This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
File:                     B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json)
Hash identifier:          b3kjB00CZ3WO6noHVxrMfs9KVwb/EoYd87J5Ao+Gtec=
Subject key identifier:   06:6B:48:13:9C:A8:D3:C2:AF:45:61:93:C7:AC:D8:8D:D1:AD:D5:F9
Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
Certificate issuer:       /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
Certificate serial:       077C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
Manifest number:          076C
Signing time:             Sat 24 Jan 2026 20:59:31 +0000
Manifest this update:     Sat 24 Jan 2026 20:59:30 +0000
Manifest next update:     Sat 31 Jan 2026 20:59:30 +0000
Files and hashes:         1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: k9/apM+Hj8EoeqwwRzwz4nrGrr1sHa1jZ9pEYxaXb0Q=)
                          2: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (hash: K582nD351LCFmocRpDImIyPSP+oUj66WDs3dSAB8W+A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl
                          rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916 (0x77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
        Validity
            Not Before: Jan 24 20:59:30 2026 GMT
            Not After : Jan 31 20:59:30 2026 GMT
        Subject: CN=697532b3-9574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:bc:f1:08:55:ed:47:dd:e7:c0:40:72:40:
                    29:11:25:20:8c:62:02:a4:31:2e:07:cd:d9:d2:94:
                    01:1c:0c:a7:65:10:f3:92:5a:d0:e5:1b:4f:d1:a1:
                    8e:bc:62:4c:b2:73:11:5f:52:5f:8e:d5:2f:2e:3c:
                    10:fd:00:36:fa:3f:07:93:e4:b9:21:3b:4c:31:37:
                    00:2c:51:46:13:c9:43:40:cb:26:69:3a:16:3a:cb:
                    85:58:58:5f:0c:59:dd:a7:64:6a:04:b2:55:83:c8:
                    0b:35:6f:22:7e:3c:f5:a6:60:47:23:ee:77:09:a6:
                    e4:dd:04:bb:41:02:aa:a9:50:46:36:c9:b2:e9:0b:
                    f2:b1:84:35:92:e3:26:cd:52:cf:6e:c5:ce:48:56:
                    7f:a9:1f:af:8e:9d:a6:2a:32:e1:db:f4:f9:31:b3:
                    4d:4c:09:86:79:9f:38:0e:22:93:8c:7d:e1:d3:94:
                    a1:42:71:1b:da:f8:7f:52:a2:ff:7e:96:0d:f0:83:
                    7b:db:a2:d5:8f:2f:d2:24:7c:be:c6:c6:c0:b0:f2:
                    1e:52:7d:64:27:1f:6f:7f:bb:6a:77:5b:b6:ae:02:
                    d1:75:22:32:2c:9e:2f:12:7d:dd:b3:2e:ea:32:fd:
                    e6:ff:cc:a3:de:f4:6a:6c:bb:d1:52:1b:16:f7:3e:
                    4d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6B:48:13:9C:A8:D3:C2:AF:45:61:93:C7:AC:D8:8D:D1:AD:D5:F9
            X509v3 Authority Key Identifier:
                keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e9:9d:d4:5e:ff:27:da:39:fc:71:1d:c3:3f:c3:53:3e:0f:
         eb:4c:cf:a2:b6:f3:ac:d0:be:22:16:b5:5c:db:db:6f:f4:53:
         a3:dd:22:28:8b:a9:13:f0:d5:e0:47:cc:3d:39:38:0f:ab:03:
         f7:80:c2:ff:52:1b:f2:24:91:0e:5d:ba:c6:54:d2:0b:b0:f7:
         1c:6a:ba:f4:c7:d0:69:b7:9a:d9:9b:d0:fa:56:44:39:38:94:
         f7:cd:f6:39:b6:fd:7a:33:e4:12:a4:a7:02:3a:54:6d:62:c4:
         5c:89:98:78:64:e8:b3:90:07:5a:e2:33:89:29:70:1d:45:fd:
         ec:be:c9:9a:88:91:28:04:fc:7a:a4:26:b1:63:cf:e9:d8:89:
         f2:0e:24:0f:a1:44:a4:96:15:ab:16:4d:ab:fa:15:1c:3c:ef:
         4d:47:c6:93:2a:30:a2:cf:ce:45:d8:07:14:a6:3c:b0:80:4a:
         93:d5:73:3f:b9:09:73:28:2d:11:d3:06:c6:ba:6d:ac:85:c6:
         6f:d7:d0:36:a4:c2:f1:fc:db:01:42:79:df:b5:e9:c7:a3:aa:
         85:4f:65:0a:85:67:d2:01:e0:8e:2b:a9:5f:fc:8d:d9:75:2e:
         72:82:0f:b2:04:3d:b6:39:f5:53:be:e9:3b:75:e6:cf:02:10:
         e6:7e:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:34 2026 by rpki-client