This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
File:                     B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft (raw, json)
Hash identifier:          EGCuLJYl7EukZb002+Lm91mQae7IgJ1qwynzYlm4nBM=
Subject key identifier:   8B:5C:84:C5:F8:55:67:E1:F3:39:05:4B:3E:CC:5D:81:21:1A:13:ED
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Certificate issuer:       /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial:       0538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
Manifest number:          051A
Signing time:             Sat 24 Jan 2026 22:55:12 +0000
Manifest this update:     Sat 24 Jan 2026 22:55:11 +0000
Manifest next update:     Sat 31 Jan 2026 22:55:11 +0000
Files and hashes:         1: B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl (hash: 64ICtGy9uJKpLZO5SffUd7wz2X/msdgGV11VWHnQkII=)
                          2: 6F155A6E144F11EE86CD7A23C4F9AE02.roa (hash: 7MHNN2Up+JQlmL9PfXZUbt6WAaOYLkEdHWerz3QOkN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
                          rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B443, serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
        Validity
            Not Before: Jan 24 22:55:11 2026 GMT
            Not After : Jan 31 22:55:11 2026 GMT
        Subject: CN=69754dd0-a5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:88:f1:5b:e9:12:e8:36:36:a3:3b:5c:6d:
                    6d:44:bd:24:40:ba:29:41:81:f3:bb:13:1f:22:37:
                    14:a1:8e:fe:03:e6:95:b1:88:38:79:1e:bb:96:bb:
                    87:9e:ce:63:df:b6:11:fe:45:ac:15:4f:2e:b6:2f:
                    39:1b:2d:31:c4:8d:7a:f1:cc:1a:78:00:42:48:51:
                    4c:ca:cf:83:04:d3:58:de:bb:06:d3:f4:70:0a:5c:
                    e9:41:a0:f0:a5:f3:b2:5f:77:04:ef:70:a9:b1:35:
                    ed:10:e6:8e:cd:45:07:91:d5:39:76:e5:c2:41:8f:
                    aa:11:9e:19:5c:0d:ce:36:8f:ee:86:80:6c:5c:f3:
                    77:8b:e7:eb:d0:3b:95:c9:81:85:fd:f6:1a:df:fd:
                    d2:79:8a:b2:f9:a1:37:7c:fd:98:4b:0a:7a:b2:9a:
                    a7:3e:03:6a:01:2f:c9:73:e3:5a:71:72:bc:2b:d1:
                    8c:a3:09:25:42:fe:4c:3c:b5:a8:ce:e0:d9:ac:cc:
                    80:57:55:93:b0:66:be:d1:9e:17:2c:25:83:38:1a:
                    21:a2:81:21:e0:25:33:f5:58:cf:af:e9:0b:74:21:
                    22:68:8c:e3:a0:eb:36:56:da:c0:40:b9:f4:ed:6b:
                    f1:cd:21:25:96:64:92:7a:f6:22:1a:ea:9e:77:b7:
                    5a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5C:84:C5:F8:55:67:E1:F3:39:05:4B:3E:CC:5D:81:21:1A:13:ED
            X509v3 Authority Key Identifier:
                keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:df:6d:8d:35:4b:b7:9f:e1:f6:18:14:13:b5:4b:03:14:00:
         33:99:a6:15:3b:e0:4b:8b:db:61:3e:f7:12:ac:a1:0c:e4:b0:
         fc:2f:4c:78:b0:fc:cd:ce:ac:3e:99:4a:f1:44:01:a8:62:fd:
         ae:4c:c5:ed:a5:b5:d8:e6:af:1c:c0:cd:99:d3:c7:e4:d4:27:
         be:25:07:4b:b2:4c:7d:a6:2e:34:81:c7:eb:6f:f3:68:11:80:
         07:00:24:a9:5b:aa:d1:19:e5:c1:8a:2e:4d:63:53:64:44:9c:
         b1:64:77:c1:c5:26:c1:21:11:e9:24:69:c2:ce:90:34:7d:2a:
         c4:7b:9c:0b:9e:8c:8b:72:ae:77:d2:c5:78:fe:53:8e:5c:b7:
         4d:b4:e3:96:9d:8d:71:92:2a:78:e5:fa:25:21:f9:27:2c:89:
         d8:f1:5f:c5:64:7c:92:95:eb:b4:09:a3:29:dc:ad:be:20:6f:
         1f:2a:4e:52:bd:eb:74:ae:ba:ae:e1:50:d5:e5:ca:a1:f0:64:
         51:43:72:d0:10:57:d6:49:05:d4:53:62:64:40:7c:91:cc:c2:
         24:6b:e2:69:d5:0f:86:b8:96:bc:19:7a:a1:cd:02:d0:a1:09:
         89:05:3d:9e:9a:2e:be:3c:6b:22:12:05:53:c4:09:c6:70:d1:
         27:92:60:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:39 2026 by rpki-client