This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
File:                     B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json)
Hash identifier:          bZFPg4zLsGgXAGJ+OmZvJ3XKer5kAsyDzcIDqNOrLiE=
Subject key identifier:   EA:77:9F:D4:1E:35:82:F5:0A:7C:83:C6:4E:5A:C5:1D:3A:1B:9A:5B
Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18
Certificate issuer:       /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
Manifest number:          EE
Signing time:             Fri 23 Jan 2026 04:29:08 +0000
Manifest this update:     Fri 23 Jan 2026 04:29:08 +0000
Manifest next update:     Fri 30 Jan 2026 04:29:08 +0000
Files and hashes:         1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: zNvuM+XtO08AqIJ7QXYN118w99s/0Jv0tSS+zParHc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl
                          rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CB05, serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
        Validity
            Not Before: Jan 23 04:29:08 2026 GMT
            Not After : Jan 30 04:29:08 2026 GMT
        Subject: CN=6972f914-6846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:eb:56:b4:79:8d:c4:fd:54:a9:21:dd:08:
                    75:b4:9b:c2:06:ec:ef:f8:98:ed:37:e6:0d:39:50:
                    0e:72:1f:ce:b7:15:fd:4b:e2:08:00:34:17:f8:72:
                    8c:8f:5f:45:d9:e0:dd:e1:0d:d1:86:b5:d6:37:32:
                    6e:35:6f:92:d8:a0:83:83:57:fa:05:91:87:4e:86:
                    ae:21:2d:f1:58:24:93:2f:52:11:11:bc:e2:53:e4:
                    f1:1f:38:c1:c7:98:76:1a:d4:73:0c:09:52:a7:e9:
                    fa:8e:05:27:68:c5:56:5d:de:69:a2:e0:2f:01:15:
                    76:f7:1b:51:62:74:08:85:ae:c2:e1:0c:27:01:0d:
                    47:28:d9:81:89:2d:7d:85:fd:30:b5:5b:2d:24:3d:
                    d4:a1:63:02:c2:8d:c3:29:ec:1d:3b:db:5f:ae:66:
                    10:98:3f:e6:f6:6d:ca:0c:7d:b6:c3:db:54:43:08:
                    2e:06:00:76:98:39:f7:6a:92:47:b7:cd:02:f9:41:
                    34:8c:97:3a:b2:0e:de:ef:f3:2a:77:c9:13:c3:5f:
                    48:59:fc:68:ac:18:a1:51:f0:f7:00:39:1c:42:76:
                    08:28:d6:19:24:fd:2c:7f:9e:8f:ac:e3:de:33:b3:
                    0b:4d:63:3d:e6:9f:ab:49:40:71:91:09:5d:53:9f:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:77:9F:D4:1E:35:82:F5:0A:7C:83:C6:4E:5A:C5:1D:3A:1B:9A:5B
            X509v3 Authority Key Identifier:
                keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:44:fa:03:67:58:f1:2e:4a:b1:6d:a3:26:c1:d3:ed:f2:6b:
         18:b6:6a:44:7f:5b:6d:00:bd:62:60:45:64:bd:2c:74:0f:bd:
         e3:ee:bc:aa:58:37:38:cd:5b:d1:bb:f5:cc:ef:45:66:5d:1a:
         b8:6a:04:8b:27:4a:30:25:98:e1:ed:b9:b1:9e:aa:5b:df:32:
         b7:35:c3:1c:ea:d6:54:10:e7:dd:c4:74:b3:a8:66:15:b5:a1:
         e9:3c:c6:e7:99:82:fa:ba:8e:66:51:17:49:6f:17:c0:30:1c:
         d1:7f:f8:92:96:1e:c4:88:40:47:a0:5e:27:65:55:eb:ed:94:
         d3:3f:be:7c:96:08:11:ba:a8:0d:ab:13:a8:38:38:df:bd:8e:
         d5:33:3f:fa:28:72:25:31:65:f9:d1:b2:70:73:74:b2:4d:e1:
         44:9f:ad:f7:52:bb:23:b6:2c:aa:53:3b:22:ee:bc:9c:67:77:
         96:5d:7f:f9:6c:27:46:7a:5d:ff:24:e5:d0:95:d9:44:91:52:
         17:63:64:3d:cf:2e:aa:cd:cf:bc:da:a7:6b:3f:63:d0:41:17:
         7a:f5:a6:c0:0b:8b:de:d1:07:71:d0:1b:eb:1b:9e:ab:93:9a:
         01:25:d1:8f:3c:3b:5e:a4:71:c4:36:5a:09:0e:2b:5a:6c:8c:
         f3:3c:56:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:01 2026 by rpki-client