This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
File:                     bjdXKUWj6XupZFmfpVXE20JjwOQ.mft (raw, json)
Hash identifier:          vN13Tn/dHgKsASaBns+2xj1sEgl90IR7cXszvQaXBp0=
Subject key identifier:   57:66:B6:41:72:93:B4:F1:E4:1A:85:54:25:F2:FC:E2:9D:85:31:08
Authority key identifier: 6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4
Certificate issuer:       /CN=A9176302/serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
Manifest number:          85
Signing time:             Sun 25 Jan 2026 03:53:23 +0000
Manifest this update:     Sun 25 Jan 2026 03:53:22 +0000
Manifest next update:     Sun 01 Feb 2026 03:53:22 +0000
Files and hashes:         1: bjdXKUWj6XupZFmfpVXE20JjwOQ.crl (hash: zuLMbKvVTLoekwtakb6OXC9LFQstnOd2SEQcz90aniA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl
                          rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176302, serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4
        Validity
            Not Before: Jan 25 03:53:22 2026 GMT
            Not After : Feb  1 03:53:22 2026 GMT
        Subject: CN=697593b2-8e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:c2:50:64:96:62:59:98:9c:82:50:65:49:
                    57:ee:f6:f3:bd:3b:f7:60:aa:63:3f:44:96:6e:4d:
                    19:f6:69:ed:61:b1:9e:35:12:89:f3:94:86:cb:23:
                    22:b5:a3:12:95:bb:c9:86:2d:7b:4c:82:1c:e3:07:
                    ef:24:eb:a3:55:30:0e:24:ef:65:12:05:4f:ee:d2:
                    ca:de:04:d0:d0:7b:d2:29:ce:92:bc:66:6f:c8:29:
                    97:2b:c7:ce:06:d5:97:32:de:36:81:2f:8b:05:26:
                    63:b8:15:b0:16:84:4c:07:3a:ef:8e:8c:e9:6b:33:
                    c9:c2:44:6c:e9:a1:8a:68:16:0d:6c:ae:8e:d6:16:
                    8c:99:e6:bd:81:83:44:ee:e2:8c:5a:62:90:3a:2c:
                    7e:86:a8:e6:a3:b5:87:83:b2:ca:27:36:7a:58:9b:
                    32:78:cc:73:3f:e0:e5:77:02:d7:60:37:4d:17:2f:
                    ef:92:ae:74:3f:b5:e0:18:f7:27:b9:25:3f:af:8c:
                    26:3c:de:39:55:9c:4a:f0:73:1a:0f:40:b4:b1:14:
                    d6:51:4a:e2:fc:fe:8e:16:e2:f3:f1:fd:be:ec:05:
                    f4:46:14:e4:f9:11:34:6e:af:88:c5:1c:22:c9:d8:
                    2b:bc:d5:fe:51:53:44:3e:37:c1:aa:f3:01:92:93:
                    2b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:66:B6:41:72:93:B4:F1:E4:1A:85:54:25:F2:FC:E2:9D:85:31:08
            X509v3 Authority Key Identifier:
                keyid:6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:84:5d:92:04:66:28:b2:be:b3:d5:0c:7b:57:92:cd:60:d8:
         d0:95:f6:1c:52:2c:72:a2:0e:43:5f:2c:82:b9:73:c0:f4:47:
         67:6f:44:87:cb:c2:27:c2:b8:f9:a1:3e:5b:e3:ee:57:d2:68:
         6a:03:ea:c8:51:b9:d8:b0:c2:15:b8:10:e9:16:ef:37:f2:b0:
         46:52:cb:7c:3f:23:74:a8:1e:f2:aa:55:e5:9f:b3:17:fd:e1:
         70:c4:4f:a9:10:d8:8f:c8:7d:e8:8b:f4:f3:2a:50:48:42:49:
         17:a2:a2:4c:c5:c1:31:a5:55:23:8f:b7:d5:cf:04:03:72:e8:
         90:3c:1d:aa:ff:a9:79:75:2e:e0:6e:f5:7c:89:f1:9e:06:7d:
         b3:7e:6e:28:cd:96:d1:a7:f5:63:9d:45:c3:a2:0d:91:3a:3b:
         fa:b0:5d:84:fc:47:42:f5:13:6d:4a:2d:4d:6a:d4:72:90:fc:
         b2:5c:01:7d:ed:98:21:1e:36:25:ee:da:47:7f:a9:e7:2e:ac:
         92:19:e7:67:9f:f8:59:2c:0b:97:59:4c:03:04:34:95:40:52:
         8b:d8:6f:d7:0a:2e:d5:cf:9e:fb:62:1f:15:2f:bb:bb:b7:7d:
         1e:82:9d:a5:16:8b:65:c4:96:8d:14:31:06:56:ec:2e:58:e2:
         ed:92:74:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:01:31 2026 by rpki-client