This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
File:                     05oQ5hqMqVBO2xVIaTazd0OiTc4.mft (raw, json)
Hash identifier:          aoN6ENIa5bHviqQsSbo3VcWL0AEeQ9RweYh7h/1O1U0=
Subject key identifier:   B9:B4:78:30:16:08:72:06:05:6A:79:FF:68:C4:ED:33:DC:E7:B4:6B
Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE
Certificate issuer:       /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
Manifest number:          01BB
Signing time:             Fri 23 Jan 2026 02:15:56 +0000
Manifest this update:     Fri 23 Jan 2026 02:15:56 +0000
Manifest next update:     Fri 30 Jan 2026 02:15:56 +0000
Files and hashes:         1: 05oQ5hqMqVBO2xVIaTazd0OiTc4.crl (hash: PurQA3vyWndNw4oOSVt2YGfrOBMjo4/VUR2cNSyH5nI=)
                          2: A4FC1E34519311EE85CE2811C4F9AE02.roa (hash: FZUjzlxQzgZF6JDMRzeJhcRgNYq3dhICyuyYGYZj5hs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl
                          rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110BE2, serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
        Validity
            Not Before: Jan 23 02:15:56 2026 GMT
            Not After : Jan 30 02:15:56 2026 GMT
        Subject: CN=6972d9dc-65d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:cf:28:0f:76:89:78:09:99:c0:84:9f:51:
                    ce:9e:61:79:57:d7:35:59:84:bb:e1:08:e3:db:b9:
                    ec:9b:57:c1:05:37:45:6b:3c:a9:31:4b:31:95:fd:
                    49:a5:37:00:ec:97:e8:c0:b2:6a:77:34:95:04:53:
                    21:84:d1:d0:2e:12:0d:fb:42:c4:fa:a5:ac:92:28:
                    c8:90:64:19:b3:6f:16:f9:a2:be:a8:f7:79:ca:21:
                    a6:b7:03:32:f3:51:ab:5a:33:76:66:9f:c5:f6:ab:
                    73:8e:79:0d:8c:32:bd:86:9a:2f:2c:0b:c6:2e:b2:
                    98:42:3e:68:5c:b6:47:62:27:51:6f:a8:7a:a3:1b:
                    2f:0a:ae:21:d5:52:a8:5b:e2:72:64:b9:20:b6:17:
                    d2:f4:0d:a4:a5:18:90:a9:a9:63:4d:57:23:5c:66:
                    e2:5f:01:06:57:2c:65:4d:5a:73:e9:f6:b7:41:c3:
                    be:eb:89:f0:35:2f:c9:53:90:79:d2:fa:2e:fc:42:
                    fd:18:b9:0c:80:c3:e8:cd:8b:f7:76:c8:d7:f4:a7:
                    a0:3a:68:16:06:7b:02:35:93:92:41:86:af:93:ce:
                    00:5c:25:ca:9d:3f:0c:9a:e4:2a:a9:e8:0f:b9:8e:
                    ce:b4:6f:5a:3d:67:1c:d6:2e:a8:72:68:4b:1d:ef:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B4:78:30:16:08:72:06:05:6A:79:FF:68:C4:ED:33:DC:E7:B4:6B
            X509v3 Authority Key Identifier:
                keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d9:f5:ca:ac:2f:c4:a8:4e:1e:2d:f9:a3:40:b3:75:c7:51:
         0b:d8:19:7d:d1:5d:e6:99:91:fc:54:49:42:f1:b9:06:5d:35:
         61:27:2c:86:40:d0:fc:e8:ac:8e:62:2f:11:ce:09:bb:33:fa:
         af:01:43:fd:f6:4b:89:d4:7d:17:0d:51:3c:33:60:39:88:ba:
         ec:94:e8:c6:c3:3c:f6:bd:71:89:9b:7b:4f:6e:13:c0:fd:f1:
         2b:d7:8d:96:e1:50:39:8a:85:4d:a9:a5:06:b1:29:c0:e6:71:
         28:98:e2:cf:b2:2e:b4:0f:3b:b6:a0:65:1b:ce:84:c4:47:28:
         ef:51:f5:88:b5:5f:10:93:01:79:7b:35:e1:0b:57:9b:a6:ad:
         40:5a:f1:27:0d:de:e8:91:b2:ce:b1:86:2f:86:11:e0:62:23:
         71:55:30:2e:8c:c2:84:7d:06:52:e9:71:cb:75:fd:89:0a:af:
         27:bc:37:74:c0:71:fe:b5:21:de:de:ff:12:6d:20:20:95:d3:
         11:06:36:00:9e:42:11:51:f3:4c:5c:66:f5:7c:ec:0c:4d:b8:
         67:a2:75:b8:41:5f:b2:bf:fa:47:33:b6:b2:d4:4a:77:cd:b7:
         9d:95:a9:81:a9:a0:e0:d1:f4:47:2d:37:59:56:07:0f:02:37:
         ad:4c:b2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:49 2026 by rpki-client