This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
File:                     b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json)
Hash identifier:          AJTsXSoFqcMPke+rKrpKMoVNsMl5NUyHFba/idrGZS4=
Subject key identifier:   91:58:A8:A7:7E:00:AB:4D:08:5C:D8:9B:F0:A3:81:04:2E:2C:05:04
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Certificate issuer:       /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
Manifest number:          C2
Signing time:             Sat 17 Jan 2026 05:01:56 +0000
Manifest this update:     Sat 17 Jan 2026 05:01:55 +0000
Manifest next update:     Sat 24 Jan 2026 05:01:55 +0000
Files and hashes:         1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: Hiv7fid9rntXAVtQjYz57wlFGoPghtr0KkHeV0lVjiY=)
                          2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: 6dXw7Y4MWNrxoZ0iMg2dM88R43+4l/3mUETzTfwLRvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 05:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
        Validity
            Not Before: Jan 17 05:01:55 2026 GMT
            Not After : Jan 24 05:01:55 2026 GMT
        Subject: CN=696b17c3-7116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2e:d2:33:e6:d9:b2:52:63:e9:43:a5:57:a9:
                    3b:52:bf:66:e7:02:0d:b5:9b:1c:44:23:fa:49:2c:
                    94:74:18:d9:f6:f4:0b:be:80:47:d7:51:21:ae:d7:
                    d4:7f:8a:37:d2:68:bc:7d:79:ba:b0:d7:c8:e9:a0:
                    85:f3:81:24:cd:a7:c7:d1:01:bc:05:dc:ed:1c:57:
                    2b:68:50:9e:2f:3b:94:4b:9b:8f:65:cf:a4:7b:d4:
                    7d:61:8c:88:af:c3:d3:ce:e4:94:b2:a8:87:ed:d5:
                    9e:cd:4d:52:81:4a:a2:be:5b:34:b6:41:a6:39:78:
                    05:8a:3e:f6:77:4b:6d:55:31:2f:56:b3:8b:8b:d7:
                    46:0f:0c:21:e0:0a:67:18:48:16:11:36:1e:d3:fc:
                    1c:22:b2:fa:7e:e4:0d:e3:04:90:14:f3:d8:f0:b3:
                    73:48:e1:cd:d7:81:86:e6:ae:72:f2:85:fe:2e:4a:
                    a4:28:64:4c:29:7f:37:f9:ff:66:1c:67:54:8f:02:
                    80:57:e0:9b:af:95:65:1e:52:5c:e8:5f:ae:85:b7:
                    42:b3:79:63:2a:27:00:22:f2:35:ba:20:e1:74:cb:
                    7f:0d:9a:a3:d4:59:10:91:a1:a1:87:df:ed:f4:71:
                    1a:2b:41:5c:ce:3c:7e:84:27:14:4f:f8:85:f5:2b:
                    7d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:58:A8:A7:7E:00:AB:4D:08:5C:D8:9B:F0:A3:81:04:2E:2C:05:04
            X509v3 Authority Key Identifier:
                keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ea:b1:ce:09:a9:9a:35:79:e1:b4:40:35:bc:fa:d7:c0:79:
         d4:80:f7:5d:9a:74:24:e9:c2:01:7b:01:b4:ec:ae:3f:12:d3:
         b7:e7:76:22:03:6a:df:9a:8e:ea:26:c6:4e:44:b4:eb:06:f0:
         c3:e5:a3:08:96:7f:26:fc:88:06:34:45:00:a0:d3:01:36:0b:
         d8:7c:29:91:d6:48:cd:18:22:72:dc:84:ec:d3:af:64:2b:60:
         7d:16:f8:0b:72:a4:fd:ef:d5:51:f5:b4:04:30:9a:9a:3f:ac:
         2b:07:3f:88:b8:0d:7d:48:b1:ce:11:02:42:71:37:9b:be:4e:
         99:76:95:09:35:43:81:66:30:8e:a2:ec:44:40:df:22:e3:20:
         18:64:75:7e:db:33:12:18:b6:21:81:c3:fb:72:30:eb:74:fb:
         bb:b0:e3:c6:8d:62:39:d9:99:e4:c1:d0:3b:b7:c7:1a:69:ad:
         b1:78:c0:f6:11:bb:98:5c:65:ed:97:dc:79:39:64:0c:62:18:
         52:78:5b:63:65:6e:57:77:b6:4b:d4:18:63:a4:c3:e2:98:2d:
         af:43:41:21:4b:05:c4:21:14:f2:74:70:0e:64:88:f5:97:03:
         28:05:62:cf:14:24:14:6a:2c:05:e3:97:12:70:19:48:49:e8:
         2e:4a:36:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:21 2026 by rpki-client