73:
         63:a0:0a:62:e0:cf:98:59:cf:2d:9e:2a:72:03:d9:46:ae:02:
         aa:51:1c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:52 2026 by rpki-client