This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
File:                     6LCK3PScYMutkdHtbTe9hEOtvUw.mft (raw, json)
Hash identifier:          Ej9GDdwrtSJPfB9rgkzoaTMJlNWPRz5YbyDH2KMoJs0=
Subject key identifier:   BE:02:08:F1:EF:5D:17:4A:30:FE:74:DC:00:03:81:05:97:01:C0:96
Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C
Certificate issuer:       /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
Manifest number:          0192
Signing time:             Sun 25 Jan 2026 02:49:12 +0000
Manifest this update:     Sun 25 Jan 2026 02:49:11 +0000
Manifest next update:     Sun 01 Feb 2026 02:49:11 +0000
Files and hashes:         1: 6LCK3PScYMutkdHtbTe9hEOtvUw.crl (hash: 2/yRINqng40620Q8fyqzt4/k0KlR4E8Kkzqy9jvPz8E=)
                          2: 5FB99B82934511EE87C1BE7EC4F9AE02.roa (hash: 8pKe3+4xRyiS1MHB1KBCyB6GyZL8OjDx7TX9aT1ieFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl
                          rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6C2E, serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
        Validity
            Not Before: Jan 25 02:49:11 2026 GMT
            Not After : Feb  1 02:49:11 2026 GMT
        Subject: CN=697584a8-3196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:f8:5f:71:0f:ec:b9:d5:46:0b:80:6e:3b:
                    ed:81:e0:4b:5d:e6:6c:f3:f0:ca:54:7c:7f:8c:37:
                    3e:e1:7f:7a:42:65:76:eb:0e:2b:df:32:2a:23:62:
                    a5:e1:a3:f3:51:44:0a:1f:6a:91:8f:c2:de:b0:37:
                    50:aa:a8:54:47:43:95:87:a7:96:ce:13:f5:8b:2e:
                    3b:ed:0e:27:1b:02:26:e1:6a:fc:a9:6c:58:e2:24:
                    46:72:2a:7d:ef:6e:84:40:a0:e4:70:34:8b:90:09:
                    9d:79:1f:46:35:a8:5e:9a:80:c1:37:60:1a:2e:53:
                    ea:6e:83:0c:0d:cf:d3:bf:19:51:77:35:06:69:61:
                    6f:40:e3:2d:62:7d:7e:1d:58:c2:b8:5f:d8:9b:a0:
                    04:81:c6:8c:50:46:37:1d:84:f0:f3:10:b5:cd:65:
                    c9:80:77:ea:62:08:7c:1e:26:16:67:55:bb:9d:56:
                    1b:2a:c1:5a:0d:e8:94:1c:df:c1:30:b7:c6:5c:fc:
                    65:d6:d0:ca:1f:c5:b5:e5:d0:cf:73:52:7d:75:a9:
                    08:33:52:88:2f:a9:8d:0f:1b:40:36:94:84:96:c5:
                    44:c1:a7:16:50:d1:72:d6:1f:d7:c8:7a:64:17:e6:
                    57:f6:d6:d8:a6:2d:78:fe:f6:20:43:01:fd:f2:b8:
                    a3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:02:08:F1:EF:5D:17:4A:30:FE:74:DC:00:03:81:05:97:01:C0:96
            X509v3 Authority Key Identifier:
                keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:70:cd:96:cd:c9:01:89:33:32:52:9e:63:54:48:dc:09:b6:
         f8:cf:56:f7:43:fe:29:e7:2f:53:cf:5f:37:bd:6e:ff:e9:b7:
         34:5b:8f:93:e8:f9:0c:c8:d7:78:c8:c7:9f:26:2a:21:d6:d4:
         d3:e7:29:15:d5:73:ba:1b:8e:d6:4b:3f:4a:cd:d8:ca:39:d4:
         4a:08:a1:2f:4a:30:75:e6:d3:99:68:bd:3d:9a:2f:d7:af:35:
         dc:c4:9b:6f:89:5e:78:01:6a:c7:b8:01:a4:d0:86:25:71:f6:
         4d:cc:ea:95:af:8a:ed:88:2b:30:16:59:94:78:e2:20:fe:5e:
         f2:27:bc:c0:15:c5:db:5a:35:dc:6b:28:21:3c:9f:53:d5:45:
         50:a3:5a:62:c5:f2:49:ca:3b:b7:a0:4a:17:b7:da:43:c8:91:
         27:5f:32:4a:e5:0a:9a:5e:db:33:78:1d:7a:6f:44:9c:d3:48:
         6c:7c:05:6e:04:78:51:de:b5:98:40:15:5d:f8:5b:a8:ac:9e:
         9b:76:09:c8:db:6a:22:06:72:fa:05:b1:35:31:5c:92:9b:fb:
         1a:b4:37:f9:a7:16:06:96:47:d4:bd:87:82:c3:f3:25:97:58:
         7d:87:06:f4:81:bc:51:3e:71:52:8a:8a:0b:02:0e:71:5a:41:
         0a:16:c3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:04 2026 by rpki-client