This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
File:                     -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json)
Hash identifier:          SnvkjAkzbW0H7u+0hpWr/oenyiR699Byne9D5KDEE40=
Subject key identifier:   5B:01:9E:82:39:15:C5:B8:DF:D8:C8:4D:7D:D0:3B:3F:39:23:89:AA
Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD
Certificate issuer:       /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD
Certificate serial:       0AB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
Manifest number:          0A90
Signing time:             Sat 24 Jan 2026 19:05:20 +0000
Manifest this update:     Sat 24 Jan 2026 19:05:20 +0000
Manifest next update:     Sat 31 Jan 2026 19:05:20 +0000
Files and hashes:         1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: lWwqV1KjuAEWUFdBKD6Cc/OwzEKEYYre8QTztJPGKMw=)
                          2: FE84EF96F16211F08FA76A8B5F6F56BC.roa (hash: ZPxY3+2edzPvKz+TL3qfzFG7MVyIXSRM4erhnEG41xI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl
                          rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2737 (0xab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD
        Validity
            Not Before: Jan 24 19:05:20 2026 GMT
            Not After : Jan 31 19:05:20 2026 GMT
        Subject: CN=697517f0-134e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0e:a2:54:e2:d5:a3:1c:16:3e:11:aa:d0:8b:
                    6d:d8:bc:ce:aa:0c:01:0e:a0:24:8f:65:fd:9b:7a:
                    b3:45:c3:5e:03:91:1f:0c:8a:15:ec:5e:00:26:35:
                    15:d3:65:25:85:80:95:86:9b:a5:35:57:c6:aa:04:
                    e1:d9:20:66:a8:9f:f7:2a:75:a3:09:d0:27:10:af:
                    fb:d1:ae:3d:7f:2e:ca:80:44:0c:db:7d:b2:2c:fa:
                    c6:25:d4:e7:43:4d:d9:aa:46:35:72:59:08:bb:c7:
                    62:0e:43:f5:7d:a4:a7:34:93:24:f8:3f:0e:b5:e0:
                    99:e1:71:82:16:ba:f5:38:66:d8:19:b9:bb:bd:3a:
                    07:50:9b:b0:51:37:e1:68:32:e7:52:14:c1:2b:80:
                    03:ac:b2:6a:4c:da:4a:ce:b5:a7:68:78:fc:70:3a:
                    4a:79:dd:22:3a:2a:5d:74:2d:c8:7b:a5:86:66:5c:
                    36:98:20:b9:5c:6e:0e:f4:73:ec:6b:03:34:40:a7:
                    16:1e:ca:0b:e6:57:98:b4:3c:ec:29:29:02:1e:20:
                    9a:ef:37:3d:3b:42:8b:66:13:1d:ee:b1:82:a8:81:
                    65:87:b9:e4:02:4e:9e:67:59:72:cb:a7:39:ac:ac:
                    5a:c0:bb:dd:be:2a:18:88:b0:7c:64:82:2c:0e:3f:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:9E:82:39:15:C5:B8:DF:D8:C8:4D:7D:D0:3B:3F:39:23:89:AA
            X509v3 Authority Key Identifier:
                keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:2b:9f:11:37:8d:c8:fc:e3:12:aa:21:21:ea:d1:3f:26:64:
         9c:bd:7c:4d:d4:d9:cb:5b:74:2a:98:c6:e4:92:cf:96:ad:b0:
         5d:29:38:05:40:d7:3e:9a:62:18:6f:5f:c0:9e:71:dd:e9:be:
         6b:ea:c2:9c:b0:e7:5d:99:6c:18:dd:bf:c3:d5:c8:df:24:da:
         dd:cb:6a:94:5d:f4:f4:50:7c:4c:16:d1:fc:eb:b0:ee:c7:d4:
         ee:88:c2:24:c7:04:4b:20:1f:8f:bd:ea:22:88:42:e5:6c:6f:
         d1:61:8e:b9:57:d3:84:82:3e:0c:35:96:e8:26:24:37:d9:9b:
         ab:c4:c2:f7:e7:81:08:b7:5a:14:3d:32:b5:46:b1:23:cf:fb:
         e0:69:2b:1a:34:92:03:ed:2e:ac:29:b7:ec:ef:ca:1d:86:8c:
         b2:63:13:d9:98:4c:ab:b2:40:bf:d6:10:d7:8c:13:b7:42:87:
         12:a5:02:3f:89:fa:9c:df:0b:e7:94:f3:0c:85:5b:f4:e7:4d:
         ab:cd:ec:30:c2:31:54:a0:2e:6b:9c:1a:3e:cc:71:23:5d:fe:
         85:0a:6f:03:bb:54:7e:d2:4d:0d:5c:8c:97:da:40:b6:0b:f7:
         4f:1c:2d:65:9d:c8:7a:3d:18:43:ea:c6:e4:0a:c7:7a:b2:33:
         65:2b:cb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:57 2026 by rpki-client