This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
File:                     l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json)
Hash identifier:          9yIjyjcx6YrKLH6bK+xO1I1GBIk6F+r45cWlJpUer3I=
Subject key identifier:   8E:B6:25:39:7D:07:47:E0:2F:01:D6:BD:8E:59:E2:EA:2C:CA:41:DA
Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12
Certificate issuer:       /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
Certificate serial:       0BBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
Manifest number:          0BA7
Signing time:             Sat 24 Jan 2026 18:33:19 +0000
Manifest this update:     Sat 24 Jan 2026 18:33:19 +0000
Manifest next update:     Sat 31 Jan 2026 18:33:19 +0000
Files and hashes:         1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: vvCRR9d8ppcwja6SEtsvB6ZdtW56zMp+zSxAdT9T83E=)
                          2: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1f6aFvhkVa/N7iAPf2YxVBmmTzpTWpZU9hllszfOpEI=)
                          3: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: eQjSLvcTPm64WJsuRzl8viIdz6G/ld4B/GelvP5rP4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl
                          rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3005 (0xbbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
        Validity
            Not Before: Jan 24 18:33:19 2026 GMT
            Not After : Jan 31 18:33:19 2026 GMT
        Subject: CN=6975106f-5986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4c:9f:e2:06:85:38:e9:81:14:74:10:2e:59:
                    b9:2d:a2:ec:10:ec:b5:ef:fa:27:de:0f:75:9d:e9:
                    bb:f0:c0:aa:dd:5e:02:8d:00:4f:91:cb:e4:81:d1:
                    69:23:67:73:e4:b0:28:d6:db:4b:69:49:bf:c6:c6:
                    78:63:a7:e4:0d:d9:84:22:8e:7c:fc:7a:2e:4d:a7:
                    6f:c8:a5:2b:5a:73:f3:94:22:1e:ef:20:7a:0f:5e:
                    9d:9d:88:4d:67:8e:07:52:38:a5:de:61:93:11:e1:
                    ce:84:5b:46:ac:54:a0:83:a5:1f:fb:e1:53:97:74:
                    51:6a:f4:c3:11:3f:7d:f8:b0:71:5a:15:a6:b0:4e:
                    66:27:05:55:42:ae:03:77:7a:cb:71:29:f1:de:d3:
                    86:42:6b:02:5b:5c:23:0c:90:f8:fc:8e:9b:af:fa:
                    c1:6d:60:47:c1:45:a9:9c:88:e9:97:e6:0b:af:11:
                    00:c8:bc:6f:e5:e4:9b:49:4d:86:d1:37:1f:e9:52:
                    19:ed:00:eb:a6:31:8a:d1:de:ae:5d:03:d1:f1:72:
                    2e:0f:29:82:78:c2:de:74:f7:38:f4:bf:3b:5b:b2:
                    0d:7a:8e:23:d0:70:35:7b:49:2d:ac:92:59:d6:d1:
                    c7:f2:28:91:5e:7d:08:1c:c8:c3:c6:26:32:0e:aa:
                    80:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B6:25:39:7D:07:47:E0:2F:01:D6:BD:8E:59:E2:EA:2C:CA:41:DA
            X509v3 Authority Key Identifier:
                keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:10:4f:a8:a1:74:ea:8e:65:a4:df:85:2c:a6:00:aa:8a:
         75:92:e2:99:fe:5a:60:80:b1:c6:da:2a:fc:3b:ac:a4:c2:52:
         01:73:81:02:d3:b6:32:6e:7c:33:c3:af:87:a3:87:b6:60:d3:
         04:77:f4:59:fd:83:11:ee:6e:be:92:af:00:b0:56:d5:db:c4:
         aa:4c:44:34:7a:ba:d7:68:3c:26:c4:50:30:ee:c0:46:01:4d:
         88:18:fc:19:c2:d3:9a:67:0a:e9:a1:31:63:53:0a:5d:b3:a2:
         5b:a5:56:dd:e9:31:25:b7:fc:35:83:07:10:17:f7:bd:9c:b2:
         b0:2b:8f:9d:82:9b:42:93:03:dc:6f:78:cc:fa:8a:32:61:8f:
         ad:d2:c1:60:91:9d:6a:8a:6c:b3:ba:5d:84:68:dc:dc:cc:d6:
         66:20:4f:6d:e3:56:b0:52:df:5e:23:07:86:b3:1f:57:60:b6:
         80:2f:bd:87:47:83:38:fa:3b:42:d1:8a:ab:dc:70:22:58:1e:
         9f:03:1b:b0:86:5d:91:ee:f0:6f:e1:6e:4a:b2:7d:83:f3:d6:
         20:16:d7:11:5f:91:41:16:51:96:c5:db:ee:dc:fe:90:47:c7:
         63:4b:5c:2a:1e:25:94:6e:39:6c:36:72:b2:19:99:ff:09:65:
         20:eb:e5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:50 2026 by rpki-client