This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
File:                     bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json)
Hash identifier:          hbbA8OHp7tXr1U1tqSYx7j1z07OqNjfuJL06ncZWGEY=
Subject key identifier:   3B:35:19:C8:6A:1D:25:4C:EB:D2:76:7B:EA:61:60:B6:60:C5:57:AF
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Certificate issuer:       /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial:       1931
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
Manifest number:          191B
Signing time:             Sat 24 Jan 2026 16:13:24 +0000
Manifest this update:     Sat 24 Jan 2026 16:13:23 +0000
Manifest next update:     Sat 31 Jan 2026 16:13:23 +0000
Files and hashes:         1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: iPkgzp0M7eCZ0DjpNM0XsxRkZ2sxFnSmYy+Zsc9vZGU=)
                          2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: hGExMUb+w4JyWjME6Pb9a+xtMzWk7NBawSO3YXbXwM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
                          rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6449 (0x1931)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
        Validity
            Not Before: Jan 24 16:13:23 2026 GMT
            Not After : Jan 31 16:13:23 2026 GMT
        Subject: CN=6974efa4-3ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:45:c9:a5:c5:be:80:a1:84:67:cd:db:dc:46:
                    48:e4:a4:48:0e:f7:89:66:fa:b7:ae:a5:29:32:5d:
                    97:73:5e:6f:ff:09:7a:cc:56:1e:45:75:fe:bd:11:
                    6c:93:22:78:c1:41:f8:9d:1f:37:4e:80:9f:42:10:
                    c5:5a:17:2d:4c:ac:3a:ec:69:26:d6:22:19:b6:cb:
                    3e:a3:12:1f:e5:91:d1:b2:50:53:30:6c:e1:a4:a2:
                    b5:fc:9e:e6:7b:6e:4d:29:da:f9:85:af:2d:d6:4f:
                    5d:ea:2c:f9:91:a5:c1:a3:11:f8:8f:da:a6:b6:a9:
                    b7:93:4a:eb:78:b0:d6:21:d6:43:4d:b2:da:18:6d:
                    42:85:19:9d:17:b1:15:65:fc:ce:20:c1:8d:58:c0:
                    e3:40:c1:5a:bf:7b:61:5c:ef:9f:00:0d:ef:19:63:
                    98:6d:81:a9:25:ca:c9:ed:e3:78:fd:2e:95:b1:d8:
                    64:1e:1f:6c:ed:99:19:92:e0:26:84:cd:b8:e0:53:
                    18:48:4a:c8:ca:74:36:b4:87:96:5c:34:0c:db:4c:
                    ac:35:78:4b:ee:39:dd:02:59:59:9a:cb:6e:43:d9:
                    47:6f:89:03:a5:ad:18:ff:f6:e1:f3:b3:7a:20:db:
                    b1:d1:22:f3:1f:f7:be:b6:1e:6e:35:3e:64:df:7f:
                    f1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:35:19:C8:6A:1D:25:4C:EB:D2:76:7B:EA:61:60:B6:60:C5:57:AF
            X509v3 Authority Key Identifier:
                keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cd:bb:28:7e:8a:01:2d:7c:e8:b2:40:6c:80:3e:a0:bb:da:
         ac:9e:e3:f6:f7:4c:4b:00:34:d3:25:99:1f:e8:b1:8a:39:c5:
         96:a3:5b:7f:34:18:ff:68:a1:32:a1:e2:89:54:39:de:42:33:
         ae:79:bd:34:20:cb:38:e0:93:67:c5:91:47:ea:1b:cd:80:b4:
         05:16:c4:70:f4:73:b1:80:d7:4e:3f:2e:ec:55:96:f0:90:bc:
         3c:23:79:5a:31:f5:cc:a0:49:8c:ad:c1:6a:ff:46:db:cc:52:
         f7:8d:db:f9:d4:de:c4:73:f2:6f:91:a8:7c:63:42:c2:88:96:
         d2:40:83:b9:38:a2:1a:d6:e5:00:9d:9e:dc:28:f0:06:a7:4b:
         e8:71:99:f7:2b:90:e3:1a:d2:eb:35:cc:05:13:cc:e8:88:16:
         e9:9b:43:6d:72:f3:99:3a:41:0c:21:64:e3:85:14:6a:9a:57:
         bf:65:95:9e:34:8e:15:97:2e:ae:47:d2:b9:c8:37:9c:ad:d8:
         b0:b5:1c:3d:32:54:64:80:af:64:11:7b:11:6b:fd:c3:6e:78:
         cb:56:a5:bd:2d:1c:c4:ac:5c:67:35:09:0c:f6:6a:5f:a3:18:
         bb:8b:cf:ad:7d:c1:e2:64:7d:d6:a6:1a:87:08:d5:d9:be:2c:
         e7:f8:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:37 2026 by rpki-client