This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
File:                     lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json)
Hash identifier:          gcJ3Zhlp8XVLbhG8diWawk+WhnsXn8btmSnx/A20Hgk=
Subject key identifier:   38:5C:EC:E1:6E:34:6E:2C:94:30:6B:D6:36:24:35:4A:5F:4D:A6:04
Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69
Certificate issuer:       /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
Manifest number:          013B
Signing time:             Sun 11 Jan 2026 03:42:19 +0000
Manifest this update:     Sun 11 Jan 2026 03:42:19 +0000
Manifest next update:     Sun 18 Jan 2026 03:42:19 +0000
Files and hashes:         1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: DEEwVGDGj7xnhwImrsRLWkEIOAA3WCjdu18mh1lF9n0=)
                          2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: oY5WSp4sZ7toMUqPDRkXBJjJe0s8xpTFO+pZJ7qlj14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl
                          rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 03:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
        Validity
            Not Before: Jan 11 03:42:19 2026 GMT
            Not After : Jan 18 03:42:19 2026 GMT
        Subject: CN=69631c1b-36cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:b8:eb:c5:a3:b2:82:9d:31:70:05:4c:de:
                    f2:4f:02:98:f3:a5:08:16:f3:1d:7c:74:c6:ff:f8:
                    64:c3:96:31:e3:17:7b:ca:52:5a:55:64:d3:a1:20:
                    09:d8:be:0b:a3:b1:70:c7:34:7d:94:f0:fd:d2:74:
                    39:a6:9d:8f:c0:6b:5a:81:8c:7b:92:52:f5:c0:16:
                    22:77:e7:f1:61:e5:01:28:b0:e9:94:0b:81:7d:51:
                    b3:13:59:62:8f:50:e5:f4:d7:ff:f7:02:81:8c:ae:
                    44:9c:81:17:c1:a2:ce:e6:cc:44:03:a1:35:28:24:
                    fc:61:fc:7e:a0:2f:8a:05:48:6b:bd:9b:88:ef:eb:
                    86:78:05:8d:f7:ed:49:ba:b0:e9:70:d9:72:5a:ee:
                    a9:8e:b5:2e:d9:d7:f1:39:e4:c8:ff:f8:88:08:fb:
                    29:19:6f:71:32:8e:7f:33:68:c5:17:04:97:e7:74:
                    b1:6f:bb:3e:35:d5:66:3d:49:65:06:78:fd:46:22:
                    a0:97:98:07:16:f5:ad:ad:90:80:6b:e5:5a:6f:23:
                    b0:7c:af:b1:7b:52:09:57:95:b3:7e:08:5b:b1:7b:
                    70:cd:b9:f1:05:2f:53:40:0c:3d:3c:bd:a0:fd:b1:
                    c3:36:7c:99:96:91:81:0e:4f:58:1c:e7:94:f7:4f:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5C:EC:E1:6E:34:6E:2C:94:30:6B:D6:36:24:35:4A:5F:4D:A6:04
            X509v3 Authority Key Identifier:
                keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c4:01:10:01:ba:8d:c0:a8:b6:ce:fd:28:cf:8b:c5:6a:5e:
         ca:f4:0a:19:5e:2f:fc:27:fc:b9:fe:2e:a7:de:ad:ba:45:e3:
         45:19:85:7c:1a:31:6b:85:88:7d:64:48:d6:c2:03:e9:5c:f4:
         53:5e:c1:86:42:1d:62:84:0b:1d:00:ed:6b:7d:5d:a2:94:0f:
         41:10:b6:c1:49:3d:92:ab:ab:e8:c2:fe:89:2a:6f:92:bd:e6:
         c3:ed:f1:00:c9:b2:ee:da:49:1d:99:74:d6:ce:1e:d0:13:d3:
         16:2a:00:b7:90:6d:fa:57:9f:a8:99:e5:65:f7:84:3a:78:cf:
         f8:69:01:79:77:c2:33:b2:78:3c:bb:c3:8b:1d:b0:a3:d9:a3:
         59:ed:77:79:b6:46:f9:e8:71:6d:24:aa:e9:92:17:1a:69:a9:
         b5:27:35:ca:dd:6b:00:68:d6:d8:38:1b:e6:e9:d4:88:17:2d:
         7b:3f:73:4f:11:84:a6:a8:9c:d1:a8:bc:45:c2:8b:d7:49:99:
         2b:fa:ac:23:29:70:49:b2:f5:61:03:43:72:53:7b:82:77:5b:
         7f:af:ac:19:49:6a:4e:e8:5f:08:9b:05:97:94:cf:4d:2b:8e:
         e7:05:e6:78:52:31:cb:3e:6b:9a:8b:39:aa:b4:e9:55:7c:f1:
         fe:69:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 03:51:02 2026 by rpki-client