This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
File:                     BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json)
Hash identifier:          jVgvtDyTmbnoN9+DsRdPEZ6TRxZ98QX60K3idFYplEw=
Subject key identifier:   9F:86:0F:F1:8C:77:55:82:5F:CC:7D:26:7B:DD:4A:76:AF:35:BE:8F
Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
Certificate issuer:       /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
Manifest number:          0138
Signing time:             Fri 23 Jan 2026 04:15:21 +0000
Manifest this update:     Fri 23 Jan 2026 04:15:21 +0000
Manifest next update:     Fri 30 Jan 2026 04:15:21 +0000
Files and hashes:         1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: Z2FFSdciFbc+Xkz7UonMDyHFRLSKyWMFgAH1E/PG3hY=)
                          2: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (hash: vsSxWPv3xEP3XML1AoQ7xUsTBNpQ7V7GqfC2jYKkI8o=)
                          3: B0D3DA64107B11F097717C77C4F9AE02.roa (hash: L5Ep8B/7RUWRgMjdNe40xAsqxONjhV0tjlDFWICACUA=)
                          4: E0CDA376596E11F0B19AF24BC4F9AE02.roa (hash: FJSeI7xu3Suas48K0kKSfoAbigbE/yhUfYxCE1a9B6A=)
                          5: FA414880107B11F09A6AF277C4F9AE02.roa (hash: Wy+W7yleCCjdnmkiTTzTQjidmhHRdCgVI8wgnocThQA=)
                          6: A8F83B2E202911F08EABDC87C4F9AE02.roa (hash: CPH/9LGGv2Qb1QUYpywLXh/H9jmUzaUp17YNcG9enxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
        Validity
            Not Before: Jan 23 04:15:21 2026 GMT
            Not After : Jan 30 04:15:21 2026 GMT
        Subject: CN=6972f5d9-b002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:ac:19:7b:c0:5f:69:c0:a9:7c:44:8f:c0:
                    04:55:e0:68:9f:80:80:3f:36:f0:d1:47:f8:7c:7f:
                    a5:a0:53:60:dc:ef:86:1f:ba:64:3a:96:0a:92:5c:
                    80:eb:52:b8:76:f0:ce:1d:7b:5d:1f:24:22:04:29:
                    db:5d:43:34:57:0d:85:9d:43:9c:c9:ac:9f:c9:29:
                    35:27:0c:73:64:df:61:d7:70:29:39:a9:b6:dc:32:
                    71:24:22:25:ae:ef:77:b8:1a:96:db:14:bb:a5:19:
                    69:91:08:e4:09:23:57:89:72:68:cc:e6:65:8f:56:
                    f8:37:2d:6b:ed:36:8e:20:72:b2:ac:42:ad:ed:c3:
                    17:fe:ba:70:e6:e1:49:28:6a:5c:0c:c4:5f:04:96:
                    75:fe:6e:ed:ed:ad:89:0a:ff:bb:e5:f3:dd:47:b2:
                    1d:e5:56:36:e9:06:7c:8c:38:ec:23:4d:8c:20:55:
                    27:a9:b4:3b:99:ff:e8:f5:e1:d8:da:c4:66:04:64:
                    ae:52:ca:70:0b:dd:e3:f9:5e:a9:e6:81:8f:ef:c4:
                    78:26:c5:9f:22:a5:ae:1b:2c:51:54:8c:e7:9e:90:
                    fc:fb:dc:42:f8:92:91:b4:68:56:cc:89:de:a3:e4:
                    ad:c0:1d:08:83:c8:ab:0d:46:e9:86:47:4d:e0:f4:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:86:0F:F1:8C:77:55:82:5F:CC:7D:26:7B:DD:4A:76:AF:35:BE:8F
            X509v3 Authority Key Identifier:
                keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:41:42:2f:18:7f:87:cd:18:cd:cd:2e:a3:fc:42:58:1a:65:
         5f:17:4c:53:6f:3d:d4:df:76:b5:ab:21:9c:89:0b:1c:2c:35:
         e2:c0:20:ea:cf:93:c2:d5:c0:67:65:1f:b6:5f:b8:89:96:9d:
         ed:81:44:b4:7c:90:7a:d2:54:73:bd:02:e6:50:9c:ce:d5:65:
         8f:35:fb:99:60:6b:04:6e:74:26:e1:6a:ab:7e:f6:65:f6:91:
         db:85:f9:aa:f5:c7:ed:1c:39:3d:45:07:b2:02:25:16:f2:52:
         51:c8:56:f7:a1:be:20:1a:fa:ea:7c:43:8d:31:d6:c0:47:8d:
         7c:5c:03:96:e0:65:c0:f2:89:9f:7f:1e:98:93:b2:4a:1c:29:
         e9:a7:e7:e3:67:6e:c2:fc:48:a9:7a:2a:75:af:91:a4:ec:4b:
         0b:11:fb:da:01:1a:c8:58:3b:c1:21:be:6e:82:a9:55:a6:4d:
         1c:a3:90:73:27:1d:da:20:65:6e:e0:86:c7:4e:82:d0:64:04:
         3d:b0:7b:5d:6b:d8:1e:e0:3a:dc:40:2e:42:d2:21:37:7e:94:
         dc:f6:d6:e4:81:23:f4:86:67:25:87:9e:16:5d:86:26:bd:fa:
         88:25:fb:f2:a8:59:7f:d8:b5:48:e8:28:3c:d5:34:af:06:4d:
         ad:4b:37:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:34 2026 by rpki-client