This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
File:                     BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft (raw, json)
Hash identifier:          rcS0IMZVl4zwgMSTPta9Lt2Av/AB9merUgL6morCI4Y=
Subject key identifier:   B8:58:62:3A:43:A9:BE:BF:67:0F:4E:9D:00:CC:4B:F1:77:98:BF:29
Authority key identifier: 05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB
Certificate issuer:       /CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
Manifest number:          0255
Signing time:             Wed 11 Feb 2026 01:19:17 +0000
Manifest this update:     Wed 11 Feb 2026 01:19:16 +0000
Manifest next update:     Wed 18 Feb 2026 01:19:16 +0000
Files and hashes:         1: BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl (hash: D+br+vshkWBVI3+QYZaO22pAUdA5koYvYNuDugMHZ8Y=)
                          2: A20DDFE2725911ED8CB4D763C4F9AE02.roa (hash: 1rx0JLbKoH5J997GcDJA9iOnUSimYhQYe3L8RaCpiFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl
                          rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Feb 2026 01:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E77C, serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
        Validity
            Not Before: Feb 11 01:19:16 2026 GMT
            Not After : Feb 18 01:19:16 2026 GMT
        Subject: CN=698bd915-0057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:12:7f:ee:cf:56:d6:f1:10:5e:68:d4:72:28:
                    bc:a8:ff:2f:36:03:1b:e4:0f:6e:c1:28:1a:76:16:
                    c4:00:c0:3b:3e:4e:56:0e:8f:e6:71:e3:df:72:4b:
                    25:d3:ab:0d:d4:89:bf:8b:19:cc:33:dd:71:b7:e8:
                    0c:dd:31:38:22:5e:b7:bb:2f:4e:9d:88:99:57:2a:
                    c1:a4:af:cb:01:7e:42:5b:b3:d3:e0:20:fe:a7:60:
                    bc:07:64:fc:2c:08:da:26:5b:c4:13:f7:32:c2:09:
                    b2:ea:6b:c4:6f:77:6a:af:1a:6c:e4:db:bd:d0:e2:
                    90:d4:26:4f:f9:cc:fc:78:34:f6:8e:d7:c5:ae:22:
                    ec:10:ad:89:62:20:b9:27:f1:36:d2:0b:bc:97:6b:
                    a0:93:0f:5d:fa:b9:a1:12:dd:32:ae:59:02:8c:06:
                    2b:eb:e8:3e:a9:2d:b9:4c:7d:2d:24:19:60:e8:d8:
                    7a:7d:a3:e9:b0:b8:c3:b0:69:b7:e0:83:71:68:21:
                    e1:c0:e8:49:9d:80:5a:7f:c6:48:11:28:a3:04:d5:
                    bf:ec:df:d7:0c:8d:8a:2b:9e:c4:79:57:14:c3:5b:
                    0e:6e:2b:61:7b:1e:9a:b2:24:11:66:3f:35:40:28:
                    78:58:63:51:98:b7:5b:22:af:19:ca:c5:fb:c2:3c:
                    6a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:58:62:3A:43:A9:BE:BF:67:0F:4E:9D:00:CC:4B:F1:77:98:BF:29
            X509v3 Authority Key Identifier:
                keyid:05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:bd:47:33:fe:6c:e4:c6:11:8b:ad:d0:99:85:18:64:04:a8:
         d4:ff:e6:6e:aa:f8:02:f9:9e:ec:4f:70:5c:68:c7:d7:3a:ff:
         51:4d:82:ee:2c:b6:65:6f:0f:90:f4:fe:dc:ba:83:87:e8:e5:
         55:1b:8e:50:71:5c:66:b1:ec:bf:ea:ab:2d:57:96:6e:b1:d1:
         3d:82:42:48:df:7d:df:a7:22:7c:c2:7a:a4:ba:63:be:6a:57:
         f8:92:61:fe:da:4d:3d:68:f6:6b:34:8d:17:22:d9:5f:dd:aa:
         73:ee:c3:41:76:ce:52:d8:57:28:6e:49:66:18:6f:98:8b:c9:
         be:0c:2c:9e:72:27:3c:4f:45:01:07:0d:51:a6:81:33:dc:52:
         00:ee:f9:7f:8b:bf:84:1b:ca:13:d2:36:bb:c0:e7:d5:b4:ba:
         f3:18:99:2f:0f:c9:eb:fa:ce:97:87:74:a2:d6:4b:53:c8:41:
         8b:61:d4:5c:d9:d6:09:13:1a:e3:5a:1a:60:71:ea:b4:52:95:
         96:3c:95:1e:0d:22:1d:9c:cb:fa:54:c3:93:a8:00:a2:de:10:
         84:17:c5:51:84:20:40:f9:59:be:c7:04:86:79:8b:73:ef:42:
         b0:0c:c8:08:80:8f:a3:20:4d:25:78:74:aa:64:20:8c:7c:0a:
         d5:61:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 18:19:24 2026 by rpki-client