This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
File:                     s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json)
Hash identifier:          xzgxZtdynO3Px4qijCQF+cc6xfH8aU7JrrjLvAhIkaI=
Subject key identifier:   1D:E8:DE:4C:2C:3C:74:4C:B5:76:0A:63:E5:B1:A8:8C:12:CE:00:92
Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Certificate issuer:       /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
Manifest number:          0162
Signing time:             Thu 01 Jan 2026 03:37:07 +0000
Manifest this update:     Thu 01 Jan 2026 03:37:07 +0000
Manifest next update:     Thu 08 Jan 2026 03:37:07 +0000
Files and hashes:         1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: gD8XEgd3IVStif24e/svOrb297IjK2OsFfDODOZN6JU=)
                          2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: rdPAEAIE6ELTFaI7KJd4MZCFob5xV/RE3eKxMhnDVS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
                          rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 03:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B018, serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
        Validity
            Not Before: Jan  1 03:37:07 2026 GMT
            Not After : Jan  8 03:37:07 2026 GMT
        Subject: CN=6955ebe3-eb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:31:6e:4a:8e:27:49:a2:ae:f4:6b:24:0f:
                    3b:8c:21:ff:51:09:0e:34:2b:34:e5:f9:be:0b:41:
                    d7:65:9e:34:4d:6c:b6:be:59:93:73:c9:41:8d:07:
                    8f:c9:b8:b1:bd:6d:01:f5:92:90:4f:42:dd:f0:1f:
                    9a:15:50:78:d4:ff:77:e4:f1:85:97:26:37:bb:49:
                    26:dc:e9:98:a5:f5:c5:7c:27:cd:8a:81:12:2e:cf:
                    79:31:7d:21:fa:47:78:53:00:5b:b0:36:05:fc:cb:
                    ae:fb:56:d8:4f:73:96:26:11:8f:c9:e1:9b:33:53:
                    99:14:69:b5:02:91:89:96:06:24:14:12:ab:a9:dd:
                    93:44:a0:2c:34:f6:3c:c5:5f:6d:02:66:65:89:66:
                    92:00:71:f3:40:e6:e0:07:f5:b9:64:c4:a1:98:ff:
                    a0:8c:27:95:e8:47:de:44:ec:ab:47:96:49:35:a0:
                    d7:c4:d9:33:f9:88:0f:50:7d:b3:3d:5e:9f:b5:7a:
                    d3:3b:a8:cd:2b:43:36:cd:33:e1:12:ed:15:b8:08:
                    4d:65:80:4d:22:03:f2:3e:6a:57:2b:20:63:0c:57:
                    a5:fe:e6:43:f1:c2:7f:8f:65:a0:55:9b:b7:6f:4c:
                    58:43:8f:4c:43:1f:40:d5:8b:6e:ec:c8:49:39:8d:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E8:DE:4C:2C:3C:74:4C:B5:76:0A:63:E5:B1:A8:8C:12:CE:00:92
            X509v3 Authority Key Identifier:
                keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bb:74:04:5b:32:88:a9:79:83:ee:6f:98:40:40:72:56:75:
         e3:e1:12:4f:1c:bf:e9:95:31:a6:9e:b2:74:8d:5c:a7:2c:f2:
         99:c6:79:8d:62:b3:c6:f6:af:68:89:62:54:ad:6a:e5:86:f5:
         8b:09:1a:29:94:74:b3:03:24:f0:b3:fa:6d:e8:2f:d9:7d:ff:
         c4:04:84:96:28:f7:9d:42:ee:5a:b7:e6:c1:c6:c6:73:da:1b:
         e1:95:9d:35:6d:59:87:e9:f3:23:45:2a:85:cd:ec:67:02:be:
         54:32:17:25:48:5c:f6:ce:15:f8:d6:1c:73:a0:79:c7:12:0b:
         4c:72:b1:71:b2:26:1a:11:9f:b5:78:da:94:c9:aa:41:b9:ad:
         31:ff:ee:bf:39:84:d3:ae:fb:12:4e:45:f3:9e:8a:1d:bd:4f:
         a6:4c:bf:7c:76:33:1b:ab:49:45:56:bd:ce:f3:ad:99:83:70:
         41:5f:ef:7d:24:b5:dc:72:62:66:82:75:d6:7b:92:8b:9c:91:
         e5:6e:9b:a0:24:77:5e:35:c8:1a:87:03:89:4b:9b:b4:57:c8:
         c3:a4:6d:af:2e:3f:69:25:c3:98:60:d2:03:29:72:4a:d1:ca:
         d4:34:b3:90:28:0d:57:1f:7a:8a:57:26:04:3b:fa:29:a9:61:
         aa:bc:ea:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 17:31:33 2026 by rpki-client