This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
File:                     pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json)
Hash identifier:          7XT7iHqnkZVorWFaIgW4XpIi/kfhNFbV+WW+1nnCOGA=
Subject key identifier:   5B:DB:E7:BB:2B:23:71:7B:41:5C:89:CC:0E:FF:D0:A8:19:7A:18:DA
Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF
Certificate issuer:       /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
Certificate serial:       0998
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
Manifest number:          0982
Signing time:             Sat 24 Jan 2026 19:30:04 +0000
Manifest this update:     Sat 24 Jan 2026 19:30:03 +0000
Manifest next update:     Sat 31 Jan 2026 19:30:03 +0000
Files and hashes:         1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: h4JWJ5RMUnwyN2oX6VVeRBzhnVsN7rGsgzAY7T7Jt84=)
                          2: 31B2B528217811EEBACF3324C4F9AE02.roa (hash: qYcH8o+mgIEkOx3pGeKtDuFDXODm4W8utEiDwxXgwKU=)
                          3: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: JxYPfmW8Tav5SjQHIMJfNEwgSNWW1t6Utgf2ZPhePRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl
                          rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2456 (0x998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
        Validity
            Not Before: Jan 24 19:30:03 2026 GMT
            Not After : Jan 31 19:30:03 2026 GMT
        Subject: CN=69751dbc-6150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0e:63:d1:51:fc:0d:7d:2d:8d:1e:2d:a1:a7:
                    e8:75:e3:fb:88:eb:1e:2c:06:bd:54:22:b3:29:06:
                    84:36:75:f7:6c:9e:0b:f9:ed:af:2d:4c:86:0c:d3:
                    23:cf:d6:7c:d3:3d:d3:74:73:59:76:f5:1f:33:3b:
                    ff:00:cb:81:1f:d6:36:09:09:02:09:d7:9f:3e:80:
                    11:63:14:a7:f2:91:c8:18:ab:53:f6:9a:a7:49:18:
                    14:a9:da:ae:1f:c3:c9:da:85:b8:72:5b:0c:4a:a8:
                    92:8d:58:a0:4a:f3:46:d4:26:50:f2:1d:4f:c9:1c:
                    1b:0a:72:8a:ff:39:91:66:a3:a2:9a:75:55:69:70:
                    58:d1:6e:01:9d:08:13:9a:79:0c:76:67:d0:7a:95:
                    c9:a0:72:9d:12:ab:06:20:9f:45:4b:4a:05:da:4b:
                    2c:87:74:96:83:8b:23:52:a9:63:db:e6:44:c2:bd:
                    e2:59:57:bd:db:17:38:bc:27:4a:e5:a0:24:de:94:
                    ae:35:61:f8:1a:b0:60:49:7a:6f:fc:06:da:98:22:
                    b2:14:8c:77:63:b9:01:95:b6:0d:e2:b6:bb:8f:4f:
                    94:5a:56:4a:de:57:b9:de:cc:d0:56:d0:60:c6:bf:
                    ac:07:5a:a0:88:c9:66:f5:6a:1f:c3:ff:df:06:00:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DB:E7:BB:2B:23:71:7B:41:5C:89:CC:0E:FF:D0:A8:19:7A:18:DA
            X509v3 Authority Key Identifier:
                keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:6e:60:7d:1d:02:ad:e8:18:c5:d8:30:bb:28:52:a7:6c:
         95:f0:fe:a8:20:fd:41:17:e0:17:44:ce:23:4f:0b:30:1b:69:
         54:b1:da:8b:26:38:49:e7:fd:3f:39:ea:15:bf:59:f9:46:20:
         0a:b8:9f:1d:1f:d6:61:b3:bd:fd:26:ed:84:76:f1:f5:fc:f8:
         27:31:66:e6:71:69:dd:2f:c9:bf:f4:fe:23:6e:1d:5b:60:68:
         7a:98:30:7b:52:dc:05:2a:c5:59:b4:a0:6e:89:b3:87:3d:6e:
         b1:ea:a3:03:68:62:e8:f5:50:79:da:e0:59:9a:2c:3c:21:f7:
         5d:de:02:82:b9:20:91:4c:9e:5c:cc:22:56:30:2d:e7:c9:50:
         e3:19:3d:ef:d1:ca:0d:37:ee:52:bd:83:fe:4c:46:73:1d:69:
         07:36:63:67:4b:1e:47:25:6f:0d:65:39:1b:99:7b:e1:53:de:
         39:df:eb:d9:ce:a7:3f:89:dc:af:22:8c:5e:85:23:8b:a2:f9:
         bf:7b:56:96:83:9f:5e:3f:a6:5c:0f:b8:35:b4:fb:b0:f5:3e:
         4c:3a:0a:69:15:2f:76:f9:74:fd:85:ef:8b:89:c4:d5:e9:62:
         f3:ee:eb:3b:df:c0:b2:32:c3:d4:3c:56:de:dd:0f:9f:75:85:
         2b:6d:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:48:05 2026 by rpki-client