This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
File:                     bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft (raw, json)
Hash identifier:          K1N9XH2oqGbrW3IJnZaTfa6/onalZeBGw5E7HcnNzeY=
Subject key identifier:   DA:6D:62:5F:4A:AF:35:40:43:2C:65:A3:94:DB:A8:2C:83:7F:3D:EE
Authority key identifier: 6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9
Certificate issuer:       /CN=A914949E/serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
Manifest number:          01A8
Signing time:             Sun 25 Jan 2026 02:34:36 +0000
Manifest this update:     Sun 25 Jan 2026 02:34:36 +0000
Manifest next update:     Sun 01 Feb 2026 02:34:36 +0000
Files and hashes:         1: bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl (hash: grEry5yv2UMbkB5fMfjehTjmsaQwEz8VGHDbUPQXbpg=)
                          2: 52531292718111EEA2596A60C4F9AE02.roa (hash: Vg73TN1ibIfWQIPliBrxJS/1BLP/byeXdiTRX/hU2Io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl
                          rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914949E, serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9
        Validity
            Not Before: Jan 25 02:34:36 2026 GMT
            Not After : Feb  1 02:34:36 2026 GMT
        Subject: CN=6975813c-3349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:b1:43:4a:1d:ca:ed:ec:d0:5e:af:14:7d:
                    48:77:85:91:cc:7f:cb:c3:cb:62:75:55:d5:de:f3:
                    11:dd:39:f5:03:16:84:9f:57:99:4a:49:92:3e:1a:
                    25:c5:0d:91:5c:68:f0:30:ca:98:45:7b:ce:be:5a:
                    41:34:b7:68:65:f9:25:14:a9:0c:82:0f:2e:18:47:
                    19:59:44:41:df:f0:44:ea:a7:2b:9f:cd:45:fb:e6:
                    d5:29:c1:76:e2:1c:69:7f:39:77:d8:c9:0b:3b:7d:
                    3d:0b:76:06:5a:8c:eb:a0:c1:eb:db:44:45:f8:42:
                    92:6d:9c:72:2a:f4:18:e2:a3:11:34:fd:51:08:43:
                    dc:0c:cb:9a:bc:f6:99:40:bf:75:fe:57:b6:c3:ba:
                    c5:7b:54:0b:2a:65:20:90:b5:28:46:ff:7f:54:da:
                    af:7d:2e:97:a1:4a:4b:22:e0:be:8d:45:72:d9:83:
                    80:a3:d8:c0:63:10:91:2c:a2:a9:6e:e1:c1:3e:2e:
                    81:f6:5b:8c:0a:fd:89:2d:1a:89:6e:1c:36:c6:cc:
                    1a:02:7b:af:f5:0f:38:75:ab:f6:96:6f:e0:8d:6f:
                    eb:8c:de:a2:de:98:b4:f7:48:61:f1:f5:18:67:78:
                    f1:5a:79:87:10:f7:71:79:6d:ee:5e:6c:26:96:d0:
                    ab:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6D:62:5F:4A:AF:35:40:43:2C:65:A3:94:DB:A8:2C:83:7F:3D:EE
            X509v3 Authority Key Identifier:
                keyid:6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:24:3f:a6:5e:02:7d:71:71:e2:5e:c0:08:96:f7:6e:5e:4a:
         14:c6:d5:42:3c:63:00:1a:65:d6:39:9d:4a:30:6a:ce:c7:e2:
         09:97:dd:a7:73:b0:95:78:ac:fb:ab:23:01:8b:be:4b:1d:6c:
         0c:e4:c4:b0:f3:75:d9:53:7c:64:a2:1c:f5:61:f9:2c:d0:49:
         e1:11:8c:51:01:25:cd:38:9d:b7:1f:b8:67:3f:5f:82:08:8a:
         aa:57:94:07:24:eb:4e:05:9d:9e:5f:b2:0c:6e:0d:8a:fa:e9:
         44:f2:a3:d9:b5:b4:0d:43:8d:6e:3a:3a:c3:29:8b:7c:59:72:
         95:2c:cc:a1:1a:54:fc:f7:47:59:32:4b:0e:81:49:00:8b:ad:
         9d:57:70:2d:e1:31:4c:30:4a:f1:82:14:58:15:e1:db:88:d5:
         8a:36:db:00:fb:e2:86:da:22:1f:00:1e:9d:85:3f:05:60:19:
         ae:6e:e3:b2:41:ab:21:0e:fa:ff:20:ce:48:ea:49:6b:f1:99:
         0f:68:09:78:c8:d7:75:2f:75:73:44:9d:a5:25:1c:81:6e:94:
         5b:99:f2:08:73:72:04:ef:e0:c6:2f:36:0b:6a:6f:53:75:61:
         95:3c:95:d4:29:7a:31:1c:77:0b:ba:25:58:2e:07:93:37:be:
         95:25:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:15 2026 by rpki-client