This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File:                     lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier:          LjruvTwE8mZ4aax/UiMQ1b9Rbl7KHRSxc8jtPV7ozEA=
Subject key identifier:   B3:31:C9:34:9D:3E:0C:1E:0E:09:0F:5F:8F:1A:C2:8D:9D:10:5A:49
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer:       /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number:          EF
Signing time:             Sun 11 Jan 2026 04:39:33 +0000
Manifest this update:     Sun 11 Jan 2026 04:39:33 +0000
Manifest next update:     Sun 18 Jan 2026 04:39:33 +0000
Files and hashes:         1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: rYGTwIVpJKqL4rLUYRhf+s69iG5mZ/prpTijKVgqndQ=)
                          2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: bAE1nN8/ltYESFoWRjpvSwAksmNLvoi9WWAZ51mQmjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
                          rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 04:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
        Validity
            Not Before: Jan 11 04:39:33 2026 GMT
            Not After : Jan 18 04:39:33 2026 GMT
        Subject: CN=69632985-ab04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5e:a9:b0:db:f3:03:45:ce:e9:76:71:af:3e:
                    f5:7b:bb:51:73:d9:94:eb:3a:c7:6b:11:43:ce:99:
                    68:01:0d:da:e1:12:11:68:e7:8c:a2:4a:d6:5e:93:
                    9b:79:c2:35:10:dd:9b:2a:53:19:3d:06:c1:b2:38:
                    1e:a7:fe:a9:da:04:59:15:43:da:93:ee:a0:18:3d:
                    ce:48:c8:95:95:03:34:e5:2b:f3:f1:c6:e7:55:5a:
                    11:2f:4e:14:d1:75:7c:7b:9a:b1:4b:58:37:c5:5e:
                    47:d6:d9:02:d8:45:db:7b:79:2a:38:d0:78:7e:6d:
                    6a:0a:45:e9:87:84:76:99:06:c8:e1:af:28:c2:b9:
                    2c:35:49:86:37:81:4d:9b:2e:c3:f3:14:d3:9c:f7:
                    4f:d5:a1:93:41:58:d0:4d:ee:82:de:c6:93:17:f5:
                    53:ca:04:c7:23:73:c9:19:3e:d8:2f:50:68:ab:4d:
                    9a:f4:28:38:c2:10:3d:06:56:67:f6:5a:d1:98:6a:
                    75:50:58:a6:70:48:50:0f:a5:13:2c:c8:17:fb:72:
                    df:db:11:f5:50:6d:87:c5:28:7b:c2:1f:f2:15:c7:
                    8c:14:2b:d4:82:21:8c:92:20:3b:8c:49:44:58:39:
                    4f:c8:9e:2d:52:67:cd:6b:29:9d:29:bb:bd:73:a2:
                    e2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:31:C9:34:9D:3E:0C:1E:0E:09:0F:5F:8F:1A:C2:8D:9D:10:5A:49
            X509v3 Authority Key Identifier:
                keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b5:23:cc:e8:81:a9:36:15:03:64:98:58:b1:ef:7d:fc:6b:
         bb:ca:5a:d9:5c:b4:86:89:17:1c:55:3e:27:5a:92:6f:53:83:
         93:30:82:a2:5a:3a:34:6e:ae:ae:f1:7f:24:41:58:d6:19:7b:
         9c:a7:69:85:88:ba:3f:ba:02:3f:35:d4:ad:7a:1d:1a:60:f8:
         4e:1b:b8:c4:d0:bd:08:4b:79:88:a7:c4:f5:65:fa:25:47:86:
         15:35:6f:02:9a:dd:ab:d9:f9:26:34:98:e7:a9:9d:76:72:17:
         2e:b7:c1:e4:db:4a:ed:de:cf:ed:a8:a7:c2:28:2f:a4:ef:46:
         36:2b:f1:c1:ca:21:62:cb:11:ad:36:ba:8a:c0:c3:46:ad:45:
         ea:ec:cd:c3:6a:ae:22:18:dd:d3:c9:71:48:65:ec:ce:39:d5:
         60:58:d6:95:dc:f4:30:bd:de:ff:4e:2c:3f:08:a4:73:ff:a4:
         41:37:8e:7b:74:c6:c1:02:09:da:88:6b:36:98:a9:a5:76:a9:
         c8:5d:4b:f5:df:58:46:31:dc:45:6b:9b:7b:db:8b:86:43:bd:
         b0:d7:f4:7c:ef:7f:81:db:6a:59:90:90:d0:73:d3:29:65:78:
         e7:f3:c2:d9:ec:d1:0d:59:4a:00:55:35:74:c4:9d:d8:10:4b:
         12:64:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 18:05:29 2026 by rpki-client