This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          s8shAvr78gKhu97YK6q5ZWY0ksmMvvg82yyCEQnFPMo=
Subject key identifier:   1A:68:BC:89:80:22:6F:01:AD:DB:2D:C9:47:D8:5B:01:D4:DD:D9:80
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       25E9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          2573
Signing time:             Mon 26 Jan 2026 15:32:48 +0000
Manifest this update:     Mon 26 Jan 2026 15:32:47 +0000
Manifest next update:     Mon 02 Feb 2026 15:32:47 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: /4FFDWUd7/IjxjwrBqVEE9BXHYifMvGFRaotshtIhHg=)
                          2: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: UuYB4WzvgQjLH0B44aPDoKSEcVPBbWtM3rQy9k0A+k0=)
                          3: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: BvTYdQgytihNDhZkOmbkqugOTnkp3U/T+b4vjOkSQoo=)
                          4: 407F0056629711EEB706DD75C4F9AE02.roa (hash: zE+GZQ/y6NnrgGwNjCL6jq7bqAj/QObhERffdYT4PxE=)
                          5: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: PWkDZi06ADjI6yjBBU4aYQrWTgNSnaqa8au2v37zNL0=)
                          6: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: AfvEohb/PfXr6q8VsGeLfKrSZSjnU6OR4EKMkOZ59zw=)
                          7: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: fsHld7Bvq7MRzGsdvGdzdVtfpdT2fFcdHDJmOjRKRlI=)
                          8: 260428EC312211EEAF54935BC4F9AE02.roa (hash: hc9wCWP1WEpuKLSMKP8mb2EgyLJQaateqF+mXzUo/B4=)
                          9: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: ve1V1cZ/meI9rVUCyJeBrMdO5d8EYgeTD4/df18i1ts=)
                          10: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: C5yWlFetiSSgG+uEjcV1GWZbX9dn852PkeX+hr5OgJI=)
                          11: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: pA2CTOoVDstDIwP9+WcJpg+mmFpi5C2LMeocnNKjKiw=)
                          12: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: JqU56gVLxGJgAJvjCh6VO0y5qM6pE+RiW8LanHN02lc=)
                          13: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: S0b4btTgQ2n6BX5TKX1B9HC0w3N4D2HJohEDqkDcWjI=)
                          14: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: h8hBMw4qTUysR1Qt2RKGUo5X0wweJ0CeRUcowINA2fg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 15:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9705 (0x25e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jan 26 15:32:47 2026 GMT
            Not After : Feb  2 15:32:47 2026 GMT
        Subject: CN=69778920-6cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:05:12:0f:d8:b3:2b:8a:19:a9:58:c3:1c:
                    b6:75:02:ed:9b:e9:fa:15:52:e4:99:89:36:dd:b1:
                    3f:53:ab:51:18:15:c9:5b:18:e5:ba:15:f5:42:5a:
                    01:c0:0c:14:db:af:0f:8d:97:ca:46:31:ff:1a:3d:
                    20:8c:d7:04:5b:ef:7f:f5:7e:4e:80:06:f1:6e:e4:
                    0c:28:a9:3d:fb:56:5e:35:af:83:09:86:06:73:c4:
                    85:5c:7b:3c:68:96:9c:f1:71:e9:cc:ad:e6:42:8a:
                    5f:c6:7d:7d:ed:78:4e:c7:b7:83:43:7b:6e:a8:fa:
                    5a:f5:0b:f5:55:f8:7e:0b:6e:a9:fe:cf:b7:3d:16:
                    19:04:22:6b:03:3d:2a:38:c5:90:1e:f5:6a:74:ca:
                    17:8a:95:48:33:56:57:75:a2:09:9e:96:f9:a1:3b:
                    d9:14:88:24:06:77:5e:5c:ba:ed:6e:48:e8:33:56:
                    ee:61:3b:eb:56:17:29:4e:72:3d:9a:77:a9:c7:02:
                    ac:53:4f:58:09:78:da:cb:81:d2:60:2b:41:93:c5:
                    20:8d:4f:be:89:06:61:f2:18:ec:f2:db:6c:e5:55:
                    31:42:dc:52:3d:ef:4a:c5:2b:2a:fb:45:e4:05:80:
                    a8:98:3f:0b:3d:d8:d1:92:d0:d4:1b:8d:b0:18:c8:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:68:BC:89:80:22:6F:01:AD:DB:2D:C9:47:D8:5B:01:D4:DD:D9:80
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b5:5e:27:f1:8c:41:9d:86:81:c8:f3:7a:2b:ba:d9:2a:68:
         61:91:49:1f:95:e2:85:d7:0d:f4:63:22:e6:ce:37:f1:45:af:
         2c:e4:67:6f:40:f2:85:cc:89:3a:65:eb:92:af:c9:a6:47:76:
         32:e8:25:11:36:58:87:ce:b0:a0:98:1c:be:b9:de:32:5b:f1:
         12:39:52:f2:a3:39:d9:ba:34:f8:c8:5a:90:ca:bd:72:a3:fc:
         f4:9d:0f:3b:da:f3:7c:d2:81:a4:58:7f:2e:eb:94:1d:d0:58:
         3a:e3:a9:4c:ee:a2:c6:e4:d8:12:d6:b4:2e:1e:2b:2a:a8:19:
         a7:4f:43:84:a2:49:2e:24:12:f2:de:11:b9:29:12:82:e8:87:
         5a:30:cd:e1:ff:c3:51:dc:da:fb:80:d6:d3:57:87:92:8f:c5:
         70:24:bd:90:f1:b5:85:56:55:be:b2:1d:64:d9:e7:58:ff:dd:
         ff:2b:00:72:f0:00:79:40:24:f4:b6:69:89:b7:c1:d0:d3:17:
         69:a5:63:4e:0a:cb:95:4e:9b:94:a6:7d:e8:bb:b3:50:49:7f:
         72:27:d3:a4:be:b6:fb:d8:05:5a:13:d4:34:e7:10:6f:14:6f:
         42:13:8f:17:38:18:b2:f4:69:7e:2a:4a:46:24:70:b7:fa:60:
         5d:34:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 08:08:10 2026 by rpki-client