This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
File:                     LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json)
Hash identifier:          fX1/ChADhlTCRCzC2/fhtal45isRYytG0h0qtoFiNUM=
Subject key identifier:   C8:CD:BD:00:E0:52:AF:19:F6:F8:27:2A:61:54:4A:9D:9F:DB:F0:8D
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Certificate issuer:       /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
Manifest number:          78
Signing time:             Sat 17 Jan 2026 05:53:27 +0000
Manifest this update:     Sat 17 Jan 2026 05:53:26 +0000
Manifest next update:     Sat 24 Jan 2026 05:53:26 +0000
Files and hashes:         1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: iX50Zr/fAXdtTLVCLfCrK8M+0RtPvsasjmhRlwIrP70=)
                          2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: qhyVTwwEqxyTdaMk7ejochFJVyO6XKIlCbt0eSHtSs4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 05:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
        Validity
            Not Before: Jan 17 05:53:26 2026 GMT
            Not After : Jan 24 05:53:26 2026 GMT
        Subject: CN=696b23d6-6a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:fa:bb:ad:55:44:bc:f2:27:85:a5:e9:7b:
                    0d:34:b6:16:d3:f7:de:bc:10:f6:e6:9f:59:60:b0:
                    e5:7b:28:92:0c:a4:bd:34:cf:33:f5:d7:58:00:f6:
                    3d:d9:57:a4:97:d6:a0:8a:a4:c2:49:cd:76:74:d7:
                    87:f4:c7:34:93:66:08:f8:8b:94:89:01:64:14:04:
                    a4:cb:d3:e9:2a:b3:e3:11:79:eb:c5:3d:63:57:04:
                    d7:d9:7b:b1:ea:f6:10:6c:55:64:ba:80:d7:28:0b:
                    25:ee:ac:53:a3:66:a5:ad:17:46:87:d9:b0:24:10:
                    92:c7:9d:ae:c0:1b:54:04:2b:74:c7:9d:b7:10:6d:
                    c6:72:97:09:b2:19:89:bc:80:c2:6a:65:35:c4:48:
                    24:4d:2a:d9:e7:87:93:44:1e:8f:3e:f0:24:4d:6b:
                    cb:2e:ee:c5:cb:e8:84:d5:1d:49:d8:49:7b:99:27:
                    f9:42:3d:7e:e4:fb:61:5b:ff:d3:c8:54:d3:00:dc:
                    fd:9f:d3:f2:37:c3:b5:02:b8:f8:c5:e9:e7:bf:3e:
                    d4:bf:3d:ca:79:e7:3f:90:09:6a:0a:29:47:6b:d9:
                    67:dd:89:93:98:50:45:d1:77:67:e5:b6:4f:40:04:
                    e6:c0:29:55:1c:e6:c1:7d:6b:47:be:b5:7e:e3:d0:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CD:BD:00:E0:52:AF:19:F6:F8:27:2A:61:54:4A:9D:9F:DB:F0:8D
            X509v3 Authority Key Identifier:
                keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8e:fb:14:7c:e3:0e:0f:28:8d:c5:2d:37:6a:0c:ae:57:9e:
         cd:a8:90:03:a0:d9:b7:87:61:2b:3f:5e:7b:c4:9a:f6:0f:5c:
         38:1b:d4:df:4e:f4:43:ff:d8:b7:cb:2d:ac:16:69:ca:07:97:
         d4:65:e0:62:39:4c:31:d8:db:e1:6b:44:93:f0:c5:a2:e1:b6:
         f5:6a:ff:f8:78:cd:59:20:2d:77:3a:d3:a4:e2:b2:d7:c1:e4:
         5b:5d:2e:9c:4c:5c:ff:8d:f6:8a:36:32:38:4e:2d:d8:5c:ba:
         7d:31:28:25:b0:36:0e:90:2e:dc:57:ae:68:71:32:cf:12:ff:
         51:67:42:cf:7b:80:75:e4:ae:c2:4f:82:17:43:8d:78:93:b9:
         dd:16:25:d8:7c:07:75:e3:43:9b:e9:c9:6a:42:d9:70:89:ed:
         a9:7d:94:cc:19:b3:7c:e2:fd:4e:aa:14:26:55:99:09:5e:b7:
         3e:0f:15:7c:1d:22:d0:89:7d:db:1b:93:6b:f0:26:49:c5:eb:
         04:4d:b1:5b:be:7c:c4:f3:2c:c2:4f:bb:9d:9e:f0:87:05:67:
         95:d1:53:cc:3d:03:86:d4:21:71:c3:08:c4:12:b1:22:aa:cf:
         b6:6b:4e:0b:c5:7a:c6:72:1d:4e:e0:d9:4d:8a:44:ea:d6:ee:
         e1:83:ad:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:20 2026 by rpki-client