This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
File:                     lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json)
Hash identifier:          BEba8nm5wWP7+QD3OMH5mlql89hqgQcRLMR/nhOHVYQ=
Subject key identifier:   74:13:2E:9E:CF:82:31:4E:54:64:32:CE:88:97:2C:90:A8:8A:A9:AB
Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88
Certificate issuer:       /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
Manifest number:          0113
Signing time:             Sun 25 Jan 2026 04:13:45 +0000
Manifest this update:     Sun 25 Jan 2026 04:13:45 +0000
Manifest next update:     Sun 01 Feb 2026 04:13:45 +0000
Files and hashes:         1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: 9o+j8TmpCh7ZzZ4dUs78bFLa1Y1VX/TVsEUlmsL9TVs=)
                          2: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: ka/hb/wEqxzG+7uBZxa/tAl50+HbZgfedrhKNFCSJiY=)
                          3: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (hash: xPdwABGTjJ2GEqaqXmGquO4VtiMPpmIGc2xrOME/BtE=)
                          4: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: 79VsC0tk/1wLHjzWqa6w+oI01WTgsbwStpO14mHmHe8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl
                          rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88
        Validity
            Not Before: Jan 25 04:13:45 2026 GMT
            Not After : Feb  1 04:13:45 2026 GMT
        Subject: CN=69759879-b54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a1:22:e0:ee:92:28:a9:dc:35:e3:8f:a8:c9:
                    4e:40:9e:61:ce:7c:f7:78:e4:f6:43:0f:a9:9e:31:
                    ca:a5:f1:22:93:f0:8c:21:21:fd:21:17:b1:38:d4:
                    74:87:23:f2:6e:91:e5:fd:70:90:0e:3f:96:0f:8b:
                    3d:8e:60:8f:bf:1e:08:89:b9:31:79:4f:cb:ad:23:
                    ba:18:2c:50:27:44:64:43:04:56:41:a5:78:40:7a:
                    c9:b4:25:1d:1e:15:4d:3e:7c:d8:c2:8d:12:86:7b:
                    dc:97:95:fb:a4:9c:18:60:e5:e6:53:7c:57:84:ab:
                    37:63:15:68:9c:ad:82:87:98:8c:21:36:a3:a7:64:
                    8f:5c:57:80:67:25:d1:2c:3f:d1:4e:c4:e1:df:13:
                    02:01:e9:dd:5b:5d:0c:60:64:f8:db:0f:31:88:83:
                    f1:b2:d8:b2:d1:be:3e:20:27:0f:a6:5f:37:df:94:
                    1c:e4:c7:39:3e:f6:a8:03:12:5e:17:b7:da:03:d3:
                    18:4b:bb:96:dd:b6:39:de:21:95:36:1b:f8:9a:ed:
                    76:28:8a:16:d1:7d:b8:58:c7:39:fd:23:9b:53:b3:
                    ca:6b:ab:d9:17:2f:c1:83:d2:a4:82:38:72:59:42:
                    1f:51:19:61:3a:87:c8:3e:2b:cb:f6:69:3f:db:04:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:13:2E:9E:CF:82:31:4E:54:64:32:CE:88:97:2C:90:A8:8A:A9:AB
            X509v3 Authority Key Identifier:
                keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:de:22:c3:62:0c:e1:32:0a:49:5c:a5:1e:62:7f:db:5a:2a:
         1a:75:0c:4c:8d:7d:a2:c8:ab:65:3a:67:72:27:8b:d0:18:de:
         0e:bb:e0:75:8f:2e:bb:18:c3:ee:b8:b8:86:6f:5a:b5:64:ef:
         b8:9c:49:b1:90:fb:00:6d:7b:dc:05:30:ca:18:79:0c:43:c5:
         d7:75:46:d6:da:36:d5:a6:50:33:8f:57:7a:dd:12:44:8d:dd:
         11:a0:7e:66:fa:25:26:27:53:87:85:72:cb:62:b5:d1:3a:d3:
         f4:db:ec:cb:88:a1:3f:3e:61:5e:d2:4f:db:64:de:c7:df:d7:
         fb:ac:fc:8e:98:0d:3a:6d:b9:23:f5:e2:17:54:be:c0:24:9f:
         af:5e:5c:9c:3a:67:42:d8:98:d4:9b:ff:4a:85:04:0e:ad:c4:
         e7:4d:6d:08:a0:c5:7e:d9:b9:6b:10:35:7d:88:8a:68:e9:b7:
         af:14:40:83:3c:74:13:26:a1:40:c3:b3:91:6f:13:5b:ed:46:
         10:0f:eb:09:82:30:49:62:f4:7c:32:ae:69:6a:9b:e5:18:69:
         8a:6c:bf:fa:2d:5d:17:5f:e0:1f:df:5d:ab:9e:3d:56:13:a4:
         c8:cd:b6:fc:00:8e:23:07:d5:d0:c6:1b:f8:db:09:d5:25:d0:
         21:de:4c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:15 2026 by rpki-client