This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft
File:                     Bzzm268iYrP6YRXW_6ezNCFe-g0.mft (raw, json)
Hash identifier:          2ATMJfBQEC5UvJ4T5udCrjo2yyvjgVNJh29esfAqETw=
Subject key identifier:   FF:D5:E2:EC:FC:29:BA:26:1C:45:FF:9C:21:F6:15:AA:0D:16:12:AA
Authority key identifier: 07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D
Certificate issuer:       /CN=A91859C2/serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D
Certificate serial:       069A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft
Manifest number:          0694
Signing time:             Sat 24 Jan 2026 21:44:30 +0000
Manifest this update:     Sat 24 Jan 2026 21:44:29 +0000
Manifest next update:     Sat 31 Jan 2026 21:44:29 +0000
Files and hashes:         1: Bzzm268iYrP6YRXW_6ezNCFe-g0.crl (hash: J2boQskqS0ceXBHkWwgSD8xnrIwdd2LZvsmRBhlbq30=)
                          2: A80223709F4411EB92132051C4F9AE02.roa (hash: x3MhCffNjPE2g6AmezXK16941rD0tDaIk9FU7i8nfrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl
                          rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91859C2, serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D
        Validity
            Not Before: Jan 24 21:44:29 2026 GMT
            Not After : Jan 31 21:44:29 2026 GMT
        Subject: CN=69753d3e-4e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:5d:37:ea:f9:06:39:84:d4:a1:ab:4c:ec:
                    49:62:a8:eb:1e:47:b7:dc:2a:04:77:84:d0:3d:30:
                    09:a4:f1:11:1a:36:91:af:8a:a8:82:0f:59:de:62:
                    6e:e2:25:ab:07:94:ba:9f:57:f4:5c:d8:c2:74:9b:
                    78:3d:c5:37:ba:ec:2f:f1:55:bd:d1:a0:53:5d:e5:
                    d7:3f:3f:64:b0:6d:cc:20:a5:a5:7f:ff:e0:ab:e8:
                    17:f7:6c:d1:85:10:97:63:3b:03:77:c4:e0:a6:14:
                    b0:d1:1f:16:e2:36:72:bb:e2:9b:31:87:66:1e:03:
                    27:4e:4b:44:3d:ec:93:2b:fa:19:e2:fd:fd:f8:74:
                    69:59:88:59:23:b6:fc:41:5b:fe:d3:9e:ef:59:5c:
                    f0:e7:53:6c:ee:68:af:a0:9f:a4:60:f2:08:52:8f:
                    6e:f7:25:28:39:aa:99:db:82:57:df:26:8f:22:37:
                    c7:b9:4f:89:c9:1d:70:de:09:92:be:20:df:34:86:
                    c1:e7:60:5a:c1:2c:bb:fa:32:b4:fa:63:df:f2:05:
                    bd:65:08:70:e5:ae:dd:44:c1:0f:40:1c:31:c8:85:
                    f2:7e:b1:75:a7:ec:18:b0:92:6b:72:3c:2c:e9:88:
                    5e:b7:2a:f7:16:0f:5f:ad:2a:dc:f4:e2:67:f0:5f:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D5:E2:EC:FC:29:BA:26:1C:45:FF:9C:21:F6:15:AA:0D:16:12:AA
            X509v3 Authority Key Identifier:
                keyid:07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f7:4e:a2:61:f7:0c:dc:22:8d:39:f9:78:89:98:67:cd:98:
         cd:a8:4d:99:71:c1:5e:f9:a8:19:43:43:70:3d:4a:6a:09:53:
         ff:72:24:be:8e:99:88:e0:19:2f:62:47:e2:ac:7d:b2:64:c7:
         85:1f:bb:83:a2:33:07:bc:29:a3:99:fd:02:71:e9:2d:25:5a:
         e2:78:b2:c1:4a:f7:38:fa:37:88:43:5a:16:7f:38:14:e5:ae:
         b5:80:78:5e:75:e8:c2:6e:f4:25:50:01:80:7a:70:dc:83:d1:
         e4:a8:ce:03:eb:df:b1:44:a6:35:7d:d7:e7:d3:90:9e:f8:12:
         a6:a9:e7:63:71:43:46:6f:92:36:b6:89:0c:57:00:f1:55:0d:
         2a:94:b5:22:99:4e:9b:00:1a:bb:0f:e7:be:b0:ae:3f:b8:83:
         f3:ec:f7:79:26:fb:9b:61:c9:f4:b9:2a:9f:34:2a:ae:16:a0:
         7e:ec:76:00:9e:ff:e7:fd:c0:29:7b:6d:16:a9:84:6b:b5:1d:
         45:3a:ba:f6:34:58:b7:26:39:2e:bb:4d:0e:e3:9e:c9:da:f1:
         fc:e9:13:5f:fc:fb:fe:97:bd:43:b4:20:5d:56:b7:81:bd:03:
         be:0e:b8:7e:a4:76:ab:ee:ec:76:f6:e3:7b:42:49:a4:c5:45:
         84:d4:0d:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU5QzIxMTAvBgNVBAUTKDA3M0NFNkRCQUYyMjYyQjNGQTYxMTVENkZGQTdCMzM0
MjE1RUZBMEQwHhcNMjYwMTI0MjE0NDI5WhcNMjYwMTMxMjE0NDI5WjAYMRYwFAYD
VQQDDA02OTc1M2QzZS00ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyihdN+r5BjmE1KGrTOxJYqjrHke33CoEd4TQPTAJpPERGjaRr4qogg9Z3mJu
4iWrB5S6n1f0XNjCdJt4PcU3uuwv8VW90aBTXeXXPz9ksG3MIKWlf//gq+gX92zR
hRCXYzsDd8TgphSw0R8W4jZyu+KbMYdmHgMnTktEPeyTK/oZ4v39+HRpWYhZI7b8
QVv+057vWVzw51Ns7mivoJ+kYPIIUo9u9yUoOaqZ24JX3yaPIjfHuU+JyR1w3gmS
viDfNIbB52BawSy7+jK0+mPf8gW9ZQhw5a7dRMEPQBwxyIXyfrF1p+wYsJJrcjws
6Yhetyr3Fg9frSrc9OJn8F91nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/V4uz8
KbomHEX/nCH2FaoNFhKqMB8GA1UdIwQYMBaAFAc85tuvImKz+mEV1v+nszQhXvoN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlDMi9FN0MwMjIzRTlG
NDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVlyUDZZUlhXXzZlek5DRmUt
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J6em0yNjhpWXJQNllSWFdfNmV6TkNGZS1nMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTlDMi9FN0MwMjIzRTlGNDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVly
UDZZUlhXXzZlek5DRmUtZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCO906iYfcM3CKNOfl4iZhnzZjNqE2ZccFe+agZQ0NwPUpqCVP/ciS+
jpmI4BkvYkfirH2yZMeFH7uDojMHvCmjmf0CcektJVrieLLBSvc4+jeIQ1oWfzgU
5a61gHhedejCbvQlUAGAenDcg9HkqM4D69+xRKY1fdfn05Ce+BKmqedjcUNGb5I2
tokMVwDxVQ0qlLUimU6bABq7D+e+sK4/uIPz7Pd5JvubYcn0uSqfNCquFqB+7HYA
nv/n/cApe20WqYRrtR1FOrr2NFi3Jjkuu00O457J2vH86RNf/Pv+l71DtCBdVreB
vQO+Drh+pHar7ux29uN7QkmkxUWE1A1P
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:16 2026 by rpki-client