This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
File:                     LDapC6RHk-UIQM9l9mUogr_PuPI.mft (raw, json)
Hash identifier:          2eIYw1fgwzAqU4ValohB40WDypRnbj8bVbTocHIiU3g=
Subject key identifier:   4E:53:3A:F4:96:5F:96:B4:92:D3:54:4C:67:22:BE:5F:A6:68:66:D5
Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2
Certificate issuer:       /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2
Certificate serial:       067C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
Manifest number:          0675
Signing time:             Fri 16 Jan 2026 21:50:08 +0000
Manifest this update:     Fri 16 Jan 2026 21:50:07 +0000
Manifest next update:     Fri 23 Jan 2026 21:50:07 +0000
Files and hashes:         1: LDapC6RHk-UIQM9l9mUogr_PuPI.crl (hash: paNOKSUah6QqcsS4mi+C/y1HRf/n8Cfq1n3b0oA4O9A=)
                          2: 7054AB4AAC5611EBA1C1D381C4F9AE02.roa (hash: OFrwiJWAkGGk5FsDremtK39rCrSaFqlUshUtXmOJ9aQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl
                          rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 21:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660 (0x67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D00, serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2
        Validity
            Not Before: Jan 16 21:50:07 2026 GMT
            Not After : Jan 23 21:50:07 2026 GMT
        Subject: CN=696ab290-7618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:74:a8:a4:96:35:91:d1:b2:39:b3:6f:04:15:
                    f9:45:2c:1b:49:b4:d5:8f:a2:ed:b6:da:87:f4:3d:
                    62:8b:cc:76:c9:6f:d3:dc:65:8a:7d:17:89:3a:7b:
                    2e:00:3e:65:84:0f:f7:07:fc:70:11:f2:47:26:1e:
                    f8:07:76:82:9e:98:86:ab:89:cf:ae:bb:4c:96:c5:
                    dc:51:c5:5a:b4:16:dc:34:cd:9d:eb:42:22:08:95:
                    57:d5:17:f8:44:bb:8e:7d:14:f7:f0:a3:cd:db:da:
                    68:09:d2:de:5f:50:61:26:c8:6b:5b:45:c8:d4:7b:
                    d0:3d:1d:f4:6b:c0:f6:84:cd:fa:e5:78:1e:0c:b4:
                    b4:90:e8:39:77:4f:60:70:17:f1:7a:c3:2a:28:33:
                    ff:a0:85:a2:71:7d:7f:0a:f9:ad:fb:75:bb:6d:b4:
                    cd:dc:0b:56:8e:bc:a5:72:25:56:b3:ff:19:83:4c:
                    21:a7:51:1d:93:6c:a6:27:2a:d6:29:9e:8f:93:d6:
                    42:19:e0:ee:bf:fb:46:a1:90:a6:8a:91:35:e3:e2:
                    61:bd:03:c6:35:07:4d:53:e5:66:fa:c5:38:05:9a:
                    71:45:ce:98:d8:52:7e:74:07:4e:07:8d:49:aa:12:
                    a3:63:1e:33:1d:1d:5c:d5:b8:18:27:f6:99:9b:8d:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:53:3A:F4:96:5F:96:B4:92:D3:54:4C:67:22:BE:5F:A6:68:66:D5
            X509v3 Authority Key Identifier:
                keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:04:6c:a0:b3:fe:16:6d:bb:4f:5d:60:71:27:35:43:e4:c5:
         95:87:f8:f9:83:c8:3f:88:50:e1:0a:c3:19:7b:c9:16:e1:ab:
         5a:15:3d:68:62:75:e2:4c:c0:62:70:43:02:39:be:c6:77:93:
         9f:74:69:e3:93:cd:4c:15:27:1c:ee:34:e0:16:a6:b9:43:90:
         bd:20:bb:c5:36:26:2c:d0:5a:6d:a6:6f:da:0c:2e:32:20:9f:
         d6:c2:18:c3:ac:6b:55:ac:38:33:93:c7:3e:ac:78:94:35:1e:
         87:4a:b7:45:0a:1b:f5:b9:57:ad:6e:49:fc:46:30:dd:e1:e3:
         fd:02:a9:9e:00:7e:ce:45:03:0d:00:28:f4:25:69:25:64:f1:
         bc:a2:c1:a4:39:6b:cb:6a:db:cf:b0:bb:16:60:7b:80:9a:e5:
         f1:e4:2c:23:c6:b7:c0:66:84:d3:70:b7:d4:95:08:c2:b6:75:
         f8:e2:28:58:b8:9a:15:ec:5e:1f:2f:08:4a:66:8c:6f:e9:da:
         26:6d:6b:68:a7:56:f0:f7:6b:cf:d4:36:a7:a9:4b:ca:de:eb:
         32:09:64:13:44:af:c4:6d:cc:55:fd:b8:db:68:1e:85:0c:3b:
         0f:b3:68:d8:32:c6:28:14:68:a6:11:79:c4:89:51:1d:4f:35:
         7e:21:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 07:44:47 2026 by rpki-client