This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
File:                     ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json)
Hash identifier:          Fhbgw53fMdeczkLNZnlRysEXAoWUeaBNp0XT1WXDWVM=
Subject key identifier:   CB:DB:3A:38:76:CE:AA:C8:98:B0:F0:60:70:43:6C:A5:93:FE:08:7F
Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
Certificate issuer:       /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Certificate serial:       088D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
Manifest number:          0886
Signing time:             Sat 24 Jan 2026 19:57:30 +0000
Manifest this update:     Sat 24 Jan 2026 19:57:30 +0000
Manifest next update:     Sat 31 Jan 2026 19:57:30 +0000
Files and hashes:         1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: eXiGufy6XHlminc89aQIFS5NWoSnkJ3x/RByEtl/cGc=)
                          2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: o6F0EuKwlTrnUOxPf4ItfWLnrfcMDydYUClJAnjBios=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189 (0x88d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
        Validity
            Not Before: Jan 24 19:57:30 2026 GMT
            Not After : Jan 31 19:57:30 2026 GMT
        Subject: CN=6975242a-293a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:ac:75:b6:ae:25:5f:e7:9e:6b:1a:03:41:
                    7b:cd:92:14:ae:ff:77:b8:a2:d7:96:4c:2b:ef:5c:
                    25:91:9c:c2:6f:2a:2f:1f:1a:e3:aa:51:32:80:17:
                    15:4e:87:9a:38:3c:a6:77:fb:ae:a7:90:77:c6:8a:
                    58:1a:a4:a8:cb:9a:b4:4a:ba:b9:cf:ff:c1:91:e7:
                    11:7e:e1:83:73:ac:ce:f6:d3:49:0b:20:36:b1:4e:
                    47:6c:46:8e:91:c5:44:db:44:89:ad:60:04:55:88:
                    a5:b9:74:f8:f3:51:c4:82:3a:a2:89:c2:c1:54:d2:
                    a2:8e:ec:e1:60:e7:1c:c7:5c:e8:e9:5f:9d:4a:e5:
                    ec:7f:86:f4:2f:c5:47:e1:52:85:77:2c:6d:22:51:
                    8c:78:19:db:e4:11:84:87:98:94:e0:6c:fc:d3:b3:
                    24:fa:90:f0:c2:1f:ff:a9:c0:83:40:a4:5c:57:23:
                    8b:d2:0f:af:4d:fc:61:06:18:fa:09:1d:22:10:aa:
                    2f:9b:79:51:5c:e3:8a:b5:11:ef:ce:f2:91:29:0b:
                    ad:aa:b0:5f:7d:61:9b:4d:3f:e8:6b:e8:ba:28:1a:
                    ed:e2:a1:11:6f:85:6c:92:7e:c0:29:1c:7b:02:2e:
                    9b:c8:9e:e5:cd:2e:65:71:87:e8:f0:b5:b0:c5:dd:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DB:3A:38:76:CE:AA:C8:98:B0:F0:60:70:43:6C:A5:93:FE:08:7F
            X509v3 Authority Key Identifier:
                keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f0:d3:c9:61:b2:fb:11:2e:dd:c1:ff:fc:f8:43:6a:30:9e:
         df:fb:6b:e8:7e:91:e9:2d:0d:c0:73:43:d6:d6:af:b2:54:2d:
         56:fe:85:af:1a:a6:40:70:9f:a5:91:33:71:8c:e5:86:33:ab:
         fe:a4:c7:23:bb:f9:94:4a:33:76:42:d3:76:f1:e1:e5:c2:b2:
         a0:b4:4c:96:0c:37:a9:3d:4b:81:b2:d7:c9:8c:31:42:2a:42:
         1d:7f:99:16:69:2d:b9:66:be:d5:a5:07:87:8c:72:c3:80:90:
         a2:33:7f:b1:35:22:c4:73:1e:2d:b2:80:2f:3f:06:cb:47:41:
         df:63:20:f4:d4:99:f2:af:73:f7:53:cf:27:32:94:b7:cd:a7:
         8e:9b:05:07:c3:ce:a3:e4:cb:b1:16:0e:25:ca:64:84:5d:14:
         69:6e:ba:1c:6f:9f:4e:a1:9e:6c:d9:b4:25:ed:77:56:72:6c:
         f2:f8:38:3e:ee:af:ee:fc:56:25:c4:ab:f8:41:88:84:7c:7f:
         2d:e3:65:69:0b:7a:80:12:57:4d:44:e2:a3:80:dd:c5:ed:09:
         82:a9:9b:58:58:d9:e6:b6:dd:3f:30:84:7b:d4:86:bd:dc:c0:
         3f:fa:27:21:c0:2f:e5:9d:96:b2:6d:dd:50:5d:69:37:2e:85:
         0b:13:10:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY3NDQxMTAvBgNVBAUTKDk2M0MyMEI3RDM4MDREQjgwMUNBRTI1NzRDMzFENzYw
RDUzRDMzNDQwHhcNMjYwMTI0MTk1NzMwWhcNMjYwMTMxMTk1NzMwWjAYMRYwFAYD
VQQDDA02OTc1MjQyYS0yOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlisdbauJV/nnmsaA0F7zZIUrv93uKLXlkwr71wlkZzCbyovHxrjqlEygBcV
ToeaODymd/uup5B3xopYGqSoy5q0Srq5z//BkecRfuGDc6zO9tNJCyA2sU5HbEaO
kcVE20SJrWAEVYiluXT481HEgjqiicLBVNKijuzhYOccx1zo6V+dSuXsf4b0L8VH
4VKFdyxtIlGMeBnb5BGEh5iU4Gz807Mk+pDwwh//qcCDQKRcVyOL0g+vTfxhBhj6
CR0iEKovm3lRXOOKtRHvzvKRKQutqrBffWGbTT/oa+i6KBrt4qERb4Vskn7AKRx7
Ai6byJ7lzS5lcYfo8LWwxd0khQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvbOjh2
zqrImLDwYHBDbKWT/gh/MB8GA1UdIwQYMBaAFJY8ILfTgE24AcriV0wx12DVPTNE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjc0NC8zM0U3OEZBQ0RC
QUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRiZ0J5dUpYVERIWFlOVTlN
MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xqd2d0OU9BVGJnQnl1SlhUREhYWU5VOU0wUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Njc0NC8zM0U3OEZBQ0RCQUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRi
Z0J5dUpYVERIWFlOVTlNMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBg8NPJYbL7ES7dwf/8+ENqMJ7f+2vofpHpLQ3Ac0PW1q+yVC1W/oWv
GqZAcJ+lkTNxjOWGM6v+pMcju/mUSjN2QtN28eHlwrKgtEyWDDepPUuBstfJjDFC
KkIdf5kWaS25Zr7VpQeHjHLDgJCiM3+xNSLEcx4tsoAvPwbLR0HfYyD01Jnyr3P3
U88nMpS3zaeOmwUHw86j5MuxFg4lymSEXRRpbrocb59OoZ5s2bQl7XdWcmzy+Dg+
7q/u/FYlxKv4QYiEfH8t42VpC3qAEldNROKjgN3F7QmCqZtYWNnmtt0/MIR71Ia9
3MA/+ichwC/lnZaybd1QXWk3LoULExA6
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:37 2026 by rpki-client