This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
File:                     BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json)
Hash identifier:          bBDVN2ccJlz/C+fZ9xAo/930vzV0vKr1feIfBZjiSGk=
Subject key identifier:   D9:4D:6A:91:5E:24:35:99:0A:A5:73:1A:DE:18:B4:53:45:49:DE:18
Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21
Certificate issuer:       /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
Certificate serial:       0552
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
Manifest number:          054C
Signing time:             Sat 24 Jan 2026 22:39:22 +0000
Manifest this update:     Sat 24 Jan 2026 22:39:22 +0000
Manifest next update:     Sat 31 Jan 2026 22:39:22 +0000
Files and hashes:         1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: PjljK/DsnhZta7JtCHM9wTUAnPKO75A8LeKNHNhFEBk=)
                          2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: Bfjs/rTdpDPTDnJIoWaxeafLKa6QSKWFHwoAGDnn1AU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl
                          rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362 (0x552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B2C1, serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
        Validity
            Not Before: Jan 24 22:39:22 2026 GMT
            Not After : Jan 31 22:39:22 2026 GMT
        Subject: CN=69754a1a-4c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:54:91:0d:d1:8a:1c:99:e1:4d:9d:65:f0:
                    5e:73:9a:54:7d:ba:26:02:6c:16:58:70:32:00:a5:
                    b1:14:fc:58:cb:21:dc:40:04:4f:98:ee:93:09:ce:
                    4f:64:54:c2:57:04:c0:f3:ad:b5:ff:5c:67:3e:87:
                    89:48:d7:33:20:bb:9b:5d:1e:22:d1:ff:d5:be:10:
                    d3:a5:70:7b:3d:63:7e:30:9b:63:a4:7f:89:4a:e8:
                    b2:04:f5:2c:82:5a:ac:9f:66:46:0d:32:b6:1d:28:
                    3b:d3:89:a0:4a:3a:e0:5c:e2:fd:8d:e5:b3:9c:a7:
                    82:b8:0e:fe:fb:eb:bb:32:f4:fd:ac:02:50:c2:eb:
                    fe:95:da:fe:01:79:84:d8:6f:65:3d:77:04:a0:76:
                    20:c6:23:77:72:d7:77:a0:7d:2e:3a:49:92:fb:d4:
                    b3:3a:83:8a:f7:99:63:8c:f9:c0:3c:36:bf:db:03:
                    3f:de:79:22:46:44:2b:dd:a1:83:8c:34:df:c9:56:
                    b5:df:3d:c1:58:78:4a:d2:aa:3b:dd:08:8c:ad:e6:
                    54:98:bd:d8:58:ae:b4:5f:df:6c:9e:a7:9f:d9:2c:
                    d8:15:ee:48:00:8e:22:5d:57:4b:93:3b:2c:69:58:
                    f3:3b:9c:e1:c6:4e:84:99:41:54:4d:d9:cf:f5:d9:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4D:6A:91:5E:24:35:99:0A:A5:73:1A:DE:18:B4:53:45:49:DE:18
            X509v3 Authority Key Identifier:
                keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:6c:f3:87:50:06:90:f9:80:92:57:82:8b:61:1c:89:95:1d:
         10:5d:9e:e9:66:15:c0:fa:a0:60:23:6f:55:1e:44:27:2d:d5:
         77:18:62:d4:e6:c7:3f:f0:9e:92:51:32:91:15:be:35:7e:0e:
         08:20:0c:cc:5c:1d:53:ce:19:ac:38:d1:f5:d4:f8:53:a7:e9:
         3a:e9:99:3d:e3:62:1e:73:fd:18:29:4d:39:e4:05:47:b4:96:
         1b:f8:63:7b:28:63:8c:06:09:95:76:51:56:5c:fe:cb:d9:53:
         77:ee:d8:a2:bf:5e:16:24:e7:f6:20:be:7e:70:63:82:45:c9:
         38:fd:74:e5:89:d3:80:1b:7e:84:37:ee:44:1c:8d:65:b4:18:
         f6:45:19:e2:30:47:ef:4c:e5:88:71:e7:e8:8f:91:8d:36:62:
         c6:3e:15:07:fd:e3:f6:71:07:ba:af:0d:f1:01:ef:ff:0a:0b:
         60:c2:8b:d2:f6:35:73:22:53:78:58:2e:84:c5:cf:8c:a9:9f:
         6b:1d:2e:ca:47:1c:f9:a3:f0:3e:c5:80:58:91:e4:47:e2:d5:
         59:91:92:8b:71:ed:76:97:2d:11:7d:0e:db:80:ec:e9:cb:5d:
         88:d4:4a:42:0f:ef:d1:90:19:76:26:e4:03:e9:ea:52:8c:98:
         e1:73:6d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:16 2026 by rpki-client