This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
File:                     bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json)
Hash identifier:          7q7OFKEAjZekYy/Ztk/RijS/MEf8q5nZOF8gcJJIwIs=
Subject key identifier:   56:6A:3C:9A:B0:D3:77:37:E7:1A:41:C3:77:49:83:97:48:50:95:3A
Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20
Certificate issuer:       /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420
Certificate serial:       09AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
Manifest number:          096A
Signing time:             Thu 05 Feb 2026 06:05:15 +0000
Manifest this update:     Thu 05 Feb 2026 06:05:15 +0000
Manifest next update:     Thu 12 Feb 2026 06:05:15 +0000
Files and hashes:         1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: CaC8arjtVxkvn7/Gl+plCKhgOQ3bZhDtSaDiqOppapk=)
                          2: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: wcThOncXEAjT8ZpszyLo6l4OnTDnQ4syZMD7UYn7ez4=)
                          3: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: YfESzO95JKDO7r7mGpLR5hQYholf9V/lBlUpUDalD40=)
                          4: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: u/IJXHcIn7lbo6iqFsAljOO6/E+7Rk3qnGcidVuOSfM=)
                          5: 88252000B55C11ECA9565039C4F9AE02.roa (hash: TR+d6Rjq96WxruqKgy2u4oNd2lnUKRlYiqBdb4EEjrA=)
                          6: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: olPSDCWvaweZpAfUli8fgZJJaQht5UUB+cNnsdtHWSg=)
                          7: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: GHsxefrnlU5VupyXbGIMFIi7tGhmBUS8mhWsd7Ko2TE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl
                          rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 06:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2474 (0x9aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420
        Validity
            Not Before: Feb  5 06:05:15 2026 GMT
            Not After : Feb 12 06:05:15 2026 GMT
        Subject: CN=6984331b-63ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:d0:ba:5d:f0:7c:f9:a9:8b:33:85:e8:f7:
                    c2:ae:af:b4:2c:56:45:ca:72:e1:03:d8:d8:ec:25:
                    04:97:18:d3:00:7f:2e:c1:3c:31:36:19:dc:04:c9:
                    e1:85:4d:4b:e0:21:de:4d:8c:f7:63:7f:ae:53:e3:
                    31:e1:f3:2f:fe:7b:a0:ef:80:61:1d:b1:d2:05:67:
                    72:41:74:c0:e2:3e:fa:77:71:aa:c0:c9:62:e2:39:
                    2c:09:38:6b:fc:e0:4f:0a:5a:00:dc:63:86:4b:db:
                    f5:98:38:3b:40:31:9d:4a:f4:63:96:39:59:42:a4:
                    5d:e0:8e:97:4b:3d:de:61:cb:66:de:de:9a:86:9a:
                    9a:07:b7:48:3a:87:90:2d:0b:5a:ce:1a:34:74:95:
                    ab:82:f0:45:98:16:91:bf:f7:5b:f9:ee:59:29:71:
                    f5:af:c1:9f:92:30:00:b2:9a:e6:16:d4:52:7f:48:
                    18:f5:3d:43:22:22:ce:4c:70:8b:b9:9a:37:c3:f5:
                    36:c8:1a:c9:3f:07:ef:23:fc:61:87:96:86:71:cc:
                    13:9a:db:f1:18:96:dd:95:16:10:39:0d:d5:bd:d5:
                    22:c8:58:57:5d:f9:7f:b7:0e:cd:e0:03:40:8c:85:
                    d3:e0:91:b2:db:6e:17:c0:00:19:ce:72:66:f4:9d:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6A:3C:9A:B0:D3:77:37:E7:1A:41:C3:77:49:83:97:48:50:95:3A
            X509v3 Authority Key Identifier:
                keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:07:b7:35:45:f0:19:04:69:ea:9f:1d:be:2f:74:64:9c:f2:
         02:b9:9d:d8:a5:9a:56:58:42:c7:ca:f0:78:39:30:4b:49:8b:
         43:e0:a6:30:53:4a:60:7d:73:35:8e:be:1c:96:48:d4:48:36:
         05:f1:d2:0a:41:8f:d3:e4:85:78:87:ff:fd:03:e4:c3:cf:f1:
         9c:bf:7f:67:49:c3:d2:f9:52:d8:fb:01:db:f2:ff:90:0b:8a:
         49:08:14:14:00:c2:9a:b1:0c:9a:1c:d8:6e:51:91:71:45:ea:
         94:ba:cf:df:10:0e:86:86:91:12:66:c9:6b:4c:58:be:ab:e5:
         a6:7a:b8:9a:10:4c:ca:76:ec:ba:82:f0:c5:20:ea:55:08:1a:
         d5:7f:57:f4:36:29:8d:d7:9d:0c:4f:44:e0:a3:5c:ff:93:00:
         8e:3c:a1:52:df:48:13:9f:34:ea:1e:6e:42:df:e3:77:1d:c1:
         ab:e0:b6:8d:63:67:07:01:cd:dd:9a:7a:a5:b5:0d:6a:14:0c:
         4d:7d:34:ae:b5:84:ea:c1:64:e3:d5:df:f0:f7:20:2a:f8:49:
         62:9f:9f:3f:3c:4d:62:69:ae:e1:f4:97:ce:bd:4c:8d:bc:6b:
         67:46:64:ff:6c:f2:29:32:9e:2e:b3:bd:03:7b:09:07:98:50:
         ab:07:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 17:48:59 2026 by rpki-client