This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
File:                     ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json)
Hash identifier:          FLns05rXYloF4nqSx0E8d2XNPHdfIvCjXTfGa76u0HU=
Subject key identifier:   1F:25:FE:03:B1:49:28:B9:41:4D:EE:F7:20:D1:18:95:E9:42:3C:3C
Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
Certificate issuer:       /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Certificate serial:       0886
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
Manifest number:          087F
Signing time:             Sat 10 Jan 2026 19:58:07 +0000
Manifest this update:     Sat 10 Jan 2026 19:58:06 +0000
Manifest next update:     Sat 17 Jan 2026 19:58:06 +0000
Files and hashes:         1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: 4FrCZ39XRjAQuAHrvyMwxNAPkyLshiWjZQhwuOAsjck=)
                          2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: o6F0EuKwlTrnUOxPf4ItfWLnrfcMDydYUClJAnjBios=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 19:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
        Validity
            Not Before: Jan 10 19:58:06 2026 GMT
            Not After : Jan 17 19:58:06 2026 GMT
        Subject: CN=6962af4f-c257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5f:33:5b:fa:36:50:de:7d:8f:9b:d2:ee:e5:
                    f8:93:8d:bd:c6:fe:81:46:41:9c:53:33:c0:4d:d4:
                    17:9b:a1:87:33:30:b9:be:0c:ac:ba:2e:d0:b1:99:
                    f6:e7:94:61:f1:cc:68:eb:40:20:0f:ce:64:c4:30:
                    e7:bc:18:18:9e:f3:77:f3:67:83:f5:9f:4e:38:1f:
                    0f:51:3a:2a:9c:f5:89:39:f4:f1:70:4e:59:2d:5e:
                    d1:51:3e:1d:fa:34:b5:3e:44:41:45:7c:2e:0b:3e:
                    da:be:3e:02:78:e3:a5:d3:fc:cf:bd:df:50:cf:7e:
                    f1:d6:2e:a5:4f:c7:7b:2d:30:42:35:6d:17:6e:25:
                    83:30:07:ec:9e:f6:62:26:67:29:4b:d2:85:e6:63:
                    08:40:0f:ab:82:f1:61:ee:3e:32:85:0d:ee:3b:35:
                    03:6e:b8:fc:5b:ae:4b:1e:eb:76:0b:e5:1d:7e:79:
                    0b:29:27:23:dd:73:dd:db:d8:4d:7a:cc:88:37:21:
                    c3:2f:e6:7c:6c:ac:59:23:87:97:80:da:8d:d2:47:
                    72:68:d7:4b:a3:d7:bb:ff:cb:23:8a:fe:1e:39:3f:
                    74:bf:6b:65:31:fe:d6:3d:3b:f5:d2:c2:fb:32:92:
                    31:07:29:4e:57:2f:53:85:36:a0:f3:31:6c:6e:20:
                    90:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:25:FE:03:B1:49:28:B9:41:4D:EE:F7:20:D1:18:95:E9:42:3C:3C
            X509v3 Authority Key Identifier:
                keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f3:1a:60:6f:2f:65:ef:af:cb:06:42:e0:64:57:68:8e:d1:
         58:54:30:85:92:df:07:b0:2e:47:7d:cc:d5:69:bf:86:c1:de:
         99:24:85:60:f9:00:bd:75:bc:07:52:42:cc:3c:cd:18:bf:29:
         bf:c6:06:59:f2:a8:a7:b4:42:48:92:ce:9c:70:0d:18:84:01:
         64:ef:34:8b:cf:1c:cd:66:7d:e8:51:a1:da:73:4f:f3:8b:f4:
         7e:aa:ff:5c:4e:b9:15:28:7e:48:e9:23:e8:bb:fb:9d:0b:70:
         62:e0:b3:1a:92:07:c4:e3:89:cb:6c:0f:57:d9:6f:ac:70:73:
         d3:90:3e:a3:5d:b8:43:b5:ac:91:19:20:c4:3c:8f:06:cc:98:
         6d:32:c8:d6:ff:b8:cf:c7:a9:c6:2c:34:0d:6e:7e:29:e3:2b:
         5b:6a:a5:8c:b1:81:97:14:67:13:0a:76:f7:71:f7:70:21:b6:
         35:17:e5:df:99:01:03:1a:69:dc:9e:3c:25:f6:73:b3:6a:37:
         fb:72:b7:ad:3a:d4:67:0c:aa:ec:a9:48:d7:09:43:97:72:85:
         ed:c8:14:50:04:90:a2:b0:32:11:44:0e:56:30:b1:a0:85:5b:
         51:ac:b9:0d:16:e9:26:25:e3:9e:dc:1f:8e:1e:10:b2:e3:f5:
         58:b5:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:30:17 2026 by rpki-client