This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
File:                     lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json)
Hash identifier:          5lCkLeyeK9v5qxhkC/0Dc4bTr7EIEBFLM5qXEoNubUg=
Subject key identifier:   C0:B3:7A:5A:44:DC:4C:5F:62:39:7F:F6:44:AA:CB:62:2A:7C:B7:6E
Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
Certificate issuer:       /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
Manifest number:          0A
Signing time:             Wed 21 Jan 2026 07:08:40 +0000
Manifest this update:     Wed 21 Jan 2026 07:08:39 +0000
Manifest next update:     Wed 28 Jan 2026 07:08:39 +0000
Files and hashes:         1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: 525KKtZbXZpPixZh5xigTr+X9CkctDEEn2xbZo+eZ0M=)
                          2: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: 330aH4UPnOEaUrWzXgQByCgb0v3T98ndLyMTMHzMXrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
                          rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 07:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
        Validity
            Not Before: Jan 21 07:08:39 2026 GMT
            Not After : Jan 28 07:08:39 2026 GMT
        Subject: CN=69707b78-3de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:8c:f9:ff:ca:26:57:7c:ec:e1:28:73:8b:
                    22:d5:4a:aa:18:09:5a:7c:1f:b1:93:c7:4c:99:ff:
                    35:8f:f7:74:0d:f9:bb:9e:d5:75:6b:dd:96:53:e8:
                    e6:d3:c9:b0:bb:e9:54:45:d5:c3:8a:e2:c8:62:cf:
                    95:bc:a9:19:03:07:55:8b:90:67:a1:d9:33:67:ee:
                    c4:63:3f:d9:c6:34:8d:89:02:88:84:8a:66:0e:23:
                    6c:23:50:68:6e:98:cd:e4:61:bd:19:d5:7b:ad:8a:
                    1b:08:47:c3:34:5d:d2:3d:e5:90:0e:d8:1e:95:4e:
                    9f:30:39:06:c3:98:97:a6:4a:c9:27:13:b2:63:95:
                    fe:1f:e9:ce:0e:57:97:f6:80:b0:74:01:17:2a:a7:
                    a0:50:c2:09:39:22:5e:21:e1:cf:40:89:74:11:ad:
                    59:b1:b4:3e:4e:c7:05:4b:f6:98:7e:13:13:41:88:
                    77:ed:b9:7c:ed:4a:cb:7b:c9:55:45:2c:c9:f1:88:
                    9f:61:7c:09:dc:72:be:bc:c7:b6:43:59:ac:bf:83:
                    4e:72:ac:bb:c1:a6:9f:b8:18:b4:36:93:28:d2:25:
                    f8:79:5d:de:db:7e:fb:97:be:b3:de:34:67:15:77:
                    32:e5:99:1e:69:fd:de:9e:7d:2d:4b:74:d6:67:7b:
                    1e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B3:7A:5A:44:DC:4C:5F:62:39:7F:F6:44:AA:CB:62:2A:7C:B7:6E
            X509v3 Authority Key Identifier:
                keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ef:27:52:9e:05:72:49:e1:a9:3d:8b:26:45:00:ec:0c:cb:
         05:50:7a:14:56:f6:04:29:89:34:57:85:11:5c:2f:70:97:c0:
         3f:87:96:60:2f:2f:8a:be:6b:08:41:27:06:71:79:06:c9:f3:
         1c:14:b3:c0:98:17:a6:2c:d8:bd:da:cf:c1:5b:d6:58:3e:a8:
         6f:95:d7:37:56:2e:31:0e:4b:47:b6:47:5c:75:c6:01:46:f2:
         79:1a:56:c5:8f:c4:26:2b:d1:71:cb:9a:5a:ad:cb:10:ff:53:
         8d:f2:06:04:6b:73:f0:b8:ac:71:1e:ce:42:46:af:88:b9:dc:
         16:bb:c4:b2:74:74:4b:df:27:23:d7:83:ae:31:55:ff:a7:3c:
         eb:5e:b0:77:a2:27:a4:23:2b:06:96:fe:dd:08:10:4d:a9:30:
         06:e9:38:de:4e:77:ba:09:5f:5b:b9:fb:7e:f9:a9:dc:f3:22:
         e1:e8:b2:a9:45:d0:5e:f6:20:07:0b:ea:6d:65:1d:ae:be:1e:
         02:5f:7d:e1:e6:52:a0:9a:f5:45:a9:20:af:82:3b:4b:26:c3:
         a5:ac:81:3a:33:55:74:2f:55:64:c9:76:55:6c:b7:ad:32:83:
         f3:0a:41:74:43:c0:13:53:d0:34:ff:40:a7:81:ac:2a:b3:11:
         53:48:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 00:53:54 2026 by rpki-client