This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
File:                     BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json)
Hash identifier:          3hY/a2CcDjDR4tVON53dN41v3F+A2E+6BNFq6XerxMU=
Subject key identifier:   46:81:06:C3:75:85:F7:EA:68:B5:9F:16:36:4C:1C:63:E2:0C:E0:0E
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Certificate issuer:       /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
Manifest number:          0196
Signing time:             Sun 25 Jan 2026 02:50:10 +0000
Manifest this update:     Sun 25 Jan 2026 02:50:09 +0000
Manifest next update:     Sun 01 Feb 2026 02:50:09 +0000
Files and hashes:         1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: aRNjSx+6DV8P44P/DV3R2qGXcH6QAuXJH2z1r8P77e4=)
                          2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: 5GVQ1bIBa+U3v3tASIB7alCOpvULFOKmUN8ptv6R1ws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
                          rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
        Validity
            Not Before: Jan 25 02:50:09 2026 GMT
            Not After : Feb  1 02:50:09 2026 GMT
        Subject: CN=697584e1-0633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:bb:07:2c:3a:94:c8:7b:94:64:61:ce:6c:
                    18:30:5d:0a:5f:0a:5d:63:10:6f:10:b1:3d:3d:b1:
                    cf:80:37:7f:dd:04:75:84:38:dd:be:b7:60:12:32:
                    e6:42:a6:83:31:af:a9:2f:c1:83:b7:e5:88:c7:2a:
                    cf:e8:7c:ae:20:0e:db:28:f8:1e:e4:b1:8c:bf:4f:
                    22:2a:a9:84:75:f1:7d:b9:ac:98:7b:1c:8c:5d:31:
                    0b:98:52:16:f0:96:10:02:cb:c7:10:15:f3:63:a1:
                    cd:f3:0e:dc:5a:13:bb:e8:54:9e:ff:70:24:e7:66:
                    e9:c2:aa:fa:02:3e:91:5f:dd:8f:6d:8c:f5:ad:dd:
                    a9:36:4e:e6:21:7b:22:b3:a3:08:18:ed:4c:58:7b:
                    89:d4:7f:db:0d:7b:04:f4:5d:6e:b0:42:76:dc:5f:
                    8e:7d:6c:21:21:de:bd:0b:75:68:16:47:57:be:58:
                    0c:54:bb:dd:20:04:6e:cf:cf:ae:00:f9:ea:d5:00:
                    d2:cf:59:24:b0:c8:6a:36:cf:5a:50:fc:84:42:bb:
                    6f:fc:50:69:11:2b:dc:f4:dc:66:41:a9:ec:e7:a9:
                    56:3d:67:35:a3:0a:6c:3f:76:be:f3:fb:f2:0a:c4:
                    81:85:a7:97:6d:02:1f:14:35:06:24:27:a9:c3:95:
                    d9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:81:06:C3:75:85:F7:EA:68:B5:9F:16:36:4C:1C:63:E2:0C:E0:0E
            X509v3 Authority Key Identifier:
                keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:6e:7a:a5:b2:b2:e1:e2:25:45:fb:bf:70:a0:0a:8c:cd:03:
         c0:dd:fc:77:2f:bc:0b:4a:ad:b4:ba:df:b9:52:30:08:e4:86:
         93:33:90:41:e7:c6:fb:94:8a:54:12:bd:ea:80:2a:43:ec:22:
         56:e8:5f:bf:26:ec:86:fc:8e:d8:0f:f0:fd:cc:47:13:24:a7:
         ca:93:0f:07:f6:df:c5:a5:2e:74:b7:3a:c8:e3:01:43:34:7b:
         fc:86:f3:d8:61:a1:13:ab:5f:e7:a0:5a:71:0d:22:02:15:ab:
         25:ba:3a:45:d3:73:e0:af:e2:aa:a3:13:36:9c:fa:e3:31:0b:
         9c:29:06:c2:9b:20:4b:d5:6f:99:81:cc:47:22:2b:73:0e:f6:
         06:1b:53:4a:10:e6:7a:56:2b:ed:2f:2f:94:9c:88:7d:b9:c0:
         1b:c8:f1:e0:c6:21:9f:e0:57:09:4b:65:4b:af:d6:27:56:d2:
         52:0d:36:b5:63:97:c6:70:a6:89:62:a8:17:75:2d:85:31:ba:
         27:73:8e:0c:e9:41:e8:36:67:94:80:96:e4:ed:d6:b8:a9:cc:
         7d:8e:9d:37:a0:cd:72:e4:d4:d8:a9:9f:cd:cc:f6:d7:e0:9b:
         2e:d5:01:fb:f3:c2:43:e2:f1:20:02:6d:02:f3:d2:a0:d6:87:
         6d:d8:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:16 2026 by rpki-client