This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
File:                     Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft (raw, json)
Hash identifier:          P2D418qZhqzJQy0t2aQHXObgl+8ahO9v65sUELu85/U=
Subject key identifier:   05:B1:2B:65:40:66:6F:BD:49:60:0F:57:DC:34:70:73:D0:CA:5E:AF
Authority key identifier: 06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73
Certificate issuer:       /CN=A919AFBE/serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
Manifest number:          2B
Signing time:             Sun 25 Jan 2026 06:42:03 +0000
Manifest this update:     Sun 25 Jan 2026 06:42:03 +0000
Manifest next update:     Sun 01 Feb 2026 06:42:03 +0000
Files and hashes:         1: Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl (hash: LvF9/1otgGuhKkRAM9eulHUA6d3wHz0MUgB0p1AEOBo=)
                          2: 4F172076BA1F11F08DD0CE3CC4F9AE02.roa (hash: 2SVHk8cIQzgO3XRGu4uq00WRCc3uLMHlAw81vpBUV8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl
                          rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AFBE, serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
        Validity
            Not Before: Jan 25 06:42:03 2026 GMT
            Not After : Feb  1 06:42:03 2026 GMT
        Subject: CN=6975bb3b-fa24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:bc:5c:b8:d6:22:b2:15:67:18:17:b2:c3:
                    f6:d2:4d:66:be:dd:e2:bd:65:b8:85:82:cc:8b:69:
                    9a:da:1e:e6:81:65:e4:dd:2a:2e:27:88:f5:39:93:
                    81:91:ad:5b:60:f1:b3:56:a4:da:cb:1d:88:3b:9e:
                    d7:e9:83:4a:5a:ef:85:6c:ce:44:f1:62:1b:1d:12:
                    53:e0:64:e4:cc:8d:b2:7b:49:e9:56:eb:9b:c1:ed:
                    2f:f7:6f:01:c4:e1:8d:84:39:c2:c6:41:42:5a:df:
                    49:48:be:09:9a:bc:54:d8:a4:a3:7f:35:ed:13:9f:
                    4e:7a:4f:40:37:f0:6b:75:bc:b2:9c:64:95:81:57:
                    80:79:bc:27:cb:ca:7a:39:1f:92:0b:92:bb:23:0e:
                    25:6e:28:f0:86:99:51:12:fd:9e:9b:cd:c5:f0:c1:
                    c4:89:89:eb:79:0b:1d:80:a0:87:d6:dc:5e:04:5d:
                    c6:04:33:6e:10:e7:c0:aa:36:cb:e9:ae:9a:d5:23:
                    58:04:47:4e:91:0a:4d:8e:a2:f8:7b:65:cb:ba:c9:
                    f6:8b:1e:17:63:97:10:5e:49:76:2d:dd:f2:88:5b:
                    7d:a4:eb:f1:5d:5d:4c:c8:07:cf:ff:de:01:b2:ae:
                    c6:ee:c5:b9:02:ba:b5:d4:88:ff:9e:27:d5:7b:52:
                    e3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B1:2B:65:40:66:6F:BD:49:60:0F:57:DC:34:70:73:D0:CA:5E:AF
            X509v3 Authority Key Identifier:
                keyid:06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8f:26:fe:23:de:84:22:11:77:4b:6e:da:c8:b7:a5:36:4f:
         ef:94:aa:b3:0f:ff:c6:54:00:78:59:3e:80:45:51:64:15:46:
         ea:47:b3:c6:60:df:d8:83:57:e0:a4:fd:24:55:ec:c2:ec:2a:
         d0:56:8f:47:1a:d6:42:55:0e:39:f0:a5:fb:f0:fb:6d:6b:30:
         09:61:0e:4a:f4:0c:b6:9a:10:83:d4:7c:24:29:03:9f:27:62:
         da:b8:5a:56:b2:02:5d:07:30:54:aa:b2:f3:91:38:eb:db:11:
         45:54:7b:31:91:f7:62:e7:97:ae:64:8c:05:95:30:fc:5f:6e:
         bb:20:44:cd:c2:b9:bc:d7:b4:7b:b7:ea:f9:e9:59:be:4c:82:
         85:07:d9:a6:4a:f3:95:01:d8:60:15:ce:46:0c:0c:7b:9b:06:
         3c:85:10:03:fd:02:10:30:ad:1f:4b:cb:cd:07:36:c3:73:d1:
         50:92:2a:90:77:7c:f0:f1:a2:5a:ed:d6:a9:14:f0:eb:aa:e0:
         68:50:ad:d7:1e:49:28:b9:2b:96:e0:66:0c:4b:0b:4e:99:b2:
         69:e0:ca:00:e7:4b:94:a7:e7:ec:42:b3:48:ad:68:6f:05:97:
         c2:8a:dc:2d:93:d8:da:6d:69:89:15:c2:86:cd:9d:6f:53:94:
         6a:71:ec:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:51:58 2026 by rpki-client