This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
File:                     lJtkel-MefbaSuNtngDETgKpp6Q.mft (raw, json)
Hash identifier:          2N+q2qE1/NBiRjKPDtOfrkclLIWXQxwDnPN1aBsTQWA=
Subject key identifier:   F3:9F:CD:21:25:F4:91:32:B5:07:1B:FB:93:8B:1F:80:21:DF:32:26
Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4
Certificate issuer:       /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
Manifest number:          0197
Signing time:             Sun 11 Jan 2026 02:45:50 +0000
Manifest this update:     Sun 11 Jan 2026 02:45:49 +0000
Manifest next update:     Sun 18 Jan 2026 02:45:49 +0000
Files and hashes:         1: lJtkel-MefbaSuNtngDETgKpp6Q.crl (hash: 39BHj12Zbw/PFb5DMycQA5Q42mdDemuAqu4tT+uT960=)
                          2: 1FB96962DA1311EE81216D86C4F9AE02.roa (hash: quKJitER3rLWSjfmg0OVdWKLh6IMLpV8joVMSHQ5GxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 02:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175D84, serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
        Validity
            Not Before: Jan 11 02:45:49 2026 GMT
            Not After : Jan 18 02:45:49 2026 GMT
        Subject: CN=69630ede-ec8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:f7:33:ed:cc:e4:2d:e2:d1:9a:3c:72:60:
                    aa:1d:72:32:3b:9f:28:e8:7e:7d:e0:ae:db:85:33:
                    47:de:ec:c0:33:4e:00:ea:05:b6:c0:20:d7:34:d3:
                    34:92:74:b2:8e:e3:cb:b2:f5:6b:48:a9:ff:a5:0a:
                    17:90:aa:a8:af:da:fa:20:6d:04:21:73:e5:c9:5f:
                    f5:c6:e7:dc:d9:86:7d:83:b7:64:a1:df:fe:b4:fc:
                    4f:eb:eb:83:3b:15:c3:7e:c2:25:c3:94:d4:c1:55:
                    58:ff:c6:60:77:1e:c7:a3:24:ba:62:a1:d3:91:3b:
                    4e:38:9a:b5:f4:7f:e6:04:c4:d2:2a:99:13:7e:8b:
                    1c:e7:b9:dd:03:d4:fa:53:fb:74:d1:7d:5b:2a:a1:
                    66:ea:9e:65:81:63:ec:0b:94:26:da:09:d1:53:b9:
                    13:1f:b2:b7:4f:ee:52:83:a0:4c:d3:2c:b7:8e:cb:
                    fb:12:3d:10:5a:13:dc:c4:1c:45:e8:f5:3b:36:81:
                    9a:d3:33:1d:78:20:f6:62:5a:15:5b:55:81:f8:c2:
                    a9:a3:23:77:58:74:29:a9:77:e8:e1:9c:b7:f9:62:
                    69:f8:95:b4:cb:25:2e:47:c9:1d:c2:88:a8:0c:67:
                    41:48:eb:41:8e:37:27:20:4d:e8:21:06:d5:54:f3:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9F:CD:21:25:F4:91:32:B5:07:1B:FB:93:8B:1F:80:21:DF:32:26
            X509v3 Authority Key Identifier:
                keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d6:dc:63:7a:63:c2:9a:72:5d:93:f4:67:54:88:1a:95:31:
         f5:23:af:28:78:45:44:cf:d6:5a:d6:eb:3e:c8:52:2e:01:23:
         e9:a4:2c:b6:16:70:86:bb:36:2d:0e:64:74:c2:5a:5a:0c:64:
         5d:76:aa:c3:8c:8d:87:0b:4e:19:c8:b8:d6:51:1c:68:db:e0:
         e8:c6:58:ef:85:86:2e:ec:10:c1:6d:43:e9:1c:7f:44:a8:9e:
         36:fe:2f:61:5f:4f:dd:f3:d9:c2:0d:a0:d7:87:da:9d:86:cb:
         9f:4e:8b:93:a5:1f:6a:ea:04:be:74:fa:5d:f8:9b:e1:de:3e:
         67:85:0d:97:e7:19:a1:10:aa:d7:53:90:f2:93:35:10:f5:0a:
         78:3e:0b:a6:21:d8:a5:f0:37:88:6b:31:04:1b:c9:34:86:5c:
         a3:15:fd:7c:71:53:24:a1:d7:21:34:e0:37:31:ab:43:5a:7b:
         0e:31:24:dd:5f:bc:e7:88:a1:ef:83:33:36:59:47:1e:93:01:
         72:72:e2:d0:8c:f3:41:94:cf:b0:d0:44:02:46:c8:27:19:22:
         94:94:2d:93:4e:ab:d0:21:0b:a7:23:06:3e:23:82:a7:b6:d5:
         10:9a:c9:f7:9b:ef:fa:ac:81:16:19:a8:ff:6a:b0:93:ce:8a:
         cd:88:25:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 09:20:48 2026 by rpki-client