This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
File:                     bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json)
Hash identifier:          1v5hxutHTYyy4VsDVpzhLOTzrdQ3aKfKN74YTfzM4V0=
Subject key identifier:   88:E7:C0:9C:B6:22:44:5A:65:99:D4:6D:8E:62:F4:36:C6:DC:23:CA
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Certificate issuer:       /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
Manifest number:          14
Signing time:             Fri 23 Jan 2026 07:06:49 +0000
Manifest this update:     Fri 23 Jan 2026 07:06:48 +0000
Manifest next update:     Fri 30 Jan 2026 07:06:48 +0000
Files and hashes:         1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: pyhD/fVsseNF0+RXSFRjcuEa54cJLGHeqtNvFl8VjWQ=)
                          2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: uxklqXSZwqxy4WOwQCWdt2ENIB1CUzeJmuwZz8w9GA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
                          rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
        Validity
            Not Before: Jan 23 07:06:48 2026 GMT
            Not After : Jan 30 07:06:48 2026 GMT
        Subject: CN=69731e09-dd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:a5:f2:40:2c:e3:8f:ee:b6:4e:d3:72:ac:
                    18:fe:b5:f2:5b:43:3f:c2:aa:36:34:f3:e9:cb:a0:
                    a2:d9:a8:83:85:1f:a4:fb:f5:2c:ec:57:c3:a1:69:
                    2d:27:16:ea:de:83:ca:d7:e0:22:3f:8d:65:aa:ca:
                    3d:a4:88:ac:53:fa:5a:bb:ad:66:62:ff:aa:85:d3:
                    e9:9c:83:0a:8e:ed:0c:34:7a:17:44:f6:ce:92:e5:
                    df:0e:97:a1:62:56:d7:c0:06:79:ae:f0:ad:53:e1:
                    e5:51:21:f3:e0:00:47:f9:50:7e:9d:cc:55:aa:eb:
                    00:08:c7:3d:0a:9b:94:d0:6f:b4:4d:e3:f5:7a:60:
                    c4:6f:23:5f:c6:17:86:d7:4a:75:ae:17:67:1a:dd:
                    a7:12:da:59:82:3a:1a:cc:3e:6a:90:91:cc:24:dc:
                    10:b4:d2:b0:10:37:93:e7:2b:50:62:be:ae:b7:7e:
                    a9:11:72:9f:30:e0:10:09:96:67:5c:10:84:4a:0f:
                    f9:52:8a:44:6f:31:c8:6f:b1:c2:bc:95:e4:83:34:
                    6e:70:3f:8f:1b:11:37:93:1b:9f:ce:96:48:3b:4e:
                    52:42:23:0b:40:95:95:39:ec:2e:f8:32:fe:7c:6e:
                    c2:f9:71:28:03:1e:8f:ae:09:af:94:71:b9:c5:eb:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:C0:9C:B6:22:44:5A:65:99:D4:6D:8E:62:F4:36:C6:DC:23:CA
            X509v3 Authority Key Identifier:
                keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:38:35:09:40:72:71:ff:50:96:8f:c5:93:37:3d:10:34:6f:
         b5:f9:61:73:54:8b:eb:85:cf:a0:0d:d6:97:f1:34:33:69:9e:
         d6:93:56:62:d4:60:67:05:46:1a:06:1d:81:0f:ce:69:81:dc:
         3d:c2:2c:1e:a6:4a:47:89:33:1c:4a:36:6a:8f:7c:72:57:89:
         32:1d:a8:92:75:c0:b3:5a:b3:8f:b1:18:82:50:b5:af:c2:0f:
         ce:c9:c2:39:85:c6:7c:a0:58:5f:66:da:c4:cf:df:fd:bf:a2:
         5e:b9:5c:7b:b1:5d:c6:bf:de:ea:f1:69:af:99:ec:b9:1d:4a:
         11:71:ec:66:62:20:59:76:19:f3:fb:ea:8e:3e:f3:90:4f:ad:
         5d:00:43:99:3e:89:95:fa:29:55:5c:01:fb:d3:c3:ab:c9:02:
         50:f7:37:85:9e:2f:f6:70:1a:11:fd:79:71:83:b8:35:81:74:
         18:7f:8c:7f:6a:de:5c:42:08:9d:18:23:be:6f:0b:67:4d:d2:
         61:12:11:df:eb:95:ad:d2:1b:14:f2:0c:a4:c0:bc:d6:3a:6a:
         f8:6a:5c:3e:29:d5:93:b0:ed:17:da:f2:0f:39:a7:cf:22:67:
         ce:f9:b0:c0:34:5e:3f:20:36:39:d9:22:e8:54:c2:c0:70:bf:
         71:5f:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:53:52 2026 by rpki-client