This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
File:                     B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft (raw, json)
Hash identifier:          7eA+NvJ9dvtgGSJ69i7zngord/oxRD2Kz4/bN9DS6zs=
Subject key identifier:   4F:EC:AB:92:AA:D1:45:FC:97:D6:CA:61:63:09:C6:76:BD:57:79:E5
Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
Certificate issuer:       /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
Manifest number:          52
Signing time:             Sat 24 Jan 2026 22:39:51 +0000
Manifest this update:     Sat 24 Jan 2026 22:39:50 +0000
Manifest next update:     Sat 31 Jan 2026 22:39:50 +0000
Files and hashes:         1: B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl (hash: +4eDNQlsiggdr4lkhX9MKxvqf2kQf4rf88NG/MQW4Bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
        Validity
            Not Before: Jan 24 22:39:50 2026 GMT
            Not After : Jan 31 22:39:50 2026 GMT
        Subject: CN=69754a37-25a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:59:28:ce:33:d9:1a:03:4d:f8:32:19:43:
                    d6:fc:f5:b0:a6:b7:02:0a:48:6c:6f:64:3d:79:d1:
                    2e:15:ee:b5:fa:70:7a:46:ca:86:32:da:a4:4b:3b:
                    87:22:36:c1:ff:1f:80:06:3e:13:f9:57:3b:1d:ca:
                    45:36:b4:1d:7a:ab:0b:4a:85:cb:c0:5d:b1:17:c9:
                    8e:d6:e0:22:0a:eb:9e:7a:d6:ca:6e:f3:d3:13:d3:
                    46:34:47:7e:68:ee:ab:40:56:61:60:93:5b:0c:f1:
                    d1:95:7d:0f:3d:e6:c8:d9:e8:fc:46:66:82:c7:4e:
                    45:40:d2:3c:5b:e7:7d:fb:90:9c:66:f1:93:bc:95:
                    84:6a:e9:73:92:ca:24:16:5c:0b:53:23:ba:02:ab:
                    b9:a2:18:fc:99:f4:c1:6d:8c:fa:2e:77:5a:27:57:
                    c3:70:2e:d7:c4:56:20:8b:24:04:06:f0:7e:18:06:
                    5f:de:64:11:24:82:19:40:56:c5:de:0e:71:64:10:
                    94:ea:7f:87:5a:db:bd:a9:95:61:3d:51:4d:dc:17:
                    8a:6e:45:9f:c6:56:da:01:e5:3d:55:67:b8:73:cd:
                    51:60:d1:0b:1f:50:43:fd:d0:5c:31:dd:96:43:b7:
                    46:56:2c:63:37:1c:0e:40:1d:a7:71:d9:e0:65:68:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EC:AB:92:AA:D1:45:FC:97:D6:CA:61:63:09:C6:76:BD:57:79:E5
            X509v3 Authority Key Identifier:
                keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:fe:b8:43:29:e3:47:a9:a8:54:57:4c:d2:53:76:94:d1:
         43:55:6c:4b:92:26:82:50:ab:f8:95:10:fa:90:e3:56:a9:37:
         0d:44:fb:c5:5b:56:f9:59:b7:a7:d8:f6:57:05:09:d2:67:42:
         06:74:59:8f:4e:8c:17:d7:d5:ab:4d:7d:eb:31:c7:93:7d:c4:
         eb:80:67:44:c1:97:48:a4:28:74:97:4b:14:a4:fa:d9:c9:3c:
         86:93:34:f8:31:d6:75:05:5b:56:ca:4c:4b:19:ca:3a:4d:24:
         61:da:e1:66:23:f3:d4:ab:ff:ee:7e:2b:e7:45:e2:8b:48:c7:
         fe:24:78:94:a9:46:41:9d:16:f2:4c:c0:4d:1e:e2:63:94:e9:
         db:43:da:25:d2:5c:8f:19:60:9c:15:a7:d7:87:14:02:27:c0:
         ad:eb:f7:5d:98:06:7e:8e:c0:18:49:8b:ff:a4:15:c6:b5:07:
         d0:b5:c1:04:e4:2f:62:c3:f0:29:9c:a2:ab:49:aa:c5:d4:0e:
         39:cc:ef:33:92:f9:74:27:96:26:cd:4b:f3:5c:bc:29:59:84:
         44:12:3d:39:67:93:3e:0e:09:a9:ba:dd:a6:01:7f:de:2b:3d:
         2c:93:30:06:2f:12:17:a5:33:e9:8e:34:84:cf:73:66:ee:35:
         32:cb:fe:71
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MkU3MDExMC8GA1UEBRMoMDdGRTg5NjMwMjAxREVGMzdGNEQ2OEEyMEVEMTMzQTlD
M0I2QTJBMzAeFw0yNjAxMjQyMjM5NTBaFw0yNjAxMzEyMjM5NTBaMBgxFjAUBgNV
BAMMDTY5NzU0YTM3LTI1YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCoolkozjPZGgNN+DIZQ9b89bCmtwIKSGxvZD150S4V7rX6cHpGyoYy2qRLO4ci
NsH/H4AGPhP5VzsdykU2tB16qwtKhcvAXbEXyY7W4CIK65561spu89MT00Y0R35o
7qtAVmFgk1sM8dGVfQ895sjZ6PxGZoLHTkVA0jxb5337kJxm8ZO8lYRq6XOSyiQW
XAtTI7oCq7miGPyZ9MFtjPoud1onV8NwLtfEViCLJAQG8H4YBl/eZBEkghlAVsXe
DnFkEJTqf4da272plWE9UU3cF4puRZ/GVtoB5T1VZ7hzzVFg0QsfUEP90Fwx3ZZD
t0ZWLGM3HA5AHadx2eBlaGWJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT+yrkqrR
RfyX1sphYwnGdr1XeeUwHwYDVR0jBBgwFoAUB/6JYwIB3vN/TWiiDtEzqcO2oqMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyRTcwL0U2MEU5MzdDN0Q4
NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZOX1RXaWlEdEV6cWNPMm9x
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQl82Sll3SUIzdk5fVFdpaUR0RXpxY08yb3FNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy
RTcwL0U2MEU5MzdDN0Q4NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZO
X1RXaWlEdEV6cWNPMm9xTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABa4/rhDKeNHqahUV0zSU3aU0UNVbEuSJoJQq/iVEPqQ41apNw1E+8Vb
VvlZt6fY9lcFCdJnQgZ0WY9OjBfX1atNfesxx5N9xOuAZ0TBl0ikKHSXSxSk+tnJ
PIaTNPgx1nUFW1bKTEsZyjpNJGHa4WYj89Sr/+5+K+dF4otIx/4keJSpRkGdFvJM
wE0e4mOU6dtD2iXSXI8ZYJwVp9eHFAInwK3r912YBn6OwBhJi/+kFca1B9C1wQTk
L2LD8CmcoqtJqsXUDjnM7zOS+XQnlibNS/NcvClZhEQSPTlnkz4OCam63aYBf94r
PSyTMAYvEhelM+mONITPc2buNTLL/nE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:24:42 2026 by rpki-client