This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
File:                     LnNx4gZThK0R1DN9DS7NH2bSGco.mft (raw, json)
Hash identifier:          vUumfVoTZrwZ9NPQ7HsSOdQZANZ/IG7wSYVlxP6KNKE=
Subject key identifier:   B6:7C:F2:55:9F:85:2C:93:D5:F2:0B:D6:AB:3E:3E:91:FE:FE:F6:85
Authority key identifier: 2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA
Certificate issuer:       /CN=A91F5753/serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA
Certificate serial:       02D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
Manifest number:          02CE
Signing time:             Sun 25 Jan 2026 00:34:04 +0000
Manifest this update:     Sun 25 Jan 2026 00:34:03 +0000
Manifest next update:     Sun 01 Feb 2026 00:34:03 +0000
Files and hashes:         1: LnNx4gZThK0R1DN9DS7NH2bSGco.crl (hash: 2d9HSPNJ76HsKqoqAREU7Mv4r/+AX8/JsxFA6W7Wpcc=)
                          2: 68C425FC1BBF11ED9F87C083C4F9AE02.roa (hash: x9csIWd6s8afCMS1YmHZZTrl70IFmSCSA9MRca7TL7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl
                          rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5753, serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA
        Validity
            Not Before: Jan 25 00:34:03 2026 GMT
            Not After : Feb  1 00:34:03 2026 GMT
        Subject: CN=697564fc-2a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:2d:d5:85:ee:bf:1f:62:7d:33:19:93:52:
                    e4:26:05:69:ae:c5:f4:63:91:90:48:92:9a:f1:fb:
                    ed:c8:89:f4:42:26:47:d6:51:c5:0c:13:03:e7:35:
                    30:d1:8f:19:7a:2c:84:72:fb:b0:bd:1e:ed:ff:e1:
                    d4:79:d7:79:2d:89:ca:e9:95:1d:b5:4f:20:a6:e4:
                    c5:31:0b:80:08:72:d0:26:c6:2b:47:a6:4c:2f:70:
                    ed:e2:0f:ff:ea:92:2c:fc:c0:be:ec:d1:f6:51:04:
                    8c:27:8b:b1:91:25:6a:a9:13:84:9d:1a:3c:c7:17:
                    9e:e4:71:68:d0:30:6c:dc:82:34:29:05:b8:29:4c:
                    d6:63:77:c8:d0:bd:ce:8e:d2:47:a1:e6:32:d3:67:
                    54:60:8c:f0:b6:b8:90:d8:b4:6b:c9:b3:03:3b:18:
                    8d:67:b0:27:c9:09:b4:07:10:88:6e:6f:d3:b1:8b:
                    94:d6:a0:9b:0f:b1:f8:c5:19:a8:46:83:e9:f2:57:
                    fd:18:ac:54:91:7d:b4:df:d1:a6:b2:17:ab:65:06:
                    f4:a0:ca:bf:d4:5d:87:47:7b:51:12:3f:62:0d:d1:
                    aa:b9:14:22:17:4d:7a:9a:04:8d:7f:eb:76:1a:50:
                    78:3f:e6:fc:fd:43:a1:cc:25:03:7b:13:e5:a9:f3:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7C:F2:55:9F:85:2C:93:D5:F2:0B:D6:AB:3E:3E:91:FE:FE:F6:85
            X509v3 Authority Key Identifier:
                keyid:2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fe:cb:63:6a:76:c1:5a:e1:4e:af:45:df:21:96:43:db:e7:
         f8:53:d6:f5:58:65:38:de:21:77:4c:7a:2c:62:61:37:87:f1:
         02:ff:e0:ba:38:f4:d0:45:bf:02:96:a5:9d:db:63:09:4b:a6:
         53:67:54:cc:3e:66:9d:33:29:2e:f3:57:c5:15:b4:68:c0:7f:
         bc:3f:c0:e1:f8:5f:00:c2:24:8e:95:2c:99:2c:ad:c5:ee:fe:
         f6:e6:e7:e9:57:1a:29:a1:7a:2c:8f:0f:14:a4:98:16:ae:ce:
         d9:c6:a8:a2:fc:1d:90:24:07:b6:97:4d:05:d2:75:28:d5:08:
         df:30:a5:05:ce:00:26:ce:46:93:1a:07:58:c1:20:40:2c:86:
         e6:25:20:02:d6:dc:72:f7:10:e4:41:57:af:7c:63:a2:a9:b8:
         8f:64:ca:61:f6:34:f6:7d:68:6e:c0:6f:25:61:49:fc:46:25:
         c5:ac:5f:c6:7e:fa:d3:34:71:99:f9:f4:49:f3:75:87:be:8b:
         f2:67:3a:8c:3b:b2:d7:36:55:ec:01:0f:24:72:7e:e7:0e:41:
         d0:a2:95:54:5e:7a:4a:ad:ae:31:71:f4:cf:ad:7d:07:0f:d5:
         e4:26:6d:f6:7e:9c:a5:f3:62:e3:e2:96:04:b0:e7:5c:35:5c:
         62:18:13:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:39 2026 by rpki-client