This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
File:                     BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json)
Hash identifier:          0kjexZlbGZt4zz7nZwRxTfpNqJTMB4M5fq+phmOJGCA=
Subject key identifier:   BA:92:94:77:E6:5D:17:FF:81:4D:BF:32:B9:71:AF:8F:5A:0E:CE:21
Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
Certificate issuer:       /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Certificate serial:       118C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
Manifest number:          117E
Signing time:             Sat 24 Jan 2026 16:56:32 +0000
Manifest this update:     Sat 24 Jan 2026 16:56:31 +0000
Manifest next update:     Sat 31 Jan 2026 16:56:31 +0000
Files and hashes:         1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: lJe8qtq5oVDIdy2RN1pGjKNfpckvyRRgs2tCHWudXoc=)
                          2: 7F35DF3CB74E11F0B044DA80C4F9AE02.roa (hash: c359sIW4Z5sIwnmuCSGuu4Dc9VbeC09XzNfroSlImmE=)
                          3: C484F3C0B74E11F0823EBC10C4F9AE02.roa (hash: TgAtTR3AGX5ew51UqibGXUzKLmbtmQK+cqf1ZOWJIZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
                          rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4492 (0x118c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
        Validity
            Not Before: Jan 24 16:56:31 2026 GMT
            Not After : Jan 31 16:56:31 2026 GMT
        Subject: CN=6974f9bf-4afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:d1:9a:4e:0b:41:b6:31:ca:5d:89:71:b2:
                    7e:19:15:ad:34:fa:bf:25:4e:a9:f0:11:78:27:66:
                    9e:10:a1:17:4e:88:68:06:d2:41:14:66:08:65:de:
                    0c:50:59:9a:e1:99:46:dd:9f:17:8e:2f:b5:a9:82:
                    b7:6c:37:74:97:ad:b9:a6:30:11:2b:da:a0:8d:93:
                    bb:e3:cf:80:0d:08:c6:a5:cf:bf:60:3a:ac:77:4f:
                    0c:61:92:ce:65:9a:7d:bf:53:99:19:87:ce:62:4a:
                    8b:e6:50:52:20:43:11:40:fe:6b:79:0d:00:dc:fd:
                    d2:47:3e:9d:3c:8e:7b:b2:99:32:cd:af:75:22:7b:
                    15:51:6b:21:d3:c2:43:cd:e1:0e:bf:a2:db:e8:17:
                    2a:6c:61:c5:b8:ce:b4:50:55:a4:9c:cc:a5:b9:56:
                    85:71:a8:a5:e6:a2:bb:b9:97:c4:66:81:fc:b9:ca:
                    4f:f1:37:b3:13:04:4e:68:52:fd:e3:e6:d6:8b:d4:
                    92:00:b4:5d:82:31:15:c8:dc:70:df:83:31:eb:5c:
                    51:b1:8a:a3:ed:60:a8:b9:67:89:46:b1:ad:a3:9a:
                    04:a0:e4:58:de:a0:b3:65:49:7e:b4:b5:6e:cd:df:
                    96:57:80:57:84:18:f4:49:91:c8:bc:17:53:20:45:
                    9f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:92:94:77:E6:5D:17:FF:81:4D:BF:32:B9:71:AF:8F:5A:0E:CE:21
            X509v3 Authority Key Identifier:
                keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b8:43:63:14:7d:5e:86:73:59:16:22:21:c5:0a:5e:ab:1f:
         17:8e:ff:9c:0d:82:59:a3:dd:6c:96:3a:67:7d:8e:a4:97:f8:
         ee:e3:69:20:c0:f6:9c:28:27:85:27:39:c0:9a:ec:b4:af:80:
         1f:55:20:97:7f:0a:0a:d4:1e:cf:7e:dd:87:72:b5:8f:8e:74:
         12:b7:0a:22:e1:75:64:04:b9:ec:06:74:3f:54:e4:e2:7f:35:
         a1:9b:8e:d9:e9:c2:8f:09:c4:42:85:3d:43:05:1d:3f:48:b4:
         41:c7:8c:db:4a:f2:cd:cd:8e:90:c4:c8:b3:22:6b:1d:65:53:
         5e:8f:08:3b:61:06:06:1f:0e:01:0b:ed:94:a7:da:54:dd:b8:
         90:72:b6:eb:71:35:bf:c9:5d:96:33:0f:e2:c6:94:0b:3f:8e:
         6f:4b:f4:1d:9a:6d:fc:c3:ba:1c:6d:f0:37:83:1c:b7:70:ae:
         21:9c:e4:99:c3:f0:ad:e9:e2:38:5c:97:0e:e0:3b:c4:07:5a:
         d1:5f:08:29:f2:68:42:a3:49:23:17:19:5e:a0:ec:c8:c2:8c:
         f2:89:50:e6:73:8d:db:ae:f1:7c:ae:76:01:f7:2d:dd:a8:36:
         7a:9b:f8:62:1b:63:e5:59:88:e9:7f:fa:13:0c:be:c8:99:d8:
         10:eb:10:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:52 2026 by rpki-client