This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
File:                     Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json)
Hash identifier:          4jkBMSHGIEBTL0x5yyJ6bk1b9zoP0zSl9wbREW8ysmk=
Subject key identifier:   5F:E0:FD:70:19:B2:9B:A3:49:BE:43:AE:DD:11:65:A1:01:44:60:82
Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98
Certificate issuer:       /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
Certificate serial:       0344
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
Manifest number:          033E
Signing time:             Sun 25 Jan 2026 00:11:48 +0000
Manifest this update:     Sun 25 Jan 2026 00:11:47 +0000
Manifest next update:     Sun 01 Feb 2026 00:11:47 +0000
Files and hashes:         1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: bQsMyxRX/UdV3WgctUb8y0BQZ3vQRSNtlIC64woH0cI=)
                          2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
        Validity
            Not Before: Jan 25 00:11:47 2026 GMT
            Not After : Feb  1 00:11:47 2026 GMT
        Subject: CN=69755fc4-a85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:c4:be:07:41:94:09:d3:ab:16:08:2d:2f:
                    c0:ff:15:71:12:09:35:01:f2:67:00:1a:4b:bf:81:
                    a4:95:25:b4:c9:20:0a:00:0e:c7:21:8a:37:e4:21:
                    04:f1:3b:45:40:75:bb:a0:31:40:fe:ee:2e:cb:53:
                    d5:bb:b1:61:8c:5a:0b:fc:5d:40:1f:7e:be:34:da:
                    7b:9b:21:64:89:a8:91:4e:73:96:76:ce:ef:4a:7d:
                    98:e8:9b:d3:ae:23:bf:62:19:cd:2c:6f:cd:28:17:
                    64:aa:cb:2d:60:d6:6c:37:18:72:fa:02:16:e6:6e:
                    23:32:d8:da:08:4e:bf:6b:14:30:d8:74:13:58:af:
                    96:fe:73:5d:cf:30:45:44:5f:94:0f:6d:cf:c6:fe:
                    bd:2f:97:3c:3d:dd:c3:bd:d1:51:13:ec:2f:cd:bf:
                    12:e4:39:32:26:96:c9:ef:6f:a5:70:71:cb:95:26:
                    6d:a9:ae:ef:75:6c:70:1d:3d:27:72:48:9f:75:35:
                    48:0b:97:2a:94:05:97:9f:d8:a3:fa:2e:e6:83:a4:
                    5b:59:19:d7:0e:6f:e7:35:bf:51:45:32:eb:e3:63:
                    9e:ca:d2:cd:dd:9f:9f:cc:79:2e:da:6f:bf:68:84:
                    02:68:75:a2:3b:20:09:3e:83:d0:16:32:58:05:01:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E0:FD:70:19:B2:9B:A3:49:BE:43:AE:DD:11:65:A1:01:44:60:82
            X509v3 Authority Key Identifier:
                keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e3:25:fe:e3:da:5f:c3:2c:6e:eb:fa:56:6b:72:2d:0d:93:
         96:5f:e2:62:36:aa:8d:c2:37:be:6a:3c:6e:3b:e5:e0:17:de:
         20:eb:0d:57:69:55:3f:9f:8d:d5:6e:2e:31:7c:f4:b7:fe:f7:
         ee:5d:7c:98:61:a4:11:43:77:fc:ca:80:0e:b5:96:54:1b:84:
         93:a0:6f:76:5c:d9:d5:4f:cb:30:be:02:70:80:aa:2f:55:17:
         f5:9f:85:b5:b3:f9:ee:b1:6b:cf:7d:a1:8a:3b:3f:9c:24:a2:
         b6:76:ee:39:9e:5f:71:91:c5:8b:db:01:09:b8:39:da:39:60:
         19:da:26:f9:89:3b:ac:86:3e:be:1f:36:ea:b9:1b:11:2d:89:
         13:a4:ea:19:c7:96:35:75:1b:f4:c4:72:f0:43:e9:e3:0a:d3:
         69:77:7a:7c:65:52:7a:45:29:91:f9:b1:08:b8:52:33:a2:b7:
         0a:de:63:9d:26:4e:96:a9:32:b2:27:f9:ce:48:57:03:0a:0b:
         7c:67:29:54:17:1f:1e:55:7d:3f:f6:6d:53:7b:97:af:c7:d1:
         e5:2a:d6:71:ba:f6:a7:e9:80:8f:cf:8f:f4:b8:39:d2:88:89:
         ef:09:67:53:cb:da:de:01:d4:a7:94:b7:71:8e:a5:bd:8c:9f:
         11:1d:29:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:20 2026 by rpki-client