This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
File:                     BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft (raw, json)
Hash identifier:          PMkMer2reSCFgy9S4TLLhpXF5UN0rrBQb5ThkpToJMY=
Subject key identifier:   40:7C:FD:CB:F8:F2:33:FE:88:00:A2:4F:1E:23:AF:A4:94:57:28:2E
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Certificate issuer:       /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
Manifest number:          F0
Signing time:             Sun 25 Jan 2026 04:43:58 +0000
Manifest this update:     Sun 25 Jan 2026 04:43:58 +0000
Manifest next update:     Sun 01 Feb 2026 04:43:58 +0000
Files and hashes:         1: BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl (hash: 1KCL52yU/xyyQtf/JF2XtgyXcPy+47x22xrlNYKlwk4=)
                          2: 408104A8C3E011F0A31AE55EC4F9AE02.roa (hash: mUltdiFtSdwvKJ1/UtAog12GOcFsnhuiRfLmih/4Qqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
                          rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
        Validity
            Not Before: Jan 25 04:43:58 2026 GMT
            Not After : Feb  1 04:43:58 2026 GMT
        Subject: CN=69759f8e-7c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:40:62:94:c0:ed:e7:d5:97:bc:43:b4:0b:
                    b6:d1:1f:b1:aa:1c:65:c5:62:e3:6d:3e:79:14:bc:
                    2f:5c:27:4e:ef:98:89:0c:27:92:fa:36:a6:bc:bc:
                    a3:0d:a7:6d:bf:e7:5d:1c:d2:28:65:c6:a7:f5:4f:
                    4e:ed:24:e3:ea:13:10:2e:2a:da:a4:f3:81:69:18:
                    62:b8:07:e9:ee:2a:5a:cd:0c:ef:23:3e:84:8f:c7:
                    a0:f0:21:0e:4a:bc:1b:9d:2a:c9:9c:e0:bd:0f:76:
                    f5:3c:93:0e:29:c0:8e:e0:f6:5a:d9:6b:e6:ae:02:
                    98:79:7b:34:2f:1d:9d:6c:cf:17:54:3c:45:b3:36:
                    11:3b:bc:9e:0c:95:4b:1f:68:06:59:70:32:45:55:
                    f3:a4:16:5c:12:52:e8:dc:28:b5:bd:60:ca:d8:43:
                    b9:8d:de:e4:25:70:25:1c:62:0d:da:a3:11:77:bd:
                    b1:f1:07:39:74:c8:99:97:48:91:3a:da:b3:12:16:
                    ca:86:28:2a:b4:6b:f0:f5:70:62:49:f3:36:3d:06:
                    9c:40:59:1f:b8:a3:92:93:59:75:5a:d4:bf:93:f6:
                    53:99:76:c0:dc:15:42:99:c7:e4:65:98:1c:8e:56:
                    a7:44:12:17:09:66:fb:d8:21:1f:4a:23:39:27:5e:
                    4a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7C:FD:CB:F8:F2:33:FE:88:00:A2:4F:1E:23:AF:A4:94:57:28:2E
            X509v3 Authority Key Identifier:
                keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ef:38:f4:63:63:a3:b3:03:70:36:fe:b1:d2:75:3a:d6:d5:
         d9:f1:af:ad:53:67:dc:90:70:7d:1a:ef:e9:8c:15:2e:19:b2:
         f0:9f:80:bc:03:dd:67:71:ac:c3:b4:0e:b3:c5:67:59:a9:5f:
         64:a3:69:ee:85:81:01:a7:4c:9f:7e:a4:a5:d5:57:42:ad:86:
         f9:56:80:6c:32:ed:24:3a:40:61:d4:ed:02:24:82:57:76:e6:
         c6:d2:d5:e2:01:11:4a:94:f2:ee:8e:cb:3c:ed:b7:a4:de:02:
         19:1b:30:65:6a:c5:53:59:a6:a9:d7:cc:c4:41:ee:f2:1c:39:
         a7:03:6a:84:8b:25:67:d7:fe:db:82:24:6f:98:1f:ac:10:c6:
         2b:ea:25:4c:4b:00:e1:9d:af:b7:8e:e8:00:ef:92:d5:dd:2a:
         78:f8:23:ad:0f:0f:6a:c6:e6:e2:12:90:ab:b6:89:f2:aa:24:
         0f:ae:c9:7b:ab:e8:86:09:df:e4:92:f4:c5:f1:c0:b9:d2:44:
         12:2e:af:24:b1:12:bb:d1:db:d1:3b:4c:53:7f:92:83:f5:6a:
         9b:b8:5a:2b:a7:a7:9d:14:00:85:28:9f:7b:2d:e4:98:34:70:
         8c:e3:fb:13:ae:a1:ab:f9:4f:98:a4:c5:65:93:b5:64:35:07:
         fe:f7:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:13:04 2026 by rpki-client