This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
File:                     J4qsn8YiO7A3FX6zn5bbvajm0lY.mft (raw, json)
Hash identifier:          ONHo31BQEEukDUCf0aKmfhPb2muMD/94zcfofhMZmfE=
Subject key identifier:   00:39:85:BC:A6:85:3B:1A:64:04:08:AC:FB:E1:02:44:CF:D1:61:BE
Authority key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56
Certificate issuer:       /CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256
Certificate serial:       066F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
Manifest number:          0669
Signing time:             Tue 20 Jan 2026 18:20:23 +0000
Manifest this update:     Tue 20 Jan 2026 18:20:23 +0000
Manifest next update:     Tue 27 Jan 2026 18:20:23 +0000
Files and hashes:         1: J4qsn8YiO7A3FX6zn5bbvajm0lY.crl (hash: bZK6w433Up+ub6jbqQG2ALzz+fytoH+X9IqEAsFTaiY=)
                          2: 9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa (hash: OSWl7ervYdSnu18zoA6Uux9/93xAUT4fzl/D6bD5FUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl
                          rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 18:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1647 (0x66f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BC05, serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256
        Validity
            Not Before: Jan 20 18:20:23 2026 GMT
            Not After : Jan 27 18:20:23 2026 GMT
        Subject: CN=696fc767-7427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:24:ca:9a:d4:71:06:0d:7c:d3:b1:40:5b:
                    d8:14:46:c2:36:3a:ef:87:b7:7a:90:2d:6d:57:09:
                    5c:d3:a6:74:c9:c8:da:c6:97:8e:25:6b:c3:b8:4f:
                    56:eb:d4:55:8d:e8:78:d3:84:de:e1:59:43:35:6b:
                    4f:4a:b2:24:e0:13:0a:80:14:ab:06:ca:21:73:a4:
                    99:13:15:24:68:aa:2a:8d:e2:ab:0e:ca:69:4a:cd:
                    66:29:87:20:b5:c1:8a:b0:3e:3e:7c:48:47:6e:3c:
                    af:52:b3:f9:40:43:67:6f:a8:d4:ef:3f:eb:59:9f:
                    f7:cf:da:75:67:9d:8c:e8:fd:61:18:59:f5:d1:24:
                    bb:8f:67:b7:33:b5:0a:79:c3:19:3a:a5:51:d6:7d:
                    11:5f:e4:ed:6a:3b:d5:d6:31:21:a3:ef:78:39:5c:
                    76:27:e5:56:aa:41:66:cc:9c:22:1f:03:8a:81:11:
                    96:f4:a6:d7:31:fd:99:0c:10:63:bf:b1:6f:b4:cd:
                    21:fc:b8:fa:67:ae:43:ff:18:67:51:e9:6d:b3:b9:
                    fa:b3:66:64:af:e4:5f:9c:59:1d:77:9a:f3:c5:80:
                    cf:07:dc:5d:68:b3:1b:b8:e0:6e:01:65:68:73:c2:
                    cb:ea:82:72:e0:74:59:0e:f0:28:f1:c6:5c:05:0d:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:39:85:BC:A6:85:3B:1A:64:04:08:AC:FB:E1:02:44:CF:D1:61:BE
            X509v3 Authority Key Identifier:
                keyid:27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:99:a7:18:99:cc:21:42:8c:bd:a6:3d:15:2d:80:b3:ca:
         42:ca:c8:22:0d:8a:3c:d3:61:09:99:a4:07:d7:35:45:ef:a1:
         0f:a9:be:04:31:7e:e5:eb:c8:b5:da:cd:7c:d6:8b:18:07:5d:
         21:69:3e:20:b6:0a:7a:62:2a:05:dd:a4:3a:63:4e:2b:f8:56:
         30:59:ef:a8:c6:56:fa:84:23:d3:7e:0c:eb:08:d2:9e:a7:9d:
         50:e0:1c:af:0f:00:ac:43:08:c1:10:5f:b2:9c:4b:66:e0:77:
         be:66:74:44:39:2a:c7:c1:c7:d3:c7:af:24:64:97:74:7a:77:
         d7:3f:bc:7c:0a:6a:88:aa:fc:6f:32:ba:63:3d:f0:c7:ad:db:
         4f:24:23:af:d9:9f:91:df:f9:33:c4:e2:15:c1:6f:b3:72:a8:
         d2:6e:37:e6:38:a1:4d:5a:6f:c9:3f:09:d8:fc:69:4e:52:ce:
         de:13:c9:1c:89:d1:0b:0b:9f:a3:18:27:46:33:4e:01:19:9b:
         17:9f:8f:60:fd:63:06:23:b9:a7:ff:f4:e7:31:34:bd:90:8c:
         ff:e0:bf:c8:93:9f:f2:c2:95:88:75:3b:3b:fa:19:58:39:d6:
         08:51:4e:2f:50:b8:ef:74:1d:3f:c4:94:02:5d:95:a1:46:6b:
         f6:a6:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:52:05 2026 by rpki-client