This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
File:                     Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json)
Hash identifier:          0XA+3qx14r5Ph2Czdvu0zc9R8Yx7OkmCdItqYEjEJ58=
Subject key identifier:   3F:E8:04:5C:57:60:94:FA:13:6D:D6:E6:4C:B5:B5:4C:F2:B3:85:6E
Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA
Certificate issuer:       /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
Manifest number:          6A
Signing time:             Thu 01 Jan 2026 06:29:30 +0000
Manifest this update:     Thu 01 Jan 2026 06:29:30 +0000
Manifest next update:     Thu 08 Jan 2026 06:29:30 +0000
Files and hashes:         1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: abD6ALilBWsbVODOIe1OdchluNZjFWB9QsBWPnuXa8Q=)
                          2: 780B9CF8867811F0AA0D2534C4F9AE02.roa (hash: X3bLg+wYV1t3tD4gl+ObUUyr463NoOxUyC03tZzeKjA=)
                          3: 78817658867811F0AA0D2534C4F9AE02.roa (hash: XWnPSEphd3JYQ8zrDoJg7cr7D+uDeG7GtgQZULFil08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl
                          rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 06:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
        Validity
            Not Before: Jan  1 06:29:30 2026 GMT
            Not After : Jan  8 06:29:30 2026 GMT
        Subject: CN=6956144a-7879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c9:51:36:4d:6f:63:09:d0:da:c8:e5:e8:bb:
                    9c:68:5c:de:f5:41:cc:fe:c6:08:aa:1f:15:c0:88:
                    a4:ff:cd:91:16:07:36:e0:84:a5:e9:db:d5:c5:82:
                    fc:c7:fc:2b:68:ae:01:31:a9:83:dd:a8:de:66:f8:
                    ca:1b:7d:cf:32:e4:39:39:fb:21:20:85:2c:6f:aa:
                    a5:98:d2:73:3c:98:3d:5c:d9:a1:da:b7:9b:15:53:
                    3c:73:3f:bb:d6:ae:83:d9:db:18:00:16:f7:04:d4:
                    3d:8d:b9:85:bc:a7:d1:24:d0:e1:de:86:00:40:8e:
                    5a:27:a8:da:dc:e2:97:ed:f2:13:b8:84:d6:43:29:
                    2e:ee:8d:c6:60:0b:18:58:9c:48:67:8c:f2:b5:87:
                    ea:ce:80:b6:65:3c:8f:a9:46:e5:40:ff:3b:74:fa:
                    1d:d6:96:e1:9e:1f:2c:18:6b:94:e7:9b:71:1c:3e:
                    0d:86:0f:c5:22:5c:8a:23:2a:48:d3:f9:8b:5d:71:
                    18:78:a8:a0:ca:0e:08:6a:1c:4e:51:61:1f:45:f2:
                    95:99:10:b6:82:4f:46:aa:01:5d:7a:d2:46:e3:60:
                    72:3a:64:6d:0c:e2:51:aa:4c:9c:41:29:ed:1e:18:
                    57:ff:2f:de:08:eb:e4:f9:97:f3:07:b5:2d:94:02:
                    7a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E8:04:5C:57:60:94:FA:13:6D:D6:E6:4C:B5:B5:4C:F2:B3:85:6E
            X509v3 Authority Key Identifier:
                keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ba:b3:ad:38:5a:b1:36:2d:ac:8e:bc:a5:5f:9a:41:e5:2a:
         92:1b:f6:51:b7:44:1f:47:b3:ae:dd:e2:a3:6e:05:22:b3:fd:
         60:e8:6d:86:e0:d5:6f:64:bb:eb:f6:9b:69:6d:b8:d5:ba:5d:
         b7:af:5c:9d:e3:9a:f1:a6:74:ef:6f:b9:41:f5:0f:9f:b3:87:
         11:ba:24:8a:b0:13:a6:ea:32:58:c8:20:7f:a7:8f:e4:98:eb:
         2f:25:15:21:81:43:85:3f:29:9d:1a:78:92:f7:cb:db:fc:8b:
         88:22:37:17:8e:6d:c8:0a:fe:46:b8:e1:b2:45:f7:b6:a8:8e:
         80:4a:54:84:e0:cb:a8:20:af:5b:ac:fe:ed:fe:85:f8:d8:62:
         22:b7:5d:d5:c0:05:95:4b:ae:2a:38:ea:c4:43:f6:84:fd:10:
         9a:0c:c5:9e:7e:3d:db:d1:4e:a6:e7:a4:52:1f:65:e7:db:9e:
         ac:f4:d2:15:38:a5:41:24:c6:c7:61:b9:fd:46:2b:b3:b7:ce:
         68:13:7b:41:de:c3:ab:f7:d9:61:56:45:f0:85:5e:54:4c:85:
         b6:96:fa:10:36:58:9a:12:2e:cf:4b:e2:2b:e2:98:53:20:ee:
         6b:bd:bb:44:0e:69:21:6c:c8:e1:40:d1:07:35:2b:4e:8e:59:
         58:af:55:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 02:20:54 2026 by rpki-client