This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
File:                     lC4n1lxHr7WXCpr-goCbMXnYtGY.mft (raw, json)
Hash identifier:          6SmDptML1rgHyMh2i9Mm27oNU6FHIovdq/AaYDHg9Ng=
Subject key identifier:   51:F6:B3:69:50:4D:69:58:D7:FA:08:0F:B4:CC:AE:1D:54:24:95:06
Authority key identifier: 94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66
Certificate issuer:       /CN=A91DC33B/serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
Manifest number:          1741
Signing time:             Sat 24 Jan 2026 16:24:28 +0000
Manifest this update:     Sat 24 Jan 2026 16:24:27 +0000
Manifest next update:     Sat 31 Jan 2026 16:24:27 +0000
Files and hashes:         1: lC4n1lxHr7WXCpr-goCbMXnYtGY.crl (hash: YkO0hApNJi74Ds3XR5u9lwnK01dn6wYXF4sVYS1lf4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC33B, serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466
        Validity
            Not Before: Jan 24 16:24:27 2026 GMT
            Not After : Jan 31 16:24:27 2026 GMT
        Subject: CN=6974f23c-7ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:a1:4a:74:87:5e:07:bb:5f:d2:cb:01:c8:
                    28:e8:83:1b:60:58:05:1d:b8:1e:27:06:55:72:28:
                    ba:a2:36:e7:d8:5d:c8:bb:03:f9:70:3f:a3:da:56:
                    62:02:c8:67:80:5a:d0:c4:cd:81:ff:34:e2:01:1c:
                    86:be:f7:8d:40:a9:67:ba:1e:f2:14:71:ba:53:0b:
                    3e:c7:67:bb:82:a4:21:84:68:a5:e6:65:90:14:f8:
                    2f:4a:e9:e8:37:99:dc:dc:fe:59:b9:32:e1:47:92:
                    e6:7d:83:5d:c1:b2:f0:3f:fb:5f:a4:1e:74:6c:ad:
                    0a:61:6c:71:81:2c:bf:02:54:22:ac:19:f6:64:87:
                    f0:c8:de:e7:73:d3:d8:92:55:cf:6c:26:69:ee:5e:
                    36:77:16:6b:1a:c3:4a:b5:3c:e6:c3:e1:bf:8b:a5:
                    4c:75:20:e0:50:c6:ac:77:b4:84:d9:d0:b0:f5:0c:
                    de:e8:cd:d5:5e:a4:19:76:5a:59:3f:43:01:58:19:
                    58:fd:1d:13:fa:cc:92:47:16:23:98:6c:45:2f:d6:
                    5b:4a:95:41:96:88:82:65:92:a5:d5:81:37:ee:e9:
                    ef:3a:dd:a3:6f:20:94:24:fc:69:93:90:de:6d:f3:
                    c7:1b:c7:e3:fe:fe:a2:48:d8:99:92:ee:e8:d5:87:
                    ae:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F6:B3:69:50:4D:69:58:D7:FA:08:0F:B4:CC:AE:1D:54:24:95:06
            X509v3 Authority Key Identifier:
                keyid:94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a0:39:f6:2b:5e:fe:20:d0:4b:bc:03:c7:6d:b5:1a:43:69:
         1a:df:de:8c:f6:4d:fe:88:55:e7:bb:86:76:a5:08:76:47:4d:
         c0:11:3a:ed:3c:39:0f:a5:6f:4e:12:27:38:1f:70:25:b9:d1:
         c7:d9:75:7c:fe:a6:fe:84:e6:01:48:10:9f:c2:71:9a:34:52:
         a1:b9:24:a3:87:da:52:05:4e:ca:46:7b:b2:51:e9:00:3b:21:
         73:92:3b:ac:09:b5:92:c5:5e:45:7a:25:19:b0:eb:1c:3c:72:
         86:e6:76:b5:63:24:8b:cf:e6:22:c4:98:e8:51:7d:9b:d3:5f:
         a5:16:9f:25:99:49:24:cd:ef:60:00:97:56:00:bb:52:6f:5b:
         44:06:33:24:91:6b:75:e9:ea:38:de:28:6f:7a:42:ae:c0:0e:
         87:05:38:f4:bb:a6:c8:e8:61:4f:6e:cc:52:5a:d3:58:5f:98:
         0c:a9:8a:da:f6:52:41:f0:e1:cb:de:e5:94:1e:28:b4:40:e8:
         f6:32:b7:56:d5:34:80:e5:c3:86:8e:cd:59:30:b6:7d:01:ac:
         55:18:78:e2:ed:f5:3f:fd:15:9f:90:3a:03:6c:66:ff:61:d2:
         5b:ef:c7:ff:42:b9:e9:4f:26:62:ec:2f:05:5b:eb:b6:bd:22:
         29:90:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:58:07 2026 by rpki-client