This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
File:                     bpbq_I_Ooaf_MezeClBm17HDxHo.mft (raw, json)
Hash identifier:          uk2OMjGA7qaE04MgoEcbLaUazlg9+Wo3WjJASgrBgi0=
Subject key identifier:   43:13:61:CB:4D:85:DF:C4:B5:C7:70:A2:D8:28:1D:D0:12:F5:40:27
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Certificate issuer:       /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
Manifest number:          07
Signing time:             Sat 17 Jan 2026 07:05:07 +0000
Manifest this update:     Sat 17 Jan 2026 07:05:06 +0000
Manifest next update:     Sat 24 Jan 2026 07:05:06 +0000
Files and hashes:         1: bpbq_I_Ooaf_MezeClBm17HDxHo.crl (hash: r+N4iFSYvjedHm7vKjx6sLkWyQmP1QarMj3vgAgZRck=)
                          2: F78ED0BAEBC911F0BD3A2F28686F56BC.roa (hash: T16pI9nQ5IEGjfViZejEMMbrzXbg1Lkkwe6XJbJEgSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
        Validity
            Not Before: Jan 17 07:05:06 2026 GMT
            Not After : Jan 24 07:05:06 2026 GMT
        Subject: CN=696b34a3-e1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:49:dc:dd:f9:f4:da:4a:43:67:53:7e:d8:
                    6f:63:a9:70:cb:a8:89:fd:f8:2b:c9:70:7d:89:18:
                    b8:ca:26:4c:a5:88:8a:a1:e9:07:8d:21:98:b8:37:
                    eb:03:93:1a:c1:d1:78:43:dc:98:1e:55:f3:8c:82:
                    c4:2d:f2:dd:dc:9e:2b:49:2c:82:b3:18:75:e6:93:
                    1f:f7:f4:5c:81:46:bb:a9:85:54:44:2d:a0:4a:40:
                    ff:cc:f1:59:74:17:28:7c:95:65:ed:b6:a9:5b:ea:
                    a1:ab:2d:07:a6:e9:81:c7:92:a0:89:23:f5:14:89:
                    a1:35:f6:48:e0:15:45:92:34:42:c0:52:da:86:14:
                    bf:fc:c0:8f:7a:57:db:c0:fe:99:86:14:5a:b4:a7:
                    f8:dd:b3:85:ab:e6:4b:d8:42:ed:ca:43:18:d7:45:
                    23:5c:af:51:f2:20:80:e1:91:3f:73:0e:99:41:85:
                    8d:a6:cf:be:ef:d5:36:b8:93:27:bd:df:62:d9:de:
                    05:25:4f:7d:88:40:d5:2a:37:3d:5c:4b:26:2a:7b:
                    7f:67:2a:b9:0c:70:04:ab:4a:c4:34:64:ea:05:6c:
                    f9:b1:cc:e4:d5:0a:ba:ff:7c:3b:db:8d:04:bb:7f:
                    02:62:c3:ba:b9:00:03:2b:f2:19:b9:bc:ca:f2:f5:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:13:61:CB:4D:85:DF:C4:B5:C7:70:A2:D8:28:1D:D0:12:F5:40:27
            X509v3 Authority Key Identifier:
                keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d4:0d:eb:c1:d0:8a:3f:6a:66:a7:77:d2:13:7b:d7:fd:4b:
         bd:c8:38:c7:7b:4c:eb:d7:38:7b:a4:22:7e:46:ef:f7:ff:95:
         24:cb:cc:55:6a:bc:82:9d:6d:9e:55:15:b8:6f:15:83:0f:86:
         03:6f:f3:56:25:4a:26:6b:fe:81:22:a8:fd:1a:04:09:e7:92:
         00:d1:ac:e5:ca:85:74:c5:39:d1:79:98:8e:dc:5d:9b:95:b5:
         1a:7c:0c:e2:dd:3f:79:39:a8:68:a7:1f:a0:26:2d:f5:e6:84:
         db:09:6e:99:4f:15:dd:ef:de:14:59:b2:ee:6b:c2:17:e4:4a:
         72:25:9c:81:b1:f8:97:77:00:a8:b2:2f:fa:40:a2:32:00:e2:
         32:55:61:4c:e5:fa:da:8f:8a:72:62:d7:5a:e5:85:25:b9:59:
         a2:73:b3:1b:c9:09:b7:dc:86:b7:6f:8b:9a:09:ee:5b:1d:87:
         e4:f7:85:59:fd:d2:53:c0:3c:fa:07:36:95:c6:2e:11:eb:45:
         70:d3:36:a3:b2:36:3c:2c:f3:ce:cc:8c:97:48:0d:c1:5c:1d:
         3c:34:10:93:06:f1:0c:93:f9:0e:92:1b:bb:43:18:3a:90:7a:
         f7:5b:0c:f6:2e:3b:78:5f:06:b0:27:6f:b2:c5:45:cb:28:8a:
         d5:55:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 07:39:44 2026 by rpki-client