This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
File:                     LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json)
Hash identifier:          r6VpUBfv8lbysDYHugWrJTkJGJ4NwcUEL9by+pXFeow=
Subject key identifier:   F4:1E:94:2C:8D:6B:90:7F:B8:97:CC:2D:C5:35:EC:A3:A9:C6:D2:81
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Certificate issuer:       /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial:       03C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
Manifest number:          03AA
Signing time:             Sat 24 Jan 2026 23:55:23 +0000
Manifest this update:     Sat 24 Jan 2026 23:55:23 +0000
Manifest next update:     Sat 31 Jan 2026 23:55:23 +0000
Files and hashes:         1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: Ig0NfZhisJVY7u5I4RlO7E5rTucd5wW7C/Ws4CauCoI=)
                          2: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: OEjS5qz+Y094b9NXZxpyHneMicv8/wejwLKQ2tC/qNg=)
                          3: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: ltQE1ACHFxJalS/0k3q+Ig8nBgWVEoOtVPpdjQ0C1JE=)
                          4: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: M3qPmduTKgomQOiC6svBksITDFFBnsH7ow1jxrTPAmo=)
                          5: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: ch9EflhL7C1jP+s1ylPiL9Gffg36ErkYooxoRNvgmEE=)
                          6: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: ZWFeBQWegvf7qjSa6jsoNEGGn0IO7ig3HT5bMFUTusg=)
                          7: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: 30Bcwfo746beL6TG9snvEW7O1ZgFuTW1IVMwb8hxmH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
                          rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967 (0x3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
        Validity
            Not Before: Jan 24 23:55:23 2026 GMT
            Not After : Jan 31 23:55:23 2026 GMT
        Subject: CN=69755beb-a160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8b:0a:14:58:1f:2e:a1:43:55:fd:f6:19:94:
                    c1:80:5b:d3:8d:f2:6e:55:40:55:ab:24:bb:d0:6f:
                    fe:7e:6e:6b:ab:a6:df:98:48:13:8e:74:c5:e2:22:
                    05:18:4a:a9:7f:0b:5d:2a:ce:1d:6a:6a:d4:82:c4:
                    9b:79:2f:34:e8:ec:d2:66:1d:95:7b:38:49:24:d0:
                    f2:6e:59:50:8e:b4:6a:af:6b:c0:a3:66:e8:96:ef:
                    78:4c:00:ee:60:fb:c2:e2:7b:6f:0e:85:94:14:38:
                    2c:bb:47:66:e2:ad:b3:c9:3f:2e:fa:2a:1e:50:09:
                    5c:51:ef:3d:af:67:82:e7:cf:63:82:89:96:5a:66:
                    0b:f0:73:6b:f4:39:ba:fd:7d:3f:75:00:78:65:72:
                    4e:9d:b2:72:17:86:7e:9e:20:91:43:d8:e8:6a:78:
                    8f:57:5c:be:b4:a1:61:40:20:31:9a:ca:ad:e5:6d:
                    b6:bf:4c:02:63:0f:9f:89:00:9c:00:2f:2e:33:ff:
                    05:10:68:cc:24:07:5d:af:19:76:93:78:81:e4:27:
                    d1:34:58:36:12:86:90:47:c6:10:65:d3:4b:a8:5b:
                    13:6b:04:49:60:97:22:e7:c4:84:f2:2c:d8:12:8f:
                    da:0b:06:d6:7a:9f:70:3b:ac:ae:ff:c4:5f:c9:92:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1E:94:2C:8D:6B:90:7F:B8:97:CC:2D:C5:35:EC:A3:A9:C6:D2:81
            X509v3 Authority Key Identifier:
                keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9d:d1:d8:6a:f0:b6:34:83:0c:75:50:1f:f5:a7:df:6e:87:
         07:9d:e5:64:b0:cb:9b:24:f5:1c:22:5c:b2:89:17:e1:b9:76:
         41:62:87:21:ca:3c:c6:50:4b:65:42:40:76:1d:74:df:4c:54:
         1d:49:b9:61:35:21:4b:84:c4:cf:83:33:95:25:c9:b1:dc:a0:
         76:38:74:26:6a:25:44:96:c2:c6:fb:6b:dc:eb:82:2d:0b:cd:
         32:54:c6:07:1d:98:54:2b:f8:15:0e:fb:d2:a0:3c:72:70:04:
         10:4c:9c:06:fe:33:d2:ff:cc:c7:3b:38:a3:d9:c7:be:ad:4e:
         58:fc:9d:4c:6f:06:19:41:c1:d8:58:bd:05:5b:e2:e1:1f:2f:
         62:c9:01:b0:9f:22:e7:89:9e:10:6a:8a:07:37:83:b3:12:c9:
         77:30:f0:44:07:59:a3:83:e2:76:a0:6f:3b:a0:75:73:13:6e:
         bd:94:8e:43:39:4d:a4:9e:3d:05:d7:5d:1a:88:ad:77:40:c6:
         9e:7e:14:17:cd:c8:1f:10:98:88:d3:b5:21:22:2c:a3:41:0a:
         18:e7:1c:2e:b1:72:f4:03:9c:14:32:6c:7b:b0:35:ce:e4:42:
         a8:75:d4:3e:f6:c6:90:4c:d5:b9:6d:65:f1:8b:5b:fe:2a:91:
         a4:1c:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:40:15 2026 by rpki-client