This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
File:                     bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json)
Hash identifier:          69bsEP/g/ybE7oXP2rOD/L7FxTV1tb9tcAYqIj4u53M=
Subject key identifier:   56:B9:92:27:75:5A:ED:84:0E:B2:B5:6B:44:16:A2:05:0D:C6:2B:99
Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
Certificate issuer:       /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
Manifest number:          017E
Signing time:             Sun 25 Jan 2026 03:00:34 +0000
Manifest this update:     Sun 25 Jan 2026 03:00:34 +0000
Manifest next update:     Sun 01 Feb 2026 03:00:34 +0000
Files and hashes:         1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: TTx83fKfjlgzfOddA+/Z77H02ZvLjKyFDWeyK5w6C2Q=)
                          2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
                          rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
        Validity
            Not Before: Jan 25 03:00:34 2026 GMT
            Not After : Feb  1 03:00:34 2026 GMT
        Subject: CN=69758752-1097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:da:05:73:ef:a8:ce:7b:f8:3f:9e:fa:2f:
                    64:ec:4e:73:fa:98:70:0a:09:a7:5f:50:85:74:f2:
                    4f:cc:f2:a4:59:ca:4b:45:7c:c8:c3:87:64:46:63:
                    14:67:fb:fe:b7:81:e6:4a:d5:5d:d6:d2:a4:7b:bc:
                    5b:84:b2:a4:e9:d1:53:8c:2f:07:59:91:80:c2:27:
                    a2:4e:f5:f0:6e:e0:77:2e:4d:b2:7b:6d:ea:ad:bc:
                    a2:da:ea:aa:11:e8:e5:0e:7f:43:40:05:0f:ae:00:
                    dc:fb:32:87:58:7e:09:90:09:af:dd:9b:99:32:73:
                    ac:9a:21:dd:c7:8e:5e:23:a5:38:30:ea:ac:1d:00:
                    25:87:aa:54:6a:c1:84:d4:a7:95:71:86:4f:94:69:
                    51:1c:7e:3c:52:c8:ba:f3:97:17:5d:79:0b:89:23:
                    c0:8a:f8:d1:23:e3:e3:16:fe:e0:4d:66:6e:e6:b6:
                    14:8d:ce:7d:10:f2:80:19:56:75:82:64:1c:2f:73:
                    8d:b2:27:ec:8d:1c:1e:7e:a4:d3:a9:34:ee:9c:66:
                    f5:3d:ea:3e:57:c1:91:0b:8e:f9:78:a6:8a:1c:45:
                    80:80:6c:58:81:14:4c:15:de:79:9f:07:1a:d2:fa:
                    bf:db:89:58:93:b1:f7:e1:91:f5:6c:3f:93:93:f0:
                    e2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B9:92:27:75:5A:ED:84:0E:B2:B5:6B:44:16:A2:05:0D:C6:2B:99
            X509v3 Authority Key Identifier:
                keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:40:67:b2:93:84:05:00:c0:74:f4:29:d2:25:2c:1c:b7:7b:
         ba:e1:97:11:11:d7:da:99:ff:86:08:37:08:94:c0:1a:d1:08:
         64:79:94:53:b0:28:31:7e:8a:28:dc:5b:79:39:f2:ab:41:c4:
         56:51:16:ff:0c:f9:ee:66:47:99:0e:81:3c:63:e9:03:10:0d:
         72:1f:c3:31:3e:46:6b:ee:9f:e7:e2:76:9c:12:65:d9:4e:e8:
         1d:af:0f:d8:68:95:37:a1:72:ef:3e:b2:8e:11:d3:c1:69:1f:
         48:d5:db:e5:08:da:4c:4a:c2:77:55:43:06:05:96:ab:7e:29:
         89:1c:1b:69:c6:bd:dc:17:04:22:db:b5:5c:db:1f:d9:40:03:
         be:38:0e:d2:fa:a5:90:a5:82:1f:00:45:73:34:e4:66:6a:d5:
         7c:ff:70:57:fe:99:b8:1e:15:8f:e3:95:15:94:10:f5:13:aa:
         a1:83:1b:23:1d:29:b8:7b:66:e7:18:71:83:fc:95:2e:b1:06:
         98:bb:c1:d9:bd:56:bb:cc:a0:c1:5e:33:78:75:b0:5b:7f:a6:
         a5:fe:98:e2:d0:19:f0:c9:cc:cd:87:3a:ad:31:7e:bb:e2:c5:
         ea:29:ee:c1:97:29:9e:63:8f:24:78:5d:fd:34:41:e8:43:2e:
         8f:03:b5:92
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx
N0U0QzU3OEEwHhcNMjYwMTI1MDMwMDM0WhcNMjYwMjAxMDMwMDM0WjAYMRYwFAYD
VQQDDA02OTc1ODc1Mi0xMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr5zaBXPvqM57+D+e+i9k7E5z+phwCgmnX1CFdPJPzPKkWcpLRXzIw4dkRmMU
Z/v+t4HmStVd1tKke7xbhLKk6dFTjC8HWZGAwieiTvXwbuB3Lk2ye23qrbyi2uqq
EejlDn9DQAUPrgDc+zKHWH4JkAmv3ZuZMnOsmiHdx45eI6U4MOqsHQAlh6pUasGE
1KeVcYZPlGlRHH48Usi685cXXXkLiSPAivjRI+PjFv7gTWZu5rYUjc59EPKAGVZ1
gmQcL3ONsifsjRwefqTTqTTunGb1Peo+V8GRC475eKaKHEWAgGxYgRRMFd55nwca
0vq/24lYk7H34ZH1bD+Tk/DidwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFa5kid1
Wu2EDrK1a0QWogUNxiuZMB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0
MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM
bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXQGeyk4QFAMB09CnSJSwct3u64ZcREdfamf+GCDcIlMAa0QhkeZRT
sCgxfooo3Ft5OfKrQcRWURb/DPnuZkeZDoE8Y+kDEA1yH8MxPkZr7p/n4nacEmXZ
Tugdrw/YaJU3oXLvPrKOEdPBaR9I1dvlCNpMSsJ3VUMGBZarfimJHBtpxr3cFwQi
27Vc2x/ZQAO+OA7S+qWQpYIfAEVzNORmatV8/3BX/pm4HhWP45UVlBD1E6qhgxsj
HSm4e2bnGHGD/JUusQaYu8HZvVa7zKDBXjN4dbBbf6al/pji0BnwyczNhzqtMX67
4sXqKe7BlymeY48keF39NEHoQy6PA7WS
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:28 2026 by rpki-client