This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
File:                     jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json)
Hash identifier:          tGPQp5MhUVRiY1rLKyKu/H6nowzQD17OMTd95EklvDs=
Subject key identifier:   7A:3E:F9:45:9A:28:B3:3E:A8:11:E6:89:D5:19:A2:21:A3:24:31:6A
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Certificate issuer:       /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
Manifest number:          0171
Signing time:             Fri 09 Jan 2026 03:13:04 +0000
Manifest this update:     Fri 09 Jan 2026 03:13:04 +0000
Manifest next update:     Fri 16 Jan 2026 03:13:04 +0000
Files and hashes:         1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: uJHhxyUEjyFnZLR8+CNMsg69CKLsDosLsOaTxhKuOz8=)
                          2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
                          rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 03:13:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
        Validity
            Not Before: Jan  9 03:13:04 2026 GMT
            Not After : Jan 16 03:13:04 2026 GMT
        Subject: CN=69607240-2a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:2b:39:a4:90:b0:d0:d4:90:39:b4:f1:b1:
                    6e:2c:c6:b4:21:8c:a4:a6:3b:6b:29:95:dd:f1:04:
                    16:91:46:62:78:c6:1d:6e:57:fb:59:a4:a1:da:cf:
                    a5:21:04:4a:14:ba:e0:b0:04:23:05:bc:e8:b3:9f:
                    ab:41:6a:74:95:2b:47:69:43:6a:56:d2:f6:38:22:
                    97:3f:8d:c2:fa:7b:de:0d:c9:7b:70:0e:da:19:e8:
                    45:64:23:0d:30:33:09:85:e4:01:17:29:dd:60:0a:
                    12:e8:85:b4:a2:98:62:1d:27:0e:eb:9c:8d:8c:50:
                    84:02:13:b5:2f:a2:5a:ef:bf:58:2c:81:86:67:cb:
                    fd:6e:f3:2e:c2:0f:ab:fd:c7:2b:8c:26:d2:21:56:
                    59:cc:bf:ba:df:ad:2d:9f:87:5d:a8:3d:e7:07:80:
                    71:d1:8d:25:dc:d2:4c:d2:aa:b3:e3:91:de:b1:88:
                    00:1b:ae:86:ea:5b:bb:0f:c2:d1:20:2f:36:7e:86:
                    7a:93:9e:b8:7d:75:54:35:e1:42:aa:76:9c:1e:90:
                    9f:d8:28:54:77:28:c1:5a:01:3c:6d:0e:2a:80:4c:
                    09:c9:4a:b1:a2:d0:7c:58:25:11:80:4f:a6:c3:88:
                    40:63:cc:06:74:e1:d0:aa:99:00:57:43:a8:50:b5:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3E:F9:45:9A:28:B3:3E:A8:11:E6:89:D5:19:A2:21:A3:24:31:6A
            X509v3 Authority Key Identifier:
                keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c5:0b:6f:03:d0:20:94:2c:ff:d4:02:c5:f2:87:42:0e:15:
         df:1e:b5:85:da:5b:d9:b1:6a:74:17:ea:00:0b:aa:20:73:4d:
         4d:0a:ef:d0:73:d1:5f:ca:0e:cf:2e:19:03:9b:26:8c:94:a4:
         3e:9d:69:3e:2b:22:16:90:cb:94:76:25:b0:ce:19:ce:6d:ad:
         2f:80:a1:f6:dd:72:e3:17:fa:90:6a:ba:6d:c7:73:46:71:a7:
         68:ef:d5:6f:8e:0b:5d:42:ba:3f:33:4f:fc:73:4f:e3:bd:77:
         be:b9:87:f0:41:3e:15:ef:b7:3f:27:d7:b4:e0:07:ff:50:3e:
         e1:f0:1a:ba:0d:fe:dd:a5:98:e4:ca:f9:3f:63:f5:ac:1f:95:
         65:47:8f:df:8a:6a:5c:fd:ab:02:00:72:de:bf:d8:6e:f3:97:
         f2:f4:45:36:c7:1b:f7:fe:39:b1:73:13:81:28:98:d7:69:d6:
         9a:6c:61:62:ca:44:66:e9:9d:94:91:ea:9b:27:41:97:ee:51:
         cc:fb:d2:cc:d3:ce:6b:f3:20:40:81:c9:dc:3e:55:7d:d0:cf:
         b0:78:a2:0a:ac:2d:41:2f:37:5c:b4:73:cf:d4:5a:aa:86:32:
         f5:95:7b:c4:fb:11:a8:cc:fc:b5:cf:28:b2:5d:1b:a2:7c:db:
         d7:2b:ca:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:30:00 2026 by rpki-client