This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File:                     BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier:          P98QX2nEDiuW36AautmCfVqn1S6fsuBqaWl7JcYq+OI=
Subject key identifier:   99:42:80:3F:4A:D7:E9:26:E9:79:C3:E0:85:90:0C:E6:E8:86:50:45
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer:       /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial:       043A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number:          042F
Signing time:             Mon 02 Feb 2026 23:49:07 +0000
Manifest this update:     Mon 02 Feb 2026 23:49:06 +0000
Manifest next update:     Mon 09 Feb 2026 23:49:06 +0000
Files and hashes:         1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: r1H7RuI14rXFOS2XOXqr8vDgv3qdY1iCR2YDf9pwXbc=)
                          2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: yEVRrXufQh+Qc/HqPk/jAvaqGmnT+PN1jZ/kXTfyo9A=)
                          3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: hYiudA2rwhN316Pb5lt+GNf53uhu2FFhMUzTaTRI2hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Feb 2026 23:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
        Validity
            Not Before: Feb  2 23:49:06 2026 GMT
            Not After : Feb  9 23:49:06 2026 GMT
        Subject: CN=698137f3-ca27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:64:39:63:5a:d0:94:7c:fb:c2:65:f0:a7:
                    ae:ea:09:4a:51:13:da:fe:5a:6e:ae:f3:65:61:c3:
                    94:d0:3f:b3:cc:9d:7a:68:e0:13:6b:fd:4a:1d:42:
                    64:71:2c:04:34:44:59:a9:f8:99:99:e2:ee:61:f2:
                    2b:30:29:d3:8c:fa:1b:b6:bd:f8:d7:1a:38:94:0b:
                    63:76:c9:88:7e:8c:c5:81:47:51:ba:35:df:c7:cf:
                    47:25:6c:dd:b0:1f:f3:59:e7:7e:38:4d:f0:e8:c3:
                    12:ea:7c:fd:06:3e:65:61:de:af:15:b6:6d:7f:f7:
                    10:37:7e:c6:3f:89:62:17:b2:a6:f9:8a:94:80:ae:
                    d4:17:b3:a4:6c:14:2e:0c:45:e0:0b:35:5b:92:f8:
                    5d:80:73:1e:73:99:80:fd:07:da:13:00:51:15:d8:
                    08:e9:4e:da:96:1e:c0:c0:6e:60:ad:b4:9f:39:71:
                    d4:a7:23:65:3e:37:5a:1c:53:0b:f6:3d:cb:d5:a5:
                    0c:00:16:71:bd:70:5f:74:2b:a1:6b:67:76:8b:c6:
                    39:37:98:6b:87:29:0d:ee:44:03:81:ac:b9:2d:92:
                    3e:16:35:29:3f:fd:aa:49:a6:8a:b1:98:52:22:14:
                    2b:b7:14:76:3d:70:e9:0a:07:d0:7a:24:66:8d:1b:
                    4d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:42:80:3F:4A:D7:E9:26:E9:79:C3:E0:85:90:0C:E6:E8:86:50:45
            X509v3 Authority Key Identifier:
                keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a6:2e:36:43:61:37:fc:59:14:47:af:24:aa:06:a1:02:7f:
         9d:59:24:a8:5d:22:81:1e:7c:fe:91:13:1b:d9:f0:23:c2:85:
         fe:40:95:16:af:ba:c9:37:95:d1:b2:af:07:69:bf:f8:44:86:
         72:03:7e:1d:35:cc:2a:9e:0e:9c:a5:15:6c:af:4d:e9:ca:17:
         1d:6a:e7:cb:ef:9f:9f:7a:68:ab:db:c1:11:1b:ba:d0:3f:69:
         15:2c:87:6f:6f:41:6c:c7:6e:c5:69:9a:9d:6a:68:16:cb:82:
         23:10:b9:da:e8:2e:f1:cb:b5:bf:da:bf:6a:2a:63:8c:87:fc:
         cb:09:65:65:2d:92:bc:b9:39:c8:f8:44:14:a9:72:ca:e0:3c:
         37:81:f9:dc:b7:8b:95:d9:9d:c0:9c:02:57:c3:4e:d4:8c:8f:
         05:0c:1c:af:1b:21:e8:cc:ec:86:a6:d4:1b:e6:41:17:2f:bc:
         b8:63:b3:46:95:29:d6:f8:36:37:6a:f3:f1:a7:50:d5:db:8e:
         eb:4e:b7:1e:7b:02:00:ba:25:0a:b1:d5:8f:54:7d:35:70:92:
         16:24:0d:21:f8:4f:f9:7f:c9:8c:a2:ff:b0:2d:18:0c:83:86:
         3f:2c:8c:47:c5:b0:79:fd:7d:ec:6d:1d:4c:d7:b2:53:47:98:
         3d:d2:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 08:30:30 2026 by rpki-client