This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
File:                     B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json)
Hash identifier:          Z/M+AV7UCTg91fvrdpcqiAoyr2RzZPD3t3QNAjXxROo=
Subject key identifier:   FA:2F:01:84:6A:69:78:95:72:79:32:AA:14:DE:25:53:66:9C:94:16
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Certificate issuer:       /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial:       0C4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
Manifest number:          0C23
Signing time:             Mon 26 Jan 2026 18:21:25 +0000
Manifest this update:     Mon 26 Jan 2026 18:21:24 +0000
Manifest next update:     Mon 02 Feb 2026 18:21:24 +0000
Files and hashes:         1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: UfgYF2xnK5Aeo110vldx6mtJYAxOIeBxug1/4XwQM7U=)
                          2: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: FwgzcLz0ulXMRpFgzbkDkNByfvZ6IbVg9iuXnMBlPn8=)
                          3: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: Sl2tMoYhByQON3OQDfsgcEffVFzoKHXdVYWVXDvcBs0=)
                          4: 4CC6B77C0A9111EEB13EAF44C4F9AE02.roa (hash: Q126CFPL/s25JF6KvmlAOFjv6RGeyGcvlBD4fQKaIYw=)
                          5: DAFD055806F811EC9558C827C4F9AE02.roa (hash: ybKZLsY+57p/scYl21b5JlU/OiypmhYbCt17K0vvM+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
                          rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 18:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3148 (0xc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
        Validity
            Not Before: Jan 26 18:21:24 2026 GMT
            Not After : Feb  2 18:21:24 2026 GMT
        Subject: CN=6977b0a5-b9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:52:f8:dc:c9:de:d1:21:dd:49:11:c4:15:
                    11:c8:49:5e:01:27:64:df:c2:b7:9f:6c:d2:89:f8:
                    40:b8:8e:b6:92:a1:30:71:64:4d:cf:a1:cf:04:a3:
                    6c:0b:aa:2c:16:e7:12:b0:76:21:f3:4d:d3:5c:92:
                    4e:72:e8:39:60:5a:60:5f:44:5d:02:1d:a9:27:a2:
                    9c:ae:0c:de:a1:49:9c:62:1f:29:8a:9b:c5:ad:c5:
                    d1:79:a6:5b:b6:62:96:61:57:5d:4b:ac:ab:10:6b:
                    3a:f5:fa:00:d6:80:3e:d1:db:10:8c:ff:6a:5b:60:
                    12:cc:b5:13:51:49:a4:49:0a:0b:5e:14:47:e2:da:
                    99:d3:1a:28:46:9d:6d:1a:e6:b9:6d:be:bd:16:f9:
                    c2:a0:41:29:30:ad:67:37:3e:b5:5e:83:79:55:27:
                    32:79:64:3c:bd:2f:df:66:72:56:f8:8d:18:aa:52:
                    ae:37:7a:22:df:c6:a9:3f:31:3e:fa:a9:48:79:23:
                    99:d8:2b:84:2c:28:32:f7:bd:f7:e4:ba:67:fa:d6:
                    60:55:49:fa:89:aa:fa:0f:5d:ef:04:b0:d7:25:2f:
                    f7:c1:a5:a7:5f:ca:5b:aa:64:ba:60:60:9e:44:32:
                    48:88:54:f7:ce:d0:70:61:c9:96:31:c5:54:bc:42:
                    95:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2F:01:84:6A:69:78:95:72:79:32:AA:14:DE:25:53:66:9C:94:16
            X509v3 Authority Key Identifier:
                keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:53:d6:dd:ce:48:18:eb:e6:6d:5c:d5:36:08:93:dd:56:f2:
         45:04:15:9a:23:d9:0b:7e:53:16:52:61:e1:be:14:dd:bc:e4:
         ff:b6:85:00:07:96:2a:74:42:3f:5a:71:8e:81:be:76:0d:1d:
         3e:51:4c:90:18:56:7e:9d:b4:57:66:29:16:27:67:74:6b:4d:
         b2:a6:fa:ec:a5:fa:53:cc:4e:0f:5f:93:0b:c8:4e:1c:e5:34:
         fc:c8:1a:d6:b4:f2:d7:e8:1b:3c:e0:26:c2:a5:89:4f:b0:f3:
         6c:f3:b4:90:2b:61:ed:80:9b:bd:53:29:99:95:37:85:28:b0:
         d8:25:a3:94:e5:fb:cb:9e:71:9b:f0:17:72:6a:fb:ac:d2:7c:
         b5:cd:68:1d:0f:a1:2b:47:26:6d:9d:56:04:71:53:d9:6f:20:
         44:b6:b4:97:46:3e:65:e4:b1:b3:a7:36:2c:70:c4:a9:e5:79:
         4d:af:29:74:fc:be:3f:09:7d:24:a5:9f:7f:57:8c:9a:27:fb:
         80:6d:c3:11:d9:47:f4:cf:b6:65:7d:18:67:5e:2b:22:04:43:
         03:7e:b9:3a:68:c0:5c:37:36:d1:1a:7d:fd:b9:10:f0:2c:d7:
         6e:af:62:be:99:16:99:e1:d8:cd:e2:af:a1:f8:92:ce:ce:33:
         ff:a8:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 18:37:39 2026 by rpki-client