This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft
File:                     Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json)
Hash identifier:          XZ0LoXsBnNvTUFJ6ulbsiqM6gvspd/pzhdttW+AxHAc=
Subject key identifier:   3A:39:76:CA:C9:C1:81:EC:18:08:E1:2F:E3:40:73:EF:A9:FB:E9:5E
Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09
Certificate issuer:       /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709
Certificate serial:       0263
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft
Manifest number:          025D
Signing time:             Sun 25 Jan 2026 00:54:56 +0000
Manifest this update:     Sun 25 Jan 2026 00:54:56 +0000
Manifest next update:     Sun 01 Feb 2026 00:54:56 +0000
Files and hashes:         1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: W281ZEYLcn0U3xyBUu3oi3KGRx8dBpY61iJagctQXDk=)
                          2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: giH1vIhIIPvv5hJDOK02Raj/lgCr3oz3hTTRlbexHIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl
                          rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709
        Validity
            Not Before: Jan 25 00:54:56 2026 GMT
            Not After : Feb  1 00:54:56 2026 GMT
        Subject: CN=697569e0-f880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:1b:14:38:47:d6:65:30:3a:2f:37:7a:03:
                    41:c8:80:e8:07:6b:f0:25:5e:dd:67:ec:7b:b6:88:
                    3c:eb:47:e2:e6:03:7c:eb:75:44:52:e0:69:43:d9:
                    b4:bc:82:29:26:50:f7:95:1e:23:0c:29:8e:12:cf:
                    68:be:8f:3e:21:6e:ad:02:39:23:81:9a:5b:22:e6:
                    a2:9d:d3:0e:80:ef:83:2d:64:11:50:12:5b:76:dd:
                    24:fd:98:a3:9f:e6:31:26:68:e8:00:7f:2e:41:6b:
                    78:36:1d:e7:76:bd:db:4c:ba:9b:c9:b8:c1:03:7d:
                    fb:b8:e6:92:0b:63:ad:f9:8b:43:e9:83:ca:58:2c:
                    d1:f1:8e:e2:fa:dd:1b:f1:f7:af:ea:9c:85:5c:54:
                    5b:3a:dc:57:54:1d:b1:8c:32:7e:46:43:fb:66:70:
                    20:d2:05:00:bb:75:b5:5e:89:4a:35:6e:40:2f:43:
                    b9:ad:64:7d:c2:03:64:ed:28:72:ae:34:72:6e:e9:
                    c4:44:79:6d:2a:ed:cb:eb:d9:a6:41:67:4e:c4:8a:
                    72:c5:7f:cd:4d:03:7b:56:67:e3:e5:be:5d:a7:5e:
                    df:b2:c5:84:ca:45:c4:31:06:95:c8:ba:ba:58:48:
                    db:8e:6a:f1:a8:12:9b:60:41:b2:e6:f3:93:4a:20:
                    4a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:39:76:CA:C9:C1:81:EC:18:08:E1:2F:E3:40:73:EF:A9:FB:E9:5E
            X509v3 Authority Key Identifier:
                keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e1:de:ad:6f:db:c0:9d:32:f8:a1:a1:3f:8f:c4:5c:9e:c1:
         64:14:7c:d3:2b:ac:15:ec:22:aa:70:23:bb:58:7d:c5:fe:43:
         d4:18:7d:41:50:b7:3c:6e:72:cc:59:9b:a7:15:50:c1:ed:7d:
         6f:62:18:99:a0:31:18:b1:05:24:d4:36:25:17:ca:a8:6f:ba:
         9d:63:c6:a0:66:e3:c5:d3:61:e1:c8:78:e4:2b:11:54:41:5f:
         d8:ce:35:9f:fd:36:c1:75:b7:c1:82:80:26:3c:07:ac:ae:a7:
         bf:44:c1:3a:ae:ec:79:95:b1:03:93:61:24:11:23:83:2f:e4:
         a6:e0:8a:eb:f1:d8:43:28:e5:28:b4:85:7f:f4:5d:73:f1:83:
         2d:e1:86:e0:66:47:22:7b:b3:13:7c:be:64:50:f8:f6:b9:45:
         66:25:16:ad:93:83:8c:f7:e6:eb:c6:a3:e9:76:f8:f8:98:e6:
         c9:a6:52:2a:47:06:3c:e1:e6:16:de:dc:28:e6:45:0a:ff:b1:
         19:94:61:9d:68:4c:88:2b:ec:e5:c9:66:f6:25:4f:2a:ec:97:
         e1:af:80:65:30:89:60:63:84:2a:8a:d6:eb:97:1e:42:a4:d1:
         48:ea:ef:24:95:74:ea:04:a7:07:61:90:86:df:6b:cd:c4:de:
         e5:2b:37:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:24 2026 by rpki-client