This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
File:                     bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json)
Hash identifier:          JJ85eK43tHNgeGBM6l5wdkcxUeD1xsAYddaPwGXXfbg=
Subject key identifier:   78:9A:27:F1:94:CD:12:4A:33:91:02:AA:67:8E:FD:66:09:26:6C:94
Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20
Certificate issuer:       /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420
Certificate serial:       09A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
Manifest number:          0963
Signing time:             Sat 24 Jan 2026 19:39:07 +0000
Manifest this update:     Sat 24 Jan 2026 19:39:07 +0000
Manifest next update:     Sat 31 Jan 2026 19:39:07 +0000
Files and hashes:         1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: crrmy2GTLEIg3U6F+XtL3gNJXF93Pc7m2r7U6BmVn9o=)
                          2: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: u/IJXHcIn7lbo6iqFsAljOO6/E+7Rk3qnGcidVuOSfM=)
                          3: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: GHsxefrnlU5VupyXbGIMFIi7tGhmBUS8mhWsd7Ko2TE=)
                          4: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: wcThOncXEAjT8ZpszyLo6l4OnTDnQ4syZMD7UYn7ez4=)
                          5: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: olPSDCWvaweZpAfUli8fgZJJaQht5UUB+cNnsdtHWSg=)
                          6: 88252000B55C11ECA9565039C4F9AE02.roa (hash: TR+d6Rjq96WxruqKgy2u4oNd2lnUKRlYiqBdb4EEjrA=)
                          7: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: YfESzO95JKDO7r7mGpLR5hQYholf9V/lBlUpUDalD40=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl
                          rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2467 (0x9a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420
        Validity
            Not Before: Jan 24 19:39:07 2026 GMT
            Not After : Jan 31 19:39:07 2026 GMT
        Subject: CN=69751fdb-027b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:3f:d8:ab:58:e8:aa:c3:a3:36:74:53:ab:
                    02:2e:42:10:e7:5c:34:49:58:fb:55:37:52:a3:ae:
                    92:11:4c:d1:47:78:e7:2a:67:e2:77:07:59:68:d4:
                    21:65:44:ff:52:63:db:bc:23:6f:60:30:f7:79:2c:
                    27:97:17:8f:25:04:c4:ce:45:f6:cb:cc:10:15:b4:
                    4f:fc:7a:25:39:81:fe:ed:c1:85:33:e4:27:d4:fb:
                    24:24:f2:29:97:47:6b:91:98:fd:c9:bb:d3:41:51:
                    b1:46:7d:c7:10:25:f3:3b:0a:fc:0c:dd:7e:96:e1:
                    10:63:a3:e1:d8:9f:11:b7:a4:e5:58:b5:12:09:b3:
                    66:9a:86:9b:0a:d2:a6:4e:64:53:68:44:8e:37:54:
                    87:9d:33:03:6d:58:03:fb:c3:c9:17:4e:de:94:b6:
                    e0:ec:4d:3e:0e:b6:21:0f:9d:42:2c:6a:3a:31:eb:
                    c4:76:3b:21:06:95:fb:e2:a6:8a:a0:34:df:b8:0d:
                    d3:7e:4c:9c:68:6f:f3:91:76:eb:42:55:0f:a7:06:
                    bd:ea:3a:f0:63:50:11:e4:14:9a:5e:8d:41:c7:2e:
                    2d:ba:df:dd:24:b7:9c:04:f6:b0:5e:1a:c0:09:49:
                    38:e3:a2:91:35:a9:61:d2:75:9a:7a:22:47:2f:8f:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9A:27:F1:94:CD:12:4A:33:91:02:AA:67:8E:FD:66:09:26:6C:94
            X509v3 Authority Key Identifier:
                keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1b:4d:db:0d:4e:58:52:08:5d:26:af:1b:3a:7d:f0:6a:fd:
         c4:f3:91:f3:69:b8:3a:e3:d3:9d:a0:36:71:88:ce:d7:d8:99:
         5b:dc:2d:94:e4:3c:32:a0:28:7d:39:ba:b7:31:aa:9b:f9:45:
         5f:97:38:c7:a4:2f:59:b1:13:f2:82:58:53:e2:29:0d:2b:c4:
         ef:b6:58:f5:2f:93:2a:5e:58:7a:cd:fb:68:5c:6e:43:ee:0b:
         0b:14:f7:bd:90:a9:cf:ca:08:4e:98:76:82:04:69:bb:2c:ca:
         c2:d5:70:07:c6:d1:87:6f:56:4e:11:98:06:13:15:30:59:f8:
         ba:7b:8a:9f:be:63:f9:d5:5c:8a:5f:6d:c4:99:14:24:09:c6:
         8f:61:db:64:08:1a:dd:12:7d:52:33:a2:4b:40:b2:12:05:95:
         27:b0:51:2e:fa:26:c9:a3:d7:6b:3a:ca:ef:b1:14:e0:42:f3:
         25:a5:a5:ea:f9:87:7c:bd:80:73:0c:f2:bd:4b:83:6f:cc:c2:
         d7:cb:c4:c4:72:10:8e:0a:24:f5:a9:98:f8:80:4e:19:1a:ac:
         40:ff:4a:8e:83:0c:28:0c:90:ad:ab:2d:11:6b:16:3e:f0:d3:
         02:85:1c:9a:3d:5d:51:ed:d8:57:db:87:02:61:9d:93:9b:b8:
         5a:e5:48:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5
Mjc1NzQ0MjAwHhcNMjYwMTI0MTkzOTA3WhcNMjYwMTMxMTkzOTA3WjAYMRYwFAYD
VQQDDA02OTc1MWZkYi0wMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAquc/2KtY6KrDozZ0U6sCLkIQ51w0SVj7VTdSo66SEUzRR3jnKmfidwdZaNQh
ZUT/UmPbvCNvYDD3eSwnlxePJQTEzkX2y8wQFbRP/HolOYH+7cGFM+Qn1PskJPIp
l0drkZj9ybvTQVGxRn3HECXzOwr8DN1+luEQY6Ph2J8Rt6TlWLUSCbNmmoabCtKm
TmRTaESON1SHnTMDbVgD+8PJF07elLbg7E0+DrYhD51CLGo6MevEdjshBpX74qaK
oDTfuA3TfkycaG/zkXbrQlUPpwa96jrwY1AR5BSaXo1Bxy4tut/dJLecBPawXhrA
CUk446KRNalh0nWaeiJHL492ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiaJ/GU
zRJKM5ECqmeO/WYJJmyUMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3
NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS
Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi
N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCmG03bDU5YUghdJq8bOn3wav3E85Hzabg649OdoDZxiM7X2Jlb3C2U
5DwyoCh9Obq3Maqb+UVflzjHpC9ZsRPyglhT4ikNK8Tvtlj1L5MqXlh6zftoXG5D
7gsLFPe9kKnPyghOmHaCBGm7LMrC1XAHxtGHb1ZOEZgGExUwWfi6e4qfvmP51VyK
X23EmRQkCcaPYdtkCBrdEn1SM6JLQLISBZUnsFEu+ibJo9drOsrvsRTgQvMlpaXq
+Yd8vYBzDPK9S4NvzMLXy8TEchCOCiT1qZj4gE4ZGqxA/0qOgwwoDJCtqy0RaxY+
8NMChRyaPV1R7dhX24cCYZ2Tm7ha5UiC
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:16 2026 by rpki-client