This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
File:                     LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json)
Hash identifier:          9uZ9JXBXp4b8fo98wu+AQW59eggql+9wVeircyNT9U0=
Subject key identifier:   05:4C:46:A7:C7:FA:CB:F1:D8:38:5A:56:38:78:2A:BE:F5:67:5F:EC
Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
Certificate issuer:       /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 07:07:50 +0000
Manifest this update:     Sun 25 Jan 2026 07:07:49 +0000
Manifest next update:     Sun 01 Feb 2026 07:07:49 +0000
Files and hashes:         1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: Wc5LcZvQ/Ri0QVTCNneiH4/PcBBaQZhhKuKjo6jSTaY=)
                          2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: UIl0m38K2IcOSSTNKy1r3QmZCaV/dVL2XTzUVw4T6JE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
                          rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
        Validity
            Not Before: Jan 25 07:07:49 2026 GMT
            Not After : Feb  1 07:07:49 2026 GMT
        Subject: CN=6975c146-be5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:69:e0:77:3a:f2:f7:8e:0b:e4:c6:c9:e1:
                    27:7f:04:e3:59:e3:5c:0a:25:48:93:b5:3d:73:a5:
                    61:89:98:95:d9:3c:d3:9c:60:3b:2f:9a:04:c4:4c:
                    78:ba:ac:8e:61:db:2e:68:71:ea:ca:09:8d:b4:57:
                    d1:97:9c:89:22:be:7a:37:78:91:b9:b5:5c:9c:2c:
                    22:04:aa:f5:31:7a:d1:67:96:76:a1:53:d7:28:5b:
                    49:7f:61:b6:05:d6:34:46:5b:72:c1:5b:b0:53:f1:
                    68:2e:8e:ea:1b:fb:8a:3f:a3:d8:51:bb:ae:66:55:
                    56:91:9a:a5:c4:53:7a:59:b1:94:bb:11:e9:87:54:
                    f2:3c:f6:fa:89:20:53:3c:7c:3e:5a:01:81:ec:ef:
                    e7:3d:6e:00:84:80:0b:66:6d:6e:00:59:ac:a4:a9:
                    47:6d:3a:e1:4e:35:e7:2d:a2:73:c6:11:40:c5:1e:
                    22:5c:2f:f0:e5:73:0d:88:f7:1e:32:1d:96:78:d7:
                    c4:99:a6:42:82:c6:37:43:93:72:8a:fc:6d:32:fe:
                    10:86:ed:34:c8:06:2f:f7:25:ca:0a:d5:dd:26:ed:
                    c9:67:4c:19:1f:d8:c9:67:58:3f:13:c6:b3:27:6b:
                    52:ae:12:ce:ed:d9:fb:ac:76:e9:d0:15:23:10:6d:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4C:46:A7:C7:FA:CB:F1:D8:38:5A:56:38:78:2A:BE:F5:67:5F:EC
            X509v3 Authority Key Identifier:
                keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:32:e0:ce:ad:b1:d2:24:98:78:a0:da:36:dd:9a:1f:93:d3:
         2d:65:e4:40:43:a0:d0:5e:66:4c:47:26:94:94:08:54:6f:98:
         54:99:cb:3d:02:9f:70:88:d2:42:f5:4a:96:37:07:23:63:58:
         ac:5f:47:fc:87:4f:71:a2:17:60:a9:30:4e:71:71:54:c3:21:
         73:74:e9:19:bc:be:9c:53:90:09:d2:cb:50:6a:32:57:69:e9:
         74:8d:99:fd:69:a8:6e:11:05:d9:31:cd:80:8c:eb:57:d9:a8:
         d2:d4:04:09:aa:bb:0b:b2:06:f9:25:80:93:39:5c:68:c6:3a:
         c4:04:74:89:52:40:d4:af:ef:06:9f:d7:e0:1b:4e:27:da:b4:
         9e:87:b9:f3:f4:ca:63:8a:ad:1e:30:cd:93:13:6e:33:18:5a:
         32:00:0f:8c:83:72:83:d9:c4:ef:25:8a:e1:45:80:00:d2:1e:
         c2:a3:83:2a:1f:4a:ed:56:3a:a0:0d:e9:d4:d5:73:12:25:63:
         67:bc:48:6e:5e:4b:ea:fc:7e:90:8d:b5:b2:ed:ee:3d:fa:8c:
         98:33:ea:da:7b:31:ce:ea:33:46:08:47:b8:77:cc:c9:e1:74:
         9e:08:7c:e7:65:fb:b1:c5:d4:d3:68:02:09:41:da:32:d9:5f:
         8e:94:38:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:34 2026 by rpki-client