This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
File:                     LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json)
Hash identifier:          3GONj+tQ3cCi4RUDKymJV+QyxFby8DFzYwTwEq2nUps=
Subject key identifier:   38:11:3A:4D:46:EA:95:A9:E9:FF:80:00:35:A9:2A:86:01:61:01:50
Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
Certificate issuer:       /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
Manifest number:          016D
Signing time:             Sat 17 Jan 2026 03:04:03 +0000
Manifest this update:     Sat 17 Jan 2026 03:04:03 +0000
Manifest next update:     Sat 24 Jan 2026 03:04:03 +0000
Files and hashes:         1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: B2/idsQRgS6oYIUwgHrVtVuX2BvHHBYAO2Vll8nWUQc=)
                          2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl
                          rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 03:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
        Validity
            Not Before: Jan 17 03:04:03 2026 GMT
            Not After : Jan 24 03:04:03 2026 GMT
        Subject: CN=696afc23-3b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:aa:f9:3f:ce:43:2c:a3:57:85:b5:59:be:
                    74:00:46:bc:d7:a6:03:53:30:44:52:77:d3:9d:cf:
                    41:f2:63:74:aa:9a:62:fc:a6:ec:4d:bd:8b:f9:8c:
                    3d:1f:17:e1:82:7d:b9:53:82:b4:a6:7c:11:e0:5f:
                    88:21:64:ab:d4:6d:e8:26:1e:ef:6e:8c:2f:c7:89:
                    64:65:57:71:69:ca:1b:97:85:7a:ba:a2:ac:2b:d8:
                    bd:61:63:c2:f2:e9:29:2e:8d:f9:34:34:39:42:82:
                    a7:78:73:f6:90:57:2f:1b:6c:74:8e:e8:1d:f5:d2:
                    fb:56:52:12:52:68:14:03:6c:5f:59:25:8f:6a:3c:
                    84:cc:8f:3c:a5:61:ef:d6:4a:4e:4b:03:1a:25:28:
                    33:20:1f:2a:b5:7c:ae:05:6c:fe:5a:74:ab:87:52:
                    5b:1d:3c:05:43:68:6b:c7:dc:26:36:82:0c:ec:52:
                    41:5e:fa:08:ee:11:f1:3b:cb:56:ad:eb:78:cf:8c:
                    e2:0d:72:dc:0d:21:7b:ae:4b:73:9e:13:46:e8:30:
                    7d:74:12:03:ee:07:92:dc:20:b9:fb:e0:ea:4f:cf:
                    50:40:27:c7:bd:02:8c:ea:11:e2:2b:e7:a8:ba:08:
                    85:4f:41:36:44:fc:14:99:87:66:70:11:4f:5c:c9:
                    cd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:11:3A:4D:46:EA:95:A9:E9:FF:80:00:35:A9:2A:86:01:61:01:50
            X509v3 Authority Key Identifier:
                keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:be:af:f5:80:44:a3:21:58:e1:1e:77:ef:4c:82:cc:ba:b8:
         b8:0a:ac:c4:be:f5:5e:7d:c7:b3:a1:c8:95:33:8a:22:d5:06:
         d2:2f:af:a7:16:96:36:b6:15:62:76:3a:1e:55:86:d0:b1:da:
         e0:d9:79:76:5d:e4:9a:f0:95:c5:eb:2a:03:42:81:bf:19:84:
         7c:4f:ec:ff:4f:98:46:48:1d:8e:93:52:b0:50:10:7d:15:2d:
         3f:b1:ce:57:57:aa:9e:cd:d6:15:72:ba:15:f3:b3:9c:8a:a9:
         21:5e:86:ea:c6:da:ac:44:39:ea:5b:5b:a9:f8:24:1e:34:48:
         97:c3:10:33:82:15:dc:c6:bf:92:c5:db:7b:80:d0:11:a4:da:
         8b:3b:fe:70:5a:3f:04:53:ec:1d:dc:55:76:10:1f:8b:fd:e8:
         ee:0b:a4:38:95:df:7a:79:dc:ab:b2:70:68:08:e5:c5:4b:8d:
         77:e1:4a:f9:a2:ba:87:7a:83:fb:4e:b1:1b:fe:ad:bc:1a:8f:
         94:4c:29:df:37:99:cf:73:59:14:68:89:82:a5:56:a8:f8:5d:
         52:b7:2b:5d:d3:24:a3:54:3f:00:23:d8:27:7f:18:28:e8:b4:
         18:4d:bf:7d:b1:6d:03:0b:11:28:4f:8f:d7:18:44:20:f0:c4:
         22:62:ea:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:02:07 2026 by rpki-client