This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
File:                     fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json)
Hash identifier:          fFBUiwWAM+QU5OccHWRQwDriWNEIotu8rvTiq0Xn1aw=
Subject key identifier:   C2:D7:FD:53:7B:2F:1F:5C:CE:17:21:E4:1E:CE:54:D1:4A:DE:9E:E8
Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
Certificate issuer:       /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Certificate serial:       0BCD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
Manifest number:          0BCA
Signing time:             Sat 24 Jan 2026 18:28:27 +0000
Manifest this update:     Sat 24 Jan 2026 18:28:27 +0000
Manifest next update:     Sat 31 Jan 2026 18:28:27 +0000
Files and hashes:         1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: bZGaJNnWIBHpOLJpKLuxZoELOOnkOs/wv1EDilHkGso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl
                          rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3021 (0xbcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
        Validity
            Not Before: Jan 24 18:28:27 2026 GMT
            Not After : Jan 31 18:28:27 2026 GMT
        Subject: CN=69750f4b-af5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:b4:ee:16:fc:a4:90:78:cd:17:d1:4f:6c:
                    05:ef:3b:40:52:ad:f2:96:94:e7:c1:1f:8f:a5:9e:
                    3a:b1:84:40:26:3c:f4:ca:09:e1:11:ba:ea:d8:49:
                    e0:01:cb:72:51:45:5e:60:13:06:71:52:70:15:41:
                    c4:22:d2:36:f8:b4:db:ec:97:62:0f:b7:d8:68:e0:
                    68:33:b4:bc:65:48:35:e9:bb:df:a6:45:39:05:3e:
                    03:d5:66:a1:46:0f:fd:51:e3:b4:f2:c6:81:5a:42:
                    72:8a:97:82:c4:ef:af:12:ca:70:ed:29:fe:8e:b1:
                    2a:d3:18:50:e6:96:14:c9:38:9b:d1:8f:8d:24:e9:
                    32:dc:b7:87:49:61:b2:9e:c7:ca:8e:79:bd:1e:1b:
                    ec:b7:de:14:46:7e:30:1c:f0:ef:55:4c:bc:04:f4:
                    ba:fd:e9:c2:a2:50:c4:f0:f1:02:db:d8:a8:6e:a2:
                    aa:e1:51:4b:d4:c0:fb:26:f8:be:35:fd:43:f2:ea:
                    a3:72:87:d5:b5:07:29:40:70:eb:b1:94:2a:4c:9d:
                    32:56:a9:63:59:36:f1:f8:02:ec:27:af:bd:bb:25:
                    ea:38:81:3c:41:73:8c:26:7f:58:9e:17:1d:3f:fc:
                    fc:8b:e7:19:79:7c:da:7e:b8:9a:dc:69:2b:fe:62:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D7:FD:53:7B:2F:1F:5C:CE:17:21:E4:1E:CE:54:D1:4A:DE:9E:E8
            X509v3 Authority Key Identifier:
                keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ec:58:e2:75:55:49:12:7c:5a:f9:16:b1:dd:4e:27:17:53:
         7d:65:12:76:a4:ed:7c:08:29:03:2a:16:65:3a:ee:7b:11:be:
         e5:51:eb:9e:18:25:7d:38:5f:dd:87:99:52:f3:74:2a:d8:67:
         cd:39:a1:41:7e:3c:4f:e0:7d:11:93:c5:39:c2:1f:b7:6b:16:
         5a:cc:55:f7:bc:5f:90:ac:3c:16:1d:46:13:23:0d:fa:ef:79:
         ff:b5:bf:20:fc:76:1c:d4:27:bd:e4:e8:0c:7e:9e:a8:5e:e2:
         ed:52:7b:be:58:bf:34:0d:20:71:8e:3b:fc:18:0e:ed:a0:ac:
         d4:5b:2c:76:e9:b3:a4:ec:92:f3:bd:b6:ca:9f:14:ce:7c:d9:
         8c:79:2d:57:2a:8b:19:e3:d0:b4:0b:55:eb:b8:b6:be:4c:b3:
         c6:a1:9b:fb:48:29:1e:af:38:12:cc:87:2d:48:56:76:18:bf:
         30:eb:78:23:61:e9:3e:7e:47:eb:53:f5:e6:91:46:6d:57:17:
         a3:2a:d6:57:6f:1c:1c:18:f8:56:e0:a1:34:a9:f0:f6:1d:fb:
         8d:3e:7a:e9:e2:47:82:c6:da:73:15:4a:c2:18:0c:49:84:c7:
         58:20:e6:d3:8f:75:0f:f8:44:67:49:c9:7f:75:8c:0c:51:66:
         a9:47:5b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:08 2026 by rpki-client