This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
File:                     lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json)
Hash identifier:          RQhSnmpsZre3TcYIlkISXv1rAE+1c8vtlqlX/cfn8KU=
Subject key identifier:   E6:A8:D8:2A:6A:C4:A6:C3:68:A8:B6:14:6F:B3:FC:7C:79:CC:16:83
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       07F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
Manifest number:          0783
Signing time:             Sun 18 Jan 2026 21:16:11 +0000
Manifest this update:     Sun 18 Jan 2026 21:16:11 +0000
Manifest next update:     Sun 25 Jan 2026 21:16:11 +0000
Files and hashes:         1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: 2duT2/By62fqvgNdTMfmeyDLC8tZdWhfqJtVlJ/x61A=)
                          2: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: rSNBIXkV3cHTqpqHK191W8K7lRyWQtgcWXUGkAW+h84=)
                          3: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: l/lqNDUiyb5NZKhLLNIq7WZOuz2szj0dEY8tsSYQa68=)
                          4: B32F80267BD111EBBB223C84C4F9AE02.roa (hash: 9xxfFQj9VcRGVKn72JJkh2kUlC310SJGWCHPDEZwjH0=)
                          5: 15434774090211EEA1C06509C4F9AE02.roa (hash: dzvzv1MDGjHRHVHiGPmML1F3imLu7s8q7tD+NO4TDds=)
                          6: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: InXUcvdRUa1rt2SL0tMM3Hgfi86gvB0qmAGoxlh6kYc=)
                          7: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: JzLTfh+GciE2ubQPVVJG4EzQllt5nNHJ0s9t7GZNzHw=)
                          8: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: psfjW3LbfsqjUORRddKlOh9lmY1USdZrWQkZoOrVeIo=)
                          9: 584506BE6AFA11F0B55F3536C4F9AE02.roa (hash: rJtIFizn/sQTm217EeawbIANI0Uxj/WGOrOl2uJ5f2c=)
                          10: 18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa (hash: 6XffBxe23SAqk8mZhlvHVbw6Cbg+lycUE8a5p6bfPGE=)
                          11: 168FD534090211EEA1C06509C4F9AE02.roa (hash: 56ghv9vhYovbphtcZh0pFu9WFqM/EpFjTMqOzB0oI+U=)
                          12: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: hJIP3vaCxaXSerzNVIz2IckZKnqrBprCPLaUe55Jaxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 21:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2032 (0x7f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jan 18 21:16:11 2026 GMT
            Not After : Jan 25 21:16:11 2026 GMT
        Subject: CN=696d4d9b-8c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:80:ad:3e:b7:ca:ac:2c:95:f9:66:d7:86:
                    bf:55:0f:85:79:e4:20:97:6c:32:b5:ed:3f:df:44:
                    0a:cc:f8:15:ec:a0:42:04:5a:5b:b3:9b:a6:8a:00:
                    c3:47:e3:70:43:b5:06:82:ae:f6:2c:de:0b:ef:3d:
                    72:cd:b5:61:3c:2c:de:15:a4:15:4e:21:0f:58:69:
                    28:1f:56:59:b1:82:e9:2d:6d:ad:f6:36:09:c0:84:
                    c3:80:a9:a7:38:c5:f6:6c:61:33:ed:ce:72:06:ce:
                    10:81:60:75:45:fc:81:d1:d6:42:5e:de:68:e0:0f:
                    0d:63:aa:4e:c2:23:9c:ad:5d:b3:e4:5b:0c:8a:d6:
                    75:44:61:72:0a:a2:3d:0c:fe:4f:46:14:44:fa:31:
                    aa:1b:a6:e8:a0:a1:11:8b:b3:f8:06:a3:22:69:24:
                    a5:89:9f:ca:8e:73:47:f8:4f:f7:bc:fa:75:4b:b1:
                    32:23:55:da:4f:4a:15:91:a7:f2:e3:e1:35:b0:ed:
                    37:3c:d7:e7:48:ce:56:e2:40:88:45:ce:ba:c9:b9:
                    0b:88:23:fe:df:4c:3d:d7:6a:c5:45:a0:a3:d0:d6:
                    80:f4:ac:af:be:b1:88:73:0d:49:53:30:27:c6:71:
                    e1:67:e5:0d:f0:dd:76:c1:77:40:6e:d3:fb:e4:a4:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A8:D8:2A:6A:C4:A6:C3:68:A8:B6:14:6F:B3:FC:7C:79:CC:16:83
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f3:52:c0:61:c3:12:d0:ec:87:24:21:2c:a3:04:4a:32:24:
         6d:e2:5c:f1:68:c2:cd:a8:09:ad:55:5f:0d:4f:43:85:da:3e:
         0c:05:1a:7b:3f:8b:dd:a3:67:65:89:ad:c0:77:78:af:cc:d4:
         b3:2b:04:14:56:2d:53:45:6a:03:ca:f3:cc:17:6b:73:bf:2d:
         21:ea:8a:c2:11:f2:bf:50:e5:a5:8c:29:85:ce:8d:1c:cc:5b:
         1c:69:93:e1:ba:17:d5:8f:9f:f3:07:02:1c:d0:c5:01:0b:7e:
         9a:0c:57:0e:8a:88:ac:de:d5:4d:30:79:35:13:bc:2a:30:b2:
         1d:da:7f:f7:ee:70:b6:0a:a3:8d:0c:13:0e:47:5e:df:3d:43:
         c0:88:fd:fa:b7:96:43:85:c3:aa:3b:a0:7f:86:8b:17:d6:57:
         32:b0:75:11:15:38:b0:ac:8c:0e:7c:ba:42:29:c7:fb:10:ff:
         7d:c1:44:54:7c:11:20:2a:24:c6:ae:b6:d6:01:19:cb:95:23:
         09:8c:47:e2:48:6b:b2:3d:f3:7c:ad:ed:85:0d:6c:81:70:53:
         0d:50:32:40:97:52:bd:06:e3:57:fd:e1:7a:93:3e:21:9a:7e:
         44:b9:cd:67:a7:c8:cc:4a:d6:81:3e:32:23:79:23:c2:b4:a5:
         c7:21:a3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 19:20:51 2026 by rpki-client