This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
File:                     bpbq_I_Ooaf_MezeClBm17HDxHo.mft (raw, json)
Hash identifier:          V71S9hc2Of+PzAROOglIYLyfdL1AkOTkEQauqw/e0MA=
Subject key identifier:   05:FE:DF:7D:1E:9D:1A:8C:19:10:E9:10:DF:83:C8:BF:6B:22:08:30
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Certificate issuer:       /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
Manifest number:          0A
Signing time:             Fri 23 Jan 2026 07:05:40 +0000
Manifest this update:     Fri 23 Jan 2026 07:05:39 +0000
Manifest next update:     Fri 30 Jan 2026 07:05:39 +0000
Files and hashes:         1: bpbq_I_Ooaf_MezeClBm17HDxHo.crl (hash: c/j+EizrLTGygFhBiPOuazOzW3AH/2BcBIiJE2AFjg0=)
                          2: F78ED0BAEBC911F0BD3A2F28686F56BC.roa (hash: T16pI9nQ5IEGjfViZejEMMbrzXbg1Lkkwe6XJbJEgSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
        Validity
            Not Before: Jan 23 07:05:39 2026 GMT
            Not After : Jan 30 07:05:39 2026 GMT
        Subject: CN=69731dc4-a9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:92:0e:ff:8a:50:f8:14:c1:cc:1a:19:51:
                    05:fb:78:b0:a2:38:f6:93:31:bb:7d:1b:07:c9:29:
                    9b:ea:18:8d:92:89:2c:bd:da:eb:08:a6:ff:78:0c:
                    73:a0:df:d0:fb:2a:dd:b8:0a:55:ef:bc:dc:1e:56:
                    92:c6:fa:ab:11:89:fc:d0:6c:67:b4:e5:2a:b1:f8:
                    a5:d5:94:a8:d0:73:b9:ba:6f:f9:fc:c9:eb:69:8d:
                    63:ff:3a:c5:b4:77:96:4d:3b:6a:c7:d1:71:36:76:
                    27:d2:44:60:0c:60:80:e2:14:af:16:fe:8d:6d:84:
                    fb:97:8b:fb:90:85:78:80:9c:00:f0:cf:ce:2b:68:
                    7b:df:29:6c:e6:b8:e1:ef:f6:f7:97:c8:1f:9d:48:
                    47:76:3c:63:68:c0:84:ee:11:0f:48:23:c7:11:0f:
                    e4:e5:bb:31:74:d9:75:d8:d8:2a:ec:54:36:31:e7:
                    34:d8:03:e5:0c:a2:a8:4c:83:06:bf:18:bb:63:dd:
                    4a:d0:80:36:f9:6c:d4:11:7d:6a:d8:db:3f:24:3c:
                    eb:38:88:84:77:76:de:65:52:06:2e:38:76:13:8e:
                    ca:ac:b9:d2:b0:7e:38:b4:19:49:1b:cd:34:2f:b0:
                    b5:b8:68:a3:17:77:75:b4:c6:0a:ad:cc:32:7f:cf:
                    2c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FE:DF:7D:1E:9D:1A:8C:19:10:E9:10:DF:83:C8:BF:6B:22:08:30
            X509v3 Authority Key Identifier:
                keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:0c:70:ac:f2:3c:c2:4f:57:bb:40:d1:d3:76:93:bc:84:
         90:c2:58:f0:a6:c3:63:1a:d7:93:76:eb:c3:8c:be:fd:c7:58:
         78:c3:2e:f8:61:0a:c6:8b:87:f0:19:e6:b0:f3:dc:c5:10:71:
         d4:a3:07:f5:75:f9:93:58:f0:e6:0c:6d:4f:e3:6b:cb:9a:52:
         71:85:28:9f:2b:ec:e2:af:01:56:11:a9:04:b1:af:96:0e:44:
         5f:aa:23:a8:dd:b6:9d:db:76:3f:ea:8a:38:97:0f:d8:cf:b9:
         b8:96:cc:02:bb:ac:e5:d9:76:31:12:af:da:fb:59:41:c3:1f:
         4f:5e:8b:fb:36:67:4d:5f:95:9f:58:75:70:2c:00:64:e2:89:
         41:f0:65:07:f5:84:55:7f:b4:fb:c0:db:6f:8b:64:db:90:0a:
         eb:b3:e4:d5:42:a8:56:09:4f:5e:27:7e:10:8a:c4:94:96:8d:
         5e:c8:62:db:c1:96:47:c2:d2:06:f5:27:06:9d:a0:34:1e:e9:
         0f:84:ba:5e:56:84:36:db:49:a8:d5:77:85:cf:3e:6a:3e:5e:
         6c:97:4d:51:06:9f:f2:ec:5d:bf:a4:58:54:55:27:cc:60:1a:
         78:2f:16:7c:b0:9a:ca:b5:c9:8c:8b:74:52:69:22:73:cd:0b:
         e4:fb:ca:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:57:45 2026 by rpki-client