This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
File:                     Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft (raw, json)
Hash identifier:          h4wYOuAb2aREmgKLIrHF+Znp/QUqZyhDYAqcIOP+2oI=
Subject key identifier:   74:44:6B:E8:05:C4:CB:56:22:D4:DD:A9:2F:FE:36:41:63:54:58:5C
Authority key identifier: 31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D
Certificate issuer:       /CN=A913270F/serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 07:08:34 +0000
Manifest this update:     Sun 25 Jan 2026 07:08:34 +0000
Manifest next update:     Sun 01 Feb 2026 07:08:34 +0000
Files and hashes:         1: Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl (hash: LDtnk2CgkwNWkOjQpFQs5L+KFQdwaE3Sezx1U/9+em8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl
                          rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 07:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913270F, serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D
        Validity
            Not Before: Jan 25 07:08:34 2026 GMT
            Not After : Feb  1 07:08:34 2026 GMT
        Subject: CN=6975c172-20ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:8d:9a:37:5f:32:fa:0b:d8:3f:66:b2:32:
                    68:16:89:e9:eb:d8:0a:82:26:d1:6b:d0:23:e1:65:
                    e4:0c:0e:15:bd:61:02:28:0e:b3:7c:d1:dc:ae:39:
                    42:c8:65:93:ba:35:4f:d4:f7:bd:65:d5:f4:60:ae:
                    90:fe:8b:80:6a:4b:b1:1d:2a:a8:03:70:71:40:a2:
                    98:82:6b:82:f0:37:9b:51:eb:45:db:b2:61:07:d2:
                    6d:14:22:49:4f:a0:08:83:9c:be:c0:36:5f:62:e2:
                    33:84:a4:a7:ad:3b:e4:fc:53:f1:a0:2f:6f:ab:ad:
                    5e:ce:2a:97:d4:3e:bf:e0:00:4b:34:54:22:6c:04:
                    b1:c3:54:09:ac:77:90:22:17:2d:10:09:26:92:98:
                    2d:23:8b:de:6b:e9:62:f8:a0:b8:2a:c3:58:29:a6:
                    34:2f:95:d5:a3:15:73:df:f5:c3:d2:31:b9:0a:38:
                    86:79:03:26:f8:23:76:1b:14:13:b6:78:a2:98:1d:
                    3c:c9:f3:1d:6f:95:6c:c5:ef:cf:07:26:07:ff:ff:
                    16:99:cd:95:fe:99:fc:c8:c3:8c:b0:a9:fe:b7:ad:
                    b8:19:08:c4:c5:2d:d3:ac:e6:d7:5e:9a:1d:66:29:
                    32:d9:fb:c9:a9:35:69:75:f4:95:13:33:4b:be:e9:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:44:6B:E8:05:C4:CB:56:22:D4:DD:A9:2F:FE:36:41:63:54:58:5C
            X509v3 Authority Key Identifier:
                keyid:31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f4:f1:63:96:92:e3:40:a5:7f:74:fc:8b:97:df:f8:1f:c8:
         7c:24:12:62:e2:fc:9a:77:5d:f2:f4:fa:90:eb:16:c2:73:1e:
         dc:a8:5a:e2:cf:a9:c2:82:f1:4d:70:22:20:d5:e9:57:d5:fd:
         46:ae:0a:13:6d:31:45:bb:55:50:2a:a3:4d:dc:fa:c5:45:75:
         00:b5:65:45:30:fb:f8:46:82:ee:06:34:f4:3c:53:45:94:63:
         b1:e6:2c:69:50:41:db:2b:25:69:69:e7:30:4e:a9:0b:5a:be:
         d3:ab:7c:02:42:cd:ac:6b:64:43:92:6a:17:65:6a:85:4e:b9:
         b3:3c:63:bc:ef:51:fb:54:67:56:27:d8:50:c7:f5:96:85:73:
         e8:32:b0:4f:26:08:db:8b:50:c8:c0:88:4d:d1:87:64:b4:85:
         ee:4c:7a:21:68:e4:a7:74:e0:9b:7e:b6:d0:2d:c3:b5:52:ff:
         e9:90:ac:e0:09:8c:18:69:3b:34:7c:46:48:22:b9:2e:22:09:
         69:0d:d1:67:9f:d9:b3:23:ac:be:8c:d9:2c:64:dc:04:3d:16:
         48:81:ba:0d:a4:dc:16:c8:50:cd:90:9e:a3:34:f0:b8:56:72:
         a3:44:f6:a4:70:fe:93:d4:ae:f5:4d:84:b9:f8:6a:7f:9c:5e:
         18:06:ad:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:17 2026 by rpki-client