This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
File:                     lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json)
Hash identifier:          f84eHmQoa1675kVjjKvJNy0Pl6UxfbDJ35QnH0ZLNlY=
Subject key identifier:   50:2D:49:63:7B:54:41:0D:1C:1A:43:29:7B:E9:6D:F0:20:6C:B3:49
Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
Certificate issuer:       /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Certificate serial:       0260
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
Manifest number:          024E
Signing time:             Sat 17 Jan 2026 00:59:53 +0000
Manifest this update:     Sat 17 Jan 2026 00:59:53 +0000
Manifest next update:     Sat 24 Jan 2026 00:59:53 +0000
Files and hashes:         1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: /vbk2LPwLTn/nkOdLaO0iwYuXv3xFnMJxaJ3ZD2PJik=)
                          2: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: +1v8a+kd3vrNlmA49WuinXFLbTN3K9vA54mVSEDCwVI=)
                          3: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: 6JE0CpuqzhytoSjJ6WQfnw2PyEDyCfuYvVBRaPTy/O0=)
                          4: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: vbYFC6gCyDs/e9kJtd3p8hTC7XpM+OZ2Y3//6IjJkSs=)
                          5: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: q5K3slMKgP++7PtYpHOExE35HrkE08dbRFYVLUwTZjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
                          rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 00:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
        Validity
            Not Before: Jan 17 00:59:53 2026 GMT
            Not After : Jan 24 00:59:53 2026 GMT
        Subject: CN=696adf09-711b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:60:83:95:fe:09:86:00:4e:b8:b3:b2:79:
                    68:75:05:6b:02:d6:dc:2b:79:36:be:37:cc:7a:ae:
                    a7:a6:15:f7:99:30:86:98:76:9e:da:1d:06:06:9e:
                    78:f2:b3:77:05:14:67:ed:d8:d7:d3:c2:7a:46:d8:
                    7e:cb:98:9b:67:5d:85:db:a1:9c:59:13:ee:be:f3:
                    8b:92:84:8b:22:97:e1:00:1d:76:f2:30:6c:7d:e1:
                    9d:a4:39:2e:90:cb:20:80:e8:d1:4b:aa:89:61:ae:
                    7f:80:01:65:4d:40:a7:f8:f4:9d:20:b9:75:9a:52:
                    1f:07:23:27:8f:d1:89:fe:01:a2:12:51:d8:4e:6a:
                    d6:32:51:4c:6c:48:88:61:25:52:b5:10:76:cc:30:
                    a1:8f:42:c3:38:0e:89:fd:69:20:aa:70:2d:16:76:
                    85:db:31:d2:25:ba:0d:29:80:01:e1:59:ab:2d:9b:
                    1a:47:7c:52:3f:76:5e:b1:9c:9b:b3:52:3c:de:c6:
                    c7:ed:a0:fd:b0:7a:81:62:2f:d3:8b:8c:ca:1d:a1:
                    82:d6:7f:ca:c4:a2:c0:31:ff:98:3d:68:ce:1c:0f:
                    ed:3c:83:7d:cf:3e:5c:b0:13:ee:97:80:5b:fb:02:
                    d8:5d:23:e7:f0:8b:e5:cb:b7:46:62:e4:3d:34:e0:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2D:49:63:7B:54:41:0D:1C:1A:43:29:7B:E9:6D:F0:20:6C:B3:49
            X509v3 Authority Key Identifier:
                keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2a:9c:59:14:2e:f5:27:e8:28:b6:de:17:e8:cd:36:21:50:
         6c:3b:41:36:c6:4f:a5:33:29:57:dc:e9:29:2f:52:26:8b:c5:
         9e:cf:3d:45:30:f8:b4:8d:f0:91:13:8f:0d:f8:8c:aa:d0:61:
         ea:68:62:dd:97:f3:ab:fb:2a:d3:ea:49:01:93:35:f6:78:9e:
         a2:9c:e5:b2:9a:90:90:f2:60:ed:64:fe:8c:e5:aa:4f:60:05:
         e8:27:a2:f0:42:a4:f9:9f:e2:fe:24:46:82:0d:f9:3c:c7:58:
         4f:57:84:b1:53:fa:a2:ba:cd:c7:e4:f4:3a:5e:f3:dd:90:e6:
         23:be:77:6e:60:c6:52:22:4a:6f:a4:98:2a:25:88:8d:c9:ff:
         7c:f2:70:bb:ad:1f:2e:60:19:b5:46:eb:ce:d1:7a:94:4e:9b:
         9c:b8:0c:35:89:b3:c1:cd:53:31:23:eb:db:e8:3c:6e:70:cb:
         68:6f:fc:75:50:cb:a3:e8:1b:bf:49:13:2d:ff:06:da:4f:6c:
         43:f5:a7:3f:3a:c4:31:40:53:bc:45:40:14:d0:85:dc:20:ee:
         5b:f3:d4:27:05:17:57:72:2d:8f:7c:4b:c6:14:ea:9f:03:6e:
         a1:31:78:e3:4f:3b:07:12:69:a2:d1:63:46:93:16:f8:98:0b:
         cb:09:f5:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx
MTBENDVCRTMwHhcNMjYwMTE3MDA1OTUzWhcNMjYwMTI0MDA1OTUzWjAYMRYwFAYD
VQQDDA02OTZhZGYwOS03MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLZgg5X+CYYATrizsnlodQVrAtbcK3k2vjfMeq6nphX3mTCGmHae2h0GBp54
8rN3BRRn7djX08J6Rth+y5ibZ12F26GcWRPuvvOLkoSLIpfhAB128jBsfeGdpDku
kMsggOjRS6qJYa5/gAFlTUCn+PSdILl1mlIfByMnj9GJ/gGiElHYTmrWMlFMbEiI
YSVStRB2zDChj0LDOA6J/WkgqnAtFnaF2zHSJboNKYAB4VmrLZsaR3xSP3ZesZyb
s1I83sbH7aD9sHqBYi/Ti4zKHaGC1n/KxKLAMf+YPWjOHA/tPIN9zz5csBPul4Bb
+wLYXSPn8Ivly7dGYuQ9NODyzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAtSWN7
VEENHBpDKXvpbfAgbLNJMB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD
REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0UzRi8zMDVFQjg3NjdDREIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRU
aTBkelJWUzJrRk1SRFVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZKpxZFC71J+gott4X6M02IVBsO0E2xk+lMylX3OkpL1Imi8Wezz1F
MPi0jfCRE48N+Iyq0GHqaGLdl/Or+yrT6kkBkzX2eJ6inOWympCQ8mDtZP6M5apP
YAXoJ6LwQqT5n+L+JEaCDfk8x1hPV4SxU/qius3H5PQ6XvPdkOYjvnduYMZSIkpv
pJgqJYiNyf988nC7rR8uYBm1RuvO0XqUTpucuAw1ibPBzVMxI+vb6DxucMtob/x1
UMuj6Bu/SRMt/wbaT2xD9ac/OsQxQFO8RUAU0IXcIO5b89QnBRdXci2PfEvGFOqf
A26hMXjjTzsHEmmi0WNGkxb4mAvLCfVI
-----END CERTIFICATE-----
Generated at Sun Jan 18 16:43:58 2026 by rpki-client