This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File:                     lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier:          HWqGC/N9gjzcJSL6SPEx6MJxgvUUP38JiLAzFmkqC5Y=
Subject key identifier:   24:7E:67:DC:F6:A2:D2:56:53:9E:ED:B0:2D:62:D5:6D:69:86:E7:AE
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number:          0778
Signing time:             Mon 26 Jan 2026 22:21:55 +0000
Manifest this update:     Mon 26 Jan 2026 22:21:55 +0000
Manifest next update:     Mon 02 Feb 2026 22:21:55 +0000
Files and hashes:         1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: KEys7/aumePaTdd1gIZMBC/BX/TCb4sW1jISPXaqIBI=)
                          2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: hVEGhELX1A8z+OTyICUg8ehNwNYoGDS6osi29y06XSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 22:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: Jan 26 22:21:55 2026 GMT
            Not After : Feb  2 22:21:55 2026 GMT
        Subject: CN=6977e903-3072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:bd:46:ca:99:30:3c:a4:6b:ef:dc:c8:00:
                    88:05:b3:48:6f:7e:ff:b5:48:31:14:a9:8a:e0:5b:
                    af:8a:3e:0d:ce:79:a5:f1:d6:dc:8c:34:27:10:bb:
                    20:4f:e2:61:be:b5:02:1c:35:a2:4e:b8:f4:4e:29:
                    0c:2c:1a:62:86:70:f2:c9:c1:4e:70:d1:05:c6:44:
                    a9:36:ef:90:a1:17:c2:87:60:22:e1:9f:0e:ff:52:
                    d2:ef:f5:eb:3c:ef:6b:43:83:f6:05:69:55:1a:36:
                    d6:99:f0:95:3c:5e:fc:d2:fa:8c:42:e2:fa:28:d8:
                    bc:8d:e1:3d:5b:a5:77:1f:ed:01:ed:17:3d:47:52:
                    5b:23:75:01:77:f4:e1:89:37:3a:b0:ab:5e:7e:7b:
                    a8:38:11:db:13:f4:c3:37:95:4f:b8:9e:af:4e:ce:
                    14:0c:3f:35:b7:de:f0:15:c1:28:ed:95:0e:79:60:
                    14:d4:b6:80:6b:b1:9b:b7:8e:6b:91:9a:94:90:e5:
                    42:fd:0d:b5:a7:a3:cd:f2:19:d0:3c:67:cf:c7:d9:
                    dd:4d:fa:3d:e4:cd:f6:8b:be:36:e4:eb:8d:dc:c4:
                    39:47:d3:e9:cc:f6:d8:91:c9:66:aa:0e:de:16:18:
                    dd:c9:66:67:fa:69:68:ce:62:98:29:dc:ee:62:0a:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7E:67:DC:F6:A2:D2:56:53:9E:ED:B0:2D:62:D5:6D:69:86:E7:AE
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:27:e9:76:2e:fa:ae:14:9c:fb:61:46:7b:50:b3:0f:e2:
         7d:ac:c4:7e:41:16:d5:47:5a:69:6b:02:f7:9e:b3:0b:0e:a1:
         06:20:e1:53:0c:a6:e3:a5:63:fa:4a:14:26:50:af:d8:ea:14:
         11:6e:75:07:f4:fa:29:79:87:2c:b6:e7:68:c7:72:62:5f:4d:
         63:81:c4:85:53:29:1b:fd:54:4c:b0:a7:9f:28:f1:d1:8a:da:
         01:a3:a1:fe:e7:18:cc:38:8e:71:fc:72:88:38:98:c8:0e:be:
         70:15:76:47:3d:13:d7:57:1b:3f:34:01:56:e3:8c:69:42:f2:
         7b:c7:a5:0c:04:ea:d1:db:b7:22:c9:7a:97:17:ae:48:80:8a:
         6f:40:3d:97:0a:d3:4f:cd:ce:d4:90:bc:fe:50:4e:0e:38:4f:
         8f:31:f0:e7:71:77:d6:ec:b3:40:a8:e0:7c:02:80:ac:e6:ba:
         c0:69:a1:7d:bd:da:01:18:1a:f7:6f:1e:55:18:7f:b9:b8:53:
         ec:22:87:5f:0d:c4:66:8b:e1:a5:49:1f:5f:a0:bb:c4:eb:99:
         07:47:f7:03:b5:2f:5f:a0:29:ec:6b:b2:f4:e4:84:97:81:12:
         8a:18:4b:88:92:23:1e:df:a4:6c:b0:36:c1:a4:be:82:fc:af:
         7a:52:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 23:18:25 2026 by rpki-client