This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File:                     LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier:          T3Dw+sC/NnV/ZFtb9nsBDYZffafe93ghgyNN1CjUkYI=
Subject key identifier:   6C:A9:9D:B7:C2:D6:05:AB:A6:59:B0:77:0D:5D:7B:71:11:A3:1C:D8
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer:       /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial:       0A23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number:          0A11
Signing time:             Fri 02 Jan 2026 19:19:50 +0000
Manifest this update:     Fri 02 Jan 2026 19:19:50 +0000
Manifest next update:     Fri 09 Jan 2026 19:19:50 +0000
Files and hashes:         1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: i9bQRIxf5M0jPK/lGCvpZ+8RRUkjqxGYB2oYGOlf/ZE=)
                          2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: VFpsjuU9PDSH64UL2gEPWAoxtpRrzaaut6Rewkzu2Xk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
                          rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Jan 2026 19:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2595 (0xa23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
        Validity
            Not Before: Jan  2 19:19:50 2026 GMT
            Not After : Jan  9 19:19:50 2026 GMT
        Subject: CN=69581a56-4134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:77:de:05:6e:c6:11:ae:f3:df:86:00:2d:
                    de:60:21:38:60:ff:2b:15:ec:a5:bc:bb:6b:3c:ff:
                    c0:5b:77:ca:ee:32:62:c0:87:71:4b:dc:a7:c3:1e:
                    d7:0c:59:a0:6c:7b:71:c9:84:a6:03:de:7d:f6:95:
                    4b:c3:fa:4d:38:86:f1:cf:00:a0:12:4d:5a:fb:9b:
                    bc:cc:6d:d1:c4:8f:6e:f7:86:37:46:2a:0c:59:2e:
                    c9:8c:f4:83:ff:f0:3e:e2:bf:ff:d9:32:cd:b4:eb:
                    5a:7a:c3:43:e2:00:ef:6b:55:f3:24:dd:05:e6:34:
                    93:18:3c:55:ed:a0:20:eb:a1:87:04:bc:dd:00:66:
                    cf:d1:85:ba:10:fd:29:26:d9:96:92:d6:dc:ca:66:
                    1f:3f:9a:6e:81:d7:2d:da:cd:49:d3:41:fb:ad:b4:
                    d8:d4:ad:11:32:ac:b5:74:04:eb:11:c0:3f:9e:61:
                    0d:db:6b:5f:75:0b:60:fa:22:3a:67:5a:41:bc:db:
                    8c:75:0b:98:99:eb:dc:eb:72:30:ef:cd:b1:b5:d0:
                    1d:92:18:73:53:1a:ec:1a:14:7f:1f:e0:7d:94:65:
                    3e:d6:3c:e4:d2:ad:49:23:dc:f3:fd:6c:0c:23:aa:
                    7e:8c:02:49:7a:54:b2:f0:ac:32:11:e0:d7:20:52:
                    f0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A9:9D:B7:C2:D6:05:AB:A6:59:B0:77:0D:5D:7B:71:11:A3:1C:D8
            X509v3 Authority Key Identifier:
                keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:75:9c:94:49:17:87:40:e9:a9:e3:60:61:c9:2c:29:d6:a3:
         0b:5c:c6:2d:61:4e:3a:1b:9d:64:94:b6:b2:4f:94:96:5b:33:
         24:b7:59:f9:4b:0c:51:9c:69:d9:9f:ed:ca:59:a6:b0:55:16:
         96:4e:ac:d6:4e:6e:26:7a:0a:3c:ee:5d:ca:81:91:ef:8c:67:
         49:9d:f9:87:c6:04:50:25:d6:8f:3a:47:9f:86:93:20:61:5c:
         97:64:ba:67:fc:0f:e8:f6:1c:76:ca:f9:58:62:d2:7d:4c:a9:
         ec:8a:77:a5:98:c1:69:37:8e:42:d4:b6:26:94:dd:e0:3f:91:
         c9:5d:19:91:cb:d2:88:2c:0e:8b:73:55:91:a7:83:cb:9e:09:
         36:e7:15:4d:1c:39:7a:77:ea:79:62:21:fd:53:f4:fd:2b:a3:
         9f:f0:7e:80:3f:08:c9:3a:9a:4d:5c:77:69:91:87:8a:d5:ea:
         6c:d9:d7:f6:ed:48:fd:78:b7:2c:43:bc:04:2d:79:18:51:a0:
         9c:54:8d:c7:7e:7e:fe:6e:96:ad:e4:06:96:8d:f0:df:b9:3f:
         64:3f:45:cf:60:4f:77:5a:c8:3a:3b:54:3c:de:cb:3f:5b:2c:
         5f:9b:56:12:6a:f0:8c:e5:35:ed:b6:d5:79:89:ae:40:94:da:
         86:0b:10:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:52:30 2026 by rpki-client