This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
File:                     bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json)
Hash identifier:          hEBwqYlPVrrKX+JgKA1sferTltejvkcaNx0ELmEw+uw=
Subject key identifier:   19:2F:B9:7F:1E:DA:30:F7:C0:0D:CE:C6:28:E5:14:D1:2C:43:B6:6D
Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
Certificate issuer:       /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
Manifest number:          014E
Signing time:             Fri 23 Jan 2026 03:28:46 +0000
Manifest this update:     Fri 23 Jan 2026 03:28:46 +0000
Manifest next update:     Fri 30 Jan 2026 03:28:46 +0000
Files and hashes:         1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: N8jX833WTtEFrquhH1sJWEKILOMZxqG1hzNu2LxBaQs=)
                          2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: EKbBGVNf6UZGjGH5PT+x5TqElAgqJbm8pSoP/IIyglU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B
        Validity
            Not Before: Jan 23 03:28:46 2026 GMT
            Not After : Jan 30 03:28:46 2026 GMT
        Subject: CN=6972eaee-896d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:ca:7e:f0:10:79:e3:ee:de:05:1c:60:da:
                    48:04:41:3c:d4:8c:df:0e:08:8e:8b:90:39:8c:35:
                    82:1f:88:7e:62:21:01:d2:41:8d:09:26:4b:4c:c2:
                    e2:28:eb:01:d8:c7:2c:88:09:eb:5b:59:d0:e2:1f:
                    7a:c1:1e:d6:1b:1e:41:70:c2:36:e9:56:e5:d1:80:
                    a0:5f:ec:bd:c0:4b:9d:f0:af:a0:33:f3:aa:4c:14:
                    47:e4:91:7a:21:dd:01:46:9f:70:08:16:49:3e:ee:
                    aa:8c:7b:d4:db:6b:f3:ae:19:b4:4d:4d:16:0f:84:
                    89:d3:c7:d3:c7:c1:77:15:b9:cf:72:f9:3c:db:26:
                    e4:64:a1:53:56:2c:fa:fe:7c:40:dc:c0:8f:d9:a7:
                    30:df:07:22:a9:ba:44:af:01:02:3d:0f:62:0f:ac:
                    92:e7:55:46:be:6a:e7:f2:ee:75:78:a2:29:0c:51:
                    10:c3:cf:66:d1:e3:3c:7a:9a:ab:89:80:ed:a3:35:
                    55:e5:40:8c:22:f2:bc:6e:bb:67:5d:ff:81:76:23:
                    0c:01:e4:a4:5e:5d:7f:f0:51:e5:57:39:1d:f8:ec:
                    c0:69:13:24:46:68:1a:93:5a:a6:b2:28:f6:c9:95:
                    ae:19:fa:f6:81:5f:62:2d:12:53:3b:d9:74:be:f7:
                    64:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2F:B9:7F:1E:DA:30:F7:C0:0D:CE:C6:28:E5:14:D1:2C:43:B6:6D
            X509v3 Authority Key Identifier:
                keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6c:a7:d4:5f:1f:f6:e5:65:21:e7:77:e3:af:61:ae:5d:32:
         95:c3:f4:3b:12:84:50:cc:30:ae:64:34:e7:95:77:75:35:46:
         6a:a5:f6:34:7d:9d:f5:c4:0a:ac:02:ce:56:75:06:23:cd:a9:
         59:09:3c:50:3b:64:18:11:6d:5c:87:fb:67:f6:03:d7:37:d3:
         3e:97:6a:56:f4:df:06:08:d3:e8:24:87:f9:c0:df:52:57:dd:
         b3:b0:b2:99:8c:04:c0:99:39:9f:16:d0:5f:0a:4d:0b:cd:56:
         10:42:b8:86:ae:61:36:93:03:a7:ef:ac:70:fc:0e:a3:f7:6e:
         08:6c:d5:5d:69:33:8e:19:f6:2a:32:34:d0:83:c6:8c:78:2b:
         31:36:bb:37:ec:84:0c:eb:23:5d:5d:a7:cd:01:68:3c:fa:41:
         d9:7a:57:74:aa:97:1f:94:7a:0a:23:ab:2c:af:97:ba:fa:f5:
         ce:25:e2:c6:bc:70:09:1e:f4:5d:33:1b:ba:07:49:12:cf:62:
         2b:c9:e8:31:a3:7f:32:4b:88:e0:11:95:48:f8:1b:6c:d5:b4:
         ed:3d:cd:7a:fd:46:f5:7c:7d:5e:32:c7:89:92:96:f5:63:a4:
         e7:b6:78:b0:24:5f:30:91:7a:68:72:64:35:6b:be:a8:d6:fc:
         95:e2:a8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:46 2026 by rpki-client