This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
File:                     bz4CYgDVU58n4POqUNMgokUo1X0.mft (raw, json)
Hash identifier:          fec5xRHPB5o0FWZwJ7CE/DwOH8UyHda+8LMIHapqRaY=
Subject key identifier:   73:2E:E7:4B:E4:E2:93:A3:DD:01:86:4E:88:24:C7:69:FA:1D:0C:A3
Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
Certificate issuer:       /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
Manifest number:          D5
Signing time:             Sat 17 Jan 2026 05:24:18 +0000
Manifest this update:     Sat 17 Jan 2026 05:24:17 +0000
Manifest next update:     Sat 24 Jan 2026 05:24:17 +0000
Files and hashes:         1: bz4CYgDVU58n4POqUNMgokUo1X0.crl (hash: QFcr05OEAc0aDptb/JebWbKzrTE14Y994YsCcPZbgRw=)
                          2: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (hash: s+WXI9/XXjX36ieuVqgSwgquuy05GdXcIotU+Vwma6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
                          rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 05:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
        Validity
            Not Before: Jan 17 05:24:17 2026 GMT
            Not After : Jan 24 05:24:17 2026 GMT
        Subject: CN=696b1d02-c075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:36:1d:cc:18:b9:c7:62:a1:f4:07:43:26:
                    47:0b:cc:33:89:42:91:ff:5d:6c:45:fc:d1:a8:6f:
                    62:a5:a3:38:4b:bc:96:49:d6:1d:ac:3d:4c:15:41:
                    35:d4:aa:53:45:37:f9:f0:d5:e4:95:03:fa:df:7a:
                    6c:dc:a3:5e:f1:35:4c:86:f9:42:b1:f9:57:bb:18:
                    66:17:3b:73:67:ee:c9:ce:1e:8c:76:f5:9b:4b:ef:
                    34:38:aa:23:47:b6:6e:7b:6c:a3:0a:09:52:0a:6e:
                    b3:ef:d4:6a:bf:6e:a1:18:32:36:3e:3b:68:82:e6:
                    74:80:2f:05:cb:68:15:7d:fb:dd:f2:82:88:de:bf:
                    73:22:ca:82:af:9a:2d:ed:be:69:4c:49:2c:65:4f:
                    2d:5f:64:fe:22:6a:66:c1:13:a0:82:53:da:0d:00:
                    6b:de:d6:ef:87:88:a5:c0:5e:21:e3:6e:54:da:f3:
                    1e:39:64:90:85:45:37:a2:73:60:41:4f:d0:d5:2d:
                    97:3b:60:58:46:fc:17:24:6e:e8:78:ad:4c:41:f5:
                    3d:c8:58:b2:c1:42:7f:da:1e:80:0f:61:c0:4e:a2:
                    78:00:4a:ee:8e:28:84:a4:4f:2b:2e:e3:f2:f9:af:
                    af:20:85:b3:c2:94:32:d2:6d:4c:9f:0c:0d:d0:39:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2E:E7:4B:E4:E2:93:A3:DD:01:86:4E:88:24:C7:69:FA:1D:0C:A3
            X509v3 Authority Key Identifier:
                keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:0a:e1:ce:b3:a5:f2:dc:16:00:89:b5:2c:88:06:04:e3:58:
         26:81:ea:25:6d:3f:a9:12:8e:da:09:12:c8:87:8e:33:4b:61:
         63:10:c2:df:25:e0:3e:ec:e6:40:74:56:67:f0:e6:7f:61:09:
         30:e3:44:6f:32:9b:3d:68:96:aa:68:1f:6c:13:49:d7:76:2b:
         f5:c6:7f:a6:f4:6a:f3:ac:2e:fe:a4:e8:c1:59:31:88:67:ab:
         58:83:66:92:02:09:f2:6b:f6:a1:90:84:f0:33:33:b0:ec:ac:
         06:3a:b0:4e:f0:4a:6d:3c:1d:07:b5:1c:ba:14:da:7a:e6:c1:
         ff:5c:99:3f:2b:06:4f:e5:8c:3a:8c:7c:fd:5c:41:98:e9:1a:
         aa:31:70:7d:e1:c6:ba:9b:f3:23:78:da:82:09:92:49:73:9d:
         3d:f1:69:b3:db:ba:08:36:9a:19:7c:55:c4:23:e8:ba:81:8d:
         c5:65:ba:ab:15:36:59:a1:71:e6:1a:e2:29:71:e6:60:74:21:
         d2:a5:67:f7:e0:b7:af:a0:80:ab:2e:2e:55:ed:d8:2d:a5:2f:
         f5:19:98:a0:fb:c6:2e:98:69:71:d2:9f:15:49:78:ef:0a:7c:
         15:d4:5c:59:f7:c6:5a:7b:45:f9:1d:41:18:f1:b0:81:68:aa:
         ee:14:ba:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:26 2026 by rpki-client