This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
File:                     lDrZvGF3q4wvjoExwUpUZexClU8.mft (raw, json)
Hash identifier:          ZldqpmxmpdwpXsl5HZ/wED4DYSMixnvq3vlEmP4XpXM=
Subject key identifier:   79:DB:F8:00:1D:74:0F:FE:B5:E0:E6:25:6D:44:3C:56:05:CF:C9:3A
Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
Certificate issuer:       /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
Manifest number:          01AD
Signing time:             Mon 26 Jan 2026 18:12:21 +0000
Manifest this update:     Mon 26 Jan 2026 18:12:20 +0000
Manifest next update:     Mon 02 Feb 2026 18:12:20 +0000
Files and hashes:         1: lDrZvGF3q4wvjoExwUpUZexClU8.crl (hash: XbkZJpz2XeZI8qUnF+EHuNYigyg7RQuXnMHlOYWkZOc=)
                          2: 203DB338782111EEAFDDBD86C4F9AE02.roa (hash: ykJXAmgC9kF9NQ7NL49IYzkwdwdEbjDilRroROFuhv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
                          rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 18:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
        Validity
            Not Before: Jan 26 18:12:20 2026 GMT
            Not After : Feb  2 18:12:20 2026 GMT
        Subject: CN=6977ae85-c9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:4d:92:5e:95:00:02:62:25:70:9d:c2:87:
                    a3:36:54:fe:79:cb:5a:9f:01:02:8b:69:ec:e8:35:
                    ab:9a:d8:a7:c6:a3:ed:47:de:7f:aa:4b:34:e1:a4:
                    9c:59:8f:e5:d1:df:33:fc:0e:5a:08:e4:32:f7:30:
                    c5:f6:6c:c7:40:a0:a0:6c:ca:77:aa:19:4a:c8:59:
                    cc:1e:b1:60:21:ad:fe:81:4c:be:9f:f4:25:ed:0f:
                    25:6b:de:86:d8:45:e8:12:bf:07:86:ab:80:f5:aa:
                    2c:c9:a3:ac:05:0a:9d:67:d6:05:7a:27:13:5b:21:
                    40:97:4c:12:b7:49:62:d9:97:7b:6e:ef:3b:a5:65:
                    24:38:64:59:a5:c3:99:93:fc:c8:5c:3d:e1:86:a8:
                    4f:29:66:ea:51:89:7e:93:a2:8c:4a:84:ed:50:ca:
                    6d:dd:8f:03:16:21:79:9a:bf:0a:94:04:93:71:cc:
                    b7:82:3b:53:98:a0:d3:f8:04:d4:20:f7:97:10:5f:
                    e1:31:17:ff:01:f4:d5:80:a2:0c:08:e6:c3:2a:88:
                    b1:c3:fd:1b:b1:cd:7f:cb:50:27:71:52:69:d9:ae:
                    96:18:b2:92:de:34:bf:ae:aa:de:0a:7c:f1:13:4c:
                    98:8a:eb:67:0e:b2:04:18:90:fc:fa:9d:71:ae:db:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DB:F8:00:1D:74:0F:FE:B5:E0:E6:25:6D:44:3C:56:05:CF:C9:3A
            X509v3 Authority Key Identifier:
                keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0f:77:99:63:a0:04:17:a3:64:d6:48:d5:32:86:2a:7b:69:
         c6:42:45:3f:64:01:63:6c:da:21:db:b5:01:7f:5e:2e:5f:9c:
         8d:ac:c1:c7:a9:1a:b0:d2:9c:41:14:04:5f:99:34:5c:28:ef:
         20:8f:d8:f2:d1:66:ce:d0:24:08:cf:9b:01:24:57:a5:c9:92:
         7e:27:30:ae:4e:e9:cf:28:e0:c6:23:2a:bf:c2:1d:df:b2:48:
         89:d9:cc:02:aa:d4:8c:a8:57:7c:04:97:a4:fe:c1:4e:05:d3:
         de:a1:a9:79:a6:06:a1:31:02:95:34:71:75:50:7b:c7:52:b4:
         0e:3e:1d:d1:50:16:44:e8:52:3f:9f:05:f3:cb:d8:fa:fa:24:
         0a:c2:91:13:be:99:a6:3c:27:a9:de:97:7e:3d:b4:8b:c7:b6:
         14:07:e6:ee:2d:43:6c:5d:8d:5a:37:5b:25:a9:52:fa:0b:54:
         07:06:30:da:35:de:5a:e1:86:03:12:91:80:7f:f7:06:36:d7:
         83:21:1a:9b:1d:dc:16:6c:e4:fe:2e:65:f9:66:b4:48:73:07:
         a2:39:fc:d5:1d:3a:d2:40:38:50:57:94:bf:12:97:8c:1e:bc:
         13:7e:1c:ad:09:c6:fd:b2:b3:8f:69:e9:13:35:08:4d:d8:a5:
         e4:6f:00:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NTg1NjgxMTAvBgNVBAUTKDk0M0FEOUJDNjE3N0FCOEMyRjhFODEzMUMxNEE1NDY1
RUM0Mjk1NEYwHhcNMjYwMTI2MTgxMjIwWhcNMjYwMjAyMTgxMjIwWjAYMRYwFAYD
VQQDDA02OTc3YWU4NS1jOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyylNkl6VAAJiJXCdwoejNlT+ectanwECi2ns6DWrmtinxqPtR95/qks04aSc
WY/l0d8z/A5aCOQy9zDF9mzHQKCgbMp3qhlKyFnMHrFgIa3+gUy+n/Ql7Q8la96G
2EXoEr8HhquA9aosyaOsBQqdZ9YFeicTWyFAl0wSt0li2Zd7bu87pWUkOGRZpcOZ
k/zIXD3hhqhPKWbqUYl+k6KMSoTtUMpt3Y8DFiF5mr8KlASTccy3gjtTmKDT+ATU
IPeXEF/hMRf/AfTVgKIMCObDKoixw/0bsc1/y1AncVJp2a6WGLKS3jS/rqreCnzx
E0yYiutnDrIEGJD8+p1xrtv8+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnb+AAd
dA/+teDmJW1EPFYFz8k6MB8GA1UdIwQYMBaAFJQ62bxhd6uML46BMcFKVGXsQpVP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC8zNjE4QUI2RTcy
QTMxMUVFOTQ1NTcyMTFDNEY5QUUwMi9sRHJadkdGM3E0d3Zqb0V4d1VwVVpleENs
VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2xEclp2R0YzcTR3dmpvRXh3VXBVWmV4Q2xVOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODU2OC8zNjE4QUI2RTcyQTMxMUVFOTQ1NTcyMTFDNEY5QUUwMi9sRHJadkdGM3E0
d3Zqb0V4d1VwVVpleENsVTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8D3eZY6AEF6Nk1kjVMoYqe2nGQkU/ZAFjbNoh27UBf14uX5yNrMHH
qRqw0pxBFARfmTRcKO8gj9jy0WbO0CQIz5sBJFelyZJ+JzCuTunPKODGIyq/wh3f
skiJ2cwCqtSMqFd8BJek/sFOBdPeoal5pgahMQKVNHF1UHvHUrQOPh3RUBZE6FI/
nwXzy9j6+iQKwpETvpmmPCep3pd+PbSLx7YUB+buLUNsXY1aN1slqVL6C1QHBjDa
Nd5a4YYDEpGAf/cGNteDIRqbHdwWbOT+LmX5ZrRIcweiOfzVHTrSQDhQV5S/EpeM
HrwTfhytCcb9srOPaekTNQhN2KXkbwA0
-----END CERTIFICATE-----
Generated at Tue Jan 27 08:51:44 2026 by rpki-client