This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
File:                     BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft (raw, json)
Hash identifier:          F6TnadQYhjk0/kmDLp3cTI7v6KCA9SG9wGpy1R/F8WI=
Subject key identifier:   71:16:DB:2D:65:E6:02:A8:51:54:E4:DC:7C:39:89:E8:9A:87:1D:77
Authority key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5
Certificate issuer:       /CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
Certificate serial:       3501
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
Manifest number:          3501
Signing time:             Sat 24 Jan 2026 14:34:44 +0000
Manifest this update:     Sat 24 Jan 2026 14:34:44 +0000
Manifest next update:     Sat 31 Jan 2026 14:34:44 +0000
Files and hashes:         1: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl (hash: u6IcgDWr/6B6EwcHz1GF6e3fNtzy1SAvj2+CAXcki88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl
                          rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13569 (0x3501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178D35, serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
        Validity
            Not Before: Jan 24 14:34:44 2026 GMT
            Not After : Jan 31 14:34:44 2026 GMT
        Subject: CN=6974d884-e873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:6e:aa:1b:2e:95:fc:16:09:ec:f5:60:88:
                    f5:6c:9d:23:fc:64:42:f3:33:19:4d:00:46:fc:e3:
                    d9:e1:0b:e5:fa:3c:db:35:0e:40:fe:b7:04:4e:54:
                    72:00:9b:9f:ea:25:a3:13:66:23:aa:0a:ff:74:d5:
                    01:a1:04:06:59:cc:ab:c1:37:2b:be:be:da:3a:9f:
                    25:c6:b6:0e:a0:e1:02:a6:d9:03:6f:19:72:a2:4b:
                    45:8d:41:06:18:b2:34:ef:7e:0c:dd:60:29:58:15:
                    66:06:8b:d3:ee:21:b3:ce:8a:e1:5d:14:ff:5c:1b:
                    32:2d:4c:13:6a:57:bd:59:45:6d:20:c4:57:03:75:
                    02:74:a3:eb:95:1f:20:9e:b9:ce:91:ad:d0:81:9e:
                    36:3d:eb:63:ff:01:cf:d6:76:d1:a2:cd:1e:08:72:
                    b7:82:f2:84:bb:a7:f1:e8:60:2b:b2:26:5e:8d:9f:
                    bb:73:40:3e:87:78:d8:fb:38:f5:97:7a:82:24:94:
                    7b:8f:3f:c7:ca:62:55:bc:45:b8:b6:a9:15:63:3f:
                    8f:6a:f8:62:07:2e:5b:0d:d4:bd:f1:64:60:0e:f9:
                    55:b9:23:2c:7a:3f:be:b7:bc:7f:9a:b4:09:5b:2b:
                    77:83:bf:19:d3:f1:b8:49:71:e6:70:66:8d:9e:e6:
                    9a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:16:DB:2D:65:E6:02:A8:51:54:E4:DC:7C:39:89:E8:9A:87:1D:77
            X509v3 Authority Key Identifier:
                keyid:06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:26:b4:28:31:39:86:ab:ba:7e:91:b1:96:ef:7b:b0:57:de:
         9c:b4:52:d9:13:c2:f6:51:8f:67:fb:38:1b:21:48:8b:49:95:
         96:73:57:ec:2a:3c:7c:9a:8b:2f:4d:78:0a:9d:e9:f1:a8:3a:
         a5:4a:28:ea:10:d7:77:78:3f:9a:15:5c:96:d1:5e:61:49:0d:
         d6:45:b3:4a:91:2c:c6:bd:3b:17:a2:6d:07:af:0e:6d:a6:ec:
         0b:47:a5:b3:11:a4:32:e6:a4:bc:bd:60:b0:47:db:50:71:4a:
         4d:a0:c8:e2:05:b3:ab:65:5b:b6:30:7f:0c:97:04:c2:77:29:
         e0:3c:19:d5:82:9c:a5:3a:e1:fa:2c:19:8e:12:3d:4d:06:36:
         cd:4d:67:94:d7:03:28:17:3c:cf:2f:eb:f9:ed:d1:2f:f4:ac:
         dd:26:1e:98:ec:1d:f5:57:3f:76:79:61:28:5d:1c:7f:49:43:
         39:51:70:66:7f:cc:3d:77:f0:22:2f:9f:59:d5:ef:32:9d:b0:
         32:7e:db:34:b4:11:8e:c1:dd:51:d0:4a:f3:f4:38:6b:c7:58:
         c5:0b:b1:e2:39:48:97:ca:3e:bf:3b:fa:0f:17:6e:1e:6f:01:
         1b:ee:b9:46:9f:d5:49:63:9b:18:88:b0:ac:d2:b4:b2:d9:50:
         7e:96:77:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:29 2026 by rpki-client