This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
File:                     u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json)
Hash identifier:          J6s2UShXZK0DhuA/XUere9wEIyPCZvRRXuZJZWGmJHA=
Subject key identifier:   91:5A:6B:FB:6F:3E:66:6A:33:7C:05:4F:45:56:DE:C6:3E:FE:98:3D
Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
Certificate issuer:       /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
Manifest number:          B4
Signing time:             Sun 25 Jan 2026 05:14:08 +0000
Manifest this update:     Sun 25 Jan 2026 05:14:08 +0000
Manifest next update:     Sun 01 Feb 2026 05:14:08 +0000
Files and hashes:         1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: DcMh8B2Fzna7r7Fc3IRAWkF/aoI2ndw3mgkvkycCdg8=)
                          2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
        Validity
            Not Before: Jan 25 05:14:08 2026 GMT
            Not After : Feb  1 05:14:08 2026 GMT
        Subject: CN=6975a6a0-9bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:29:e8:20:be:ea:c8:a9:8c:2b:6f:e1:7a:
                    02:c4:b1:7b:5c:09:d2:0b:17:21:bd:df:84:f7:fb:
                    29:bf:bb:77:c2:9e:3b:df:4b:b9:ae:fb:29:5a:a2:
                    49:26:d3:35:68:be:52:2b:a0:f7:b9:3e:ac:eb:32:
                    2a:23:36:29:f9:09:7a:4e:d5:63:35:27:0c:b1:a2:
                    66:e0:7f:f0:1c:8e:64:79:f4:72:b7:17:b4:5a:4d:
                    16:57:05:89:5b:14:da:6b:25:14:81:93:45:e2:c9:
                    35:66:1d:9b:f3:8f:be:92:ac:76:74:31:ad:42:a6:
                    70:36:25:f9:42:fc:77:1c:dc:fc:a0:56:36:77:d7:
                    99:24:ee:13:43:aa:32:96:57:3a:40:1b:79:78:b6:
                    01:91:cf:57:73:d2:a2:1c:c9:05:09:ba:23:8a:3a:
                    30:f2:98:79:d1:cc:fb:08:23:3e:bc:13:32:8a:35:
                    de:cf:b8:45:e5:35:d4:5b:24:62:74:df:ae:af:db:
                    27:b2:e0:b0:fe:f7:f2:4c:5b:0e:43:27:10:d2:a5:
                    bd:3e:01:d7:7b:7f:00:02:aa:ff:f7:b5:27:46:4b:
                    61:6e:9f:66:09:ea:62:f0:62:40:e7:99:53:d1:08:
                    b9:61:d0:08:37:2a:ed:3e:f0:a1:da:bf:8c:39:e4:
                    1d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5A:6B:FB:6F:3E:66:6A:33:7C:05:4F:45:56:DE:C6:3E:FE:98:3D
            X509v3 Authority Key Identifier:
                keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ab:d1:42:04:1f:45:42:23:f8:01:d1:a4:c3:aa:68:20:47:
         4b:6a:65:14:0f:9e:2a:b9:cf:c6:39:89:2f:fc:10:3c:d9:b2:
         19:a7:c6:6d:93:12:41:37:8e:23:14:be:1c:d1:ac:3f:f2:79:
         92:80:f2:52:6a:bf:eb:5a:e9:72:9a:c3:61:30:3a:ab:c0:12:
         e6:7b:ee:7f:20:65:cc:a6:c1:27:56:12:32:2a:ca:21:53:fb:
         cf:49:f8:f6:f2:51:69:98:3e:87:16:b5:1d:c5:d2:36:8f:54:
         70:6a:b1:50:eb:73:59:1d:53:56:56:31:5d:bc:38:53:65:ee:
         78:ff:78:f7:9a:07:04:5c:75:04:b7:da:a5:b0:2b:07:e9:73:
         e5:33:71:d6:d4:6b:73:4e:b2:5c:cf:2d:90:4e:1c:fc:dd:15:
         a4:14:3d:f1:37:e0:9a:de:90:24:41:c9:84:46:52:ad:1f:c1:
         ce:db:e5:56:48:17:f0:a9:21:c9:f0:79:05:41:15:07:00:8b:
         ca:66:95:5d:ff:8d:7d:90:0d:75:e3:67:5b:2a:48:66:08:15:
         0b:6b:17:be:a2:5b:60:a3:dd:42:c9:a6:10:0f:f2:1a:fe:b5:
         75:f7:46:2b:b0:8a:51:3d:f6:83:cc:57:36:10:fc:b3:9e:61:
         46:f5:24:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:46:14 2026 by rpki-client