This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File:                     lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier:          Au3JSyLfDu7B75ryQv1qBpNAAxAZH+p9I28P8c4g8mI=
Subject key identifier:   44:5D:CF:44:5A:58:AE:10:9D:9A:5A:77:35:97:51:37:84:D3:00:6E
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer:       /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number:          88
Signing time:             Sun 11 Jan 2026 05:47:08 +0000
Manifest this update:     Sun 11 Jan 2026 05:47:07 +0000
Manifest next update:     Sun 18 Jan 2026 05:47:07 +0000
Files and hashes:         1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: moREzKDc+Lgn1lc4Zu2CyHK0uw5rkT99Myiv8DyBQ9Q=)
                          2: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: maMIBW8WqwpEw8k3CdK6BFRqFVm8airXL8KIFqvlGQs=)
                          3: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: Jax3Kvx2J0ODr5GgDNYrVUtv6/aFnopa2LSsnYbiSlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
                          rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 05:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
        Validity
            Not Before: Jan 11 05:47:07 2026 GMT
            Not After : Jan 18 05:47:07 2026 GMT
        Subject: CN=6963395c-fb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:04:9d:77:d5:ff:97:74:66:d6:2c:f7:56:6d:
                    4a:1c:12:50:13:17:3d:a1:6e:05:e2:15:51:fd:6a:
                    de:77:b3:6a:05:26:95:5e:70:01:54:4c:62:35:09:
                    e1:c7:75:05:ca:6a:49:d8:58:a6:75:d5:81:95:5f:
                    7c:39:ac:9e:7f:3c:40:80:01:aa:f2:9c:e5:dc:c6:
                    ac:5b:2c:d9:5b:d5:ea:b5:d1:a5:3d:2f:69:49:0a:
                    03:96:5a:24:bb:3d:07:17:b0:d3:e2:e7:80:df:e0:
                    f7:1d:09:a5:c9:bd:61:54:4f:4c:66:ee:b4:69:b5:
                    70:29:5f:25:37:e8:a5:b0:37:4b:00:46:84:6e:21:
                    02:20:19:9b:b9:9f:9b:1e:37:cc:b3:c7:83:fa:4e:
                    6c:0b:b1:16:e8:e7:46:5f:f9:48:2c:9a:fe:a9:9d:
                    c2:7a:17:07:68:f5:8f:fa:3b:2b:91:3b:32:8a:59:
                    c3:a2:46:de:a0:4d:cb:67:16:fa:83:4e:7f:9a:52:
                    e7:25:c7:37:c3:a9:31:5b:5e:dc:88:5e:16:c1:b1:
                    f6:c8:97:e4:74:68:2e:d3:9e:dc:49:52:dc:2f:18:
                    b9:04:ea:b6:b6:96:96:05:56:82:56:42:6d:5d:62:
                    12:0f:e6:45:e3:bc:73:2c:73:dc:1f:80:d2:11:9a:
                    a1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5D:CF:44:5A:58:AE:10:9D:9A:5A:77:35:97:51:37:84:D3:00:6E
            X509v3 Authority Key Identifier:
                keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:07:c7:da:3f:aa:b9:ab:85:bb:ef:66:47:65:9d:c6:67:98:
         51:9d:32:6a:26:89:d4:66:89:3a:37:d3:c5:62:05:8c:72:2f:
         80:03:36:70:e2:82:fc:2c:35:d4:67:2a:55:65:eb:ed:17:36:
         3e:b6:79:07:e7:d2:9f:d9:25:45:cb:54:df:54:f1:7c:43:62:
         75:fc:ac:e2:db:1a:ca:54:20:62:94:90:51:7c:03:73:15:84:
         7c:d1:c8:d6:0c:6f:d5:4b:74:ef:4d:90:5a:21:c6:6d:b0:f4:
         b2:d7:4f:08:4f:5b:ad:0a:56:19:71:c9:0f:7b:4a:03:f7:fb:
         65:c2:4b:99:f9:18:04:25:58:1c:a7:a6:bc:db:a8:f4:15:af:
         39:19:9a:b3:29:02:b2:6c:e4:53:4f:1b:bb:b6:1a:ce:99:57:
         82:8f:e5:cb:d6:ec:15:a3:5b:2e:05:0a:c6:0b:56:cc:d9:b6:
         7f:a6:85:fa:0d:9b:ca:94:cb:fd:c7:ed:eb:17:1b:40:24:c2:
         63:5f:b5:6e:17:e5:6d:03:c9:70:70:14:95:2a:37:57:76:c0:
         be:d6:97:aa:40:48:9d:2b:a1:10:09:2b:5c:b2:b2:d2:bf:1d:
         a7:36:0e:cd:b7:84:51:e9:e5:9d:f2:16:c3:f2:9c:c2:c5:c1:
         83:96:db:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:54:14 2026 by rpki-client