This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.mft
File:                     BujrLhzBcw8rcm9PAAhEw0U_qlk.mft (raw, json)
Hash identifier:          7B6HFUr5cfAp7vNhXznzN6IvCd1hDGWI1oZooGcEAsY=
Subject key identifier:   52:F6:07:B5:14:B9:73:F8:EE:16:62:CA:3E:B6:31:B6:FE:47:38:C6
Authority key identifier: 06:E8:EB:2E:1C:C1:73:0F:2B:72:6F:4F:00:08:44:C3:45:3F:AA:59
Certificate issuer:       /CN=A9177B64/serialNumber=06E8EB2E1CC1730F2B726F4F000844C3453FAA59
Certificate serial:       0B2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BujrLhzBcw8rcm9PAAhEw0U_qlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.mft
Manifest number:          0B1F
Signing time:             Sat 24 Jan 2026 18:49:37 +0000
Manifest this update:     Sat 24 Jan 2026 18:49:36 +0000
Manifest next update:     Sat 31 Jan 2026 18:49:36 +0000
Files and hashes:         1: BujrLhzBcw8rcm9PAAhEw0U_qlk.crl (hash: 4PeKFJoFLsDhy0VVFU3U9T/aY7SwmgzNirDmDBJS/FY=)
                          2: D490B9E456BE11EAA979861EC4F9AE02.roa (hash: WqlB3AyhDDJWUItXT29SZAzjz5ieM7KBaQAcsyIppRw=)
                          3: D5248EE456BE11EAA979861EC4F9AE02.roa (hash: 3WC7Ax7r9pRLRqTKxZ8M8Papxi0g4q9TQj02VGvjxfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.crl
                          rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BujrLhzBcw8rcm9PAAhEw0U_qlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2863 (0xb2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177B64, serialNumber=06E8EB2E1CC1730F2B726F4F000844C3453FAA59
        Validity
            Not Before: Jan 24 18:49:36 2026 GMT
            Not After : Jan 31 18:49:36 2026 GMT
        Subject: CN=69751440-b70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:84:8a:d0:57:89:5d:9f:10:45:a7:6a:f1:
                    ad:ff:45:80:25:39:e5:d6:e7:fa:82:e4:e8:36:03:
                    00:2a:6e:27:5b:4e:8c:5e:08:95:31:0d:fe:73:73:
                    d5:c2:95:71:e4:e8:df:9c:75:6f:84:54:a6:9b:17:
                    3f:f2:db:c2:85:4e:80:3a:cc:92:ac:9d:ba:44:da:
                    d4:5c:be:ce:e4:aa:57:9a:aa:e2:d7:02:7a:69:45:
                    ea:97:6a:ea:9e:b0:de:50:6f:af:1c:dd:1d:a4:52:
                    60:52:3c:f9:02:1d:30:b6:57:60:04:1d:54:51:cf:
                    26:c9:6c:c3:47:9b:4f:33:5b:d9:2e:9d:e4:14:03:
                    7e:7e:01:f6:8a:4e:c1:ac:10:23:cd:5d:ba:fc:5a:
                    b9:f0:aa:a9:f6:c4:8a:69:4e:22:69:21:88:88:31:
                    d5:bf:2a:5d:2e:1d:67:cb:65:b4:41:22:1f:04:de:
                    4b:4b:d9:d4:e7:54:93:7d:cc:26:c0:56:c0:b4:86:
                    31:ff:38:39:ca:a2:ac:15:ed:95:d2:14:f7:af:a4:
                    c1:42:22:5a:97:9e:1a:27:6d:d8:fd:33:f7:f2:c3:
                    9b:27:6d:93:db:21:ae:22:a9:b9:b0:cb:28:4e:2e:
                    5d:81:70:90:c1:54:ab:ea:46:5b:ec:e8:ce:fa:52:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F6:07:B5:14:B9:73:F8:EE:16:62:CA:3E:B6:31:B6:FE:47:38:C6
            X509v3 Authority Key Identifier:
                keyid:06:E8:EB:2E:1C:C1:73:0F:2B:72:6F:4F:00:08:44:C3:45:3F:AA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BujrLhzBcw8rcm9PAAhEw0U_qlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:09:61:60:5c:3e:c0:b7:be:ff:ed:03:c0:59:89:5e:eb:e5:
         cf:a6:16:e9:cd:28:af:83:06:b5:68:10:dc:e1:c8:ab:2f:9c:
         9d:a9:c1:c6:1c:3f:33:22:92:e8:fa:07:a2:91:ab:b9:81:f5:
         2e:47:b1:ad:07:21:13:58:53:91:c9:0c:57:bb:15:99:e1:c3:
         3e:95:7e:a9:55:cf:4a:9f:b8:a1:79:1a:5a:5e:b6:1b:dd:0f:
         93:2b:ab:51:60:09:b6:83:c0:14:87:47:49:c4:cc:03:43:d4:
         88:31:72:a1:18:fc:62:86:b8:97:5f:e5:c8:3d:7f:20:76:df:
         e4:88:13:fb:e8:da:8b:66:26:5c:07:b2:54:82:1b:6c:2e:db:
         4c:97:3f:b8:85:2d:ee:e1:5e:7a:4c:ac:ee:c4:88:c6:da:22:
         30:f3:6b:d9:aa:35:43:b3:37:ab:87:95:1b:fc:cb:77:47:cd:
         b3:42:4d:30:4d:ae:e7:02:31:b5:2e:d1:34:52:c2:09:11:65:
         12:1c:88:37:4c:0d:26:08:d4:8a:b4:67:ba:6f:db:de:cb:ae:
         9a:ec:ff:12:63:c6:00:99:83:1b:3f:fc:8e:e1:1b:89:df:28:
         4c:e1:c5:a9:da:3d:a8:12:67:6f:49:2d:f4:c6:f7:2a:15:1a:
         43:92:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:16:06 2026 by rpki-client