This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
File:                     BAiuYP82i4xPzZMY6lKlnIcolJw.mft (raw, json)
Hash identifier:          LZ91MeQhMGN52geifQfS+LJUe3Mn+JjhvwnaG2nxTEk=
Subject key identifier:   A0:A6:F4:2C:F3:39:D6:04:CE:83:E6:C7:12:5C:2F:CB:B7:41:68:40
Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
Certificate issuer:       /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Certificate serial:       08DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
Manifest number:          0B25
Signing time:             Sat 24 Jan 2026 19:50:01 +0000
Manifest this update:     Sat 24 Jan 2026 19:50:00 +0000
Manifest next update:     Sat 31 Jan 2026 19:50:00 +0000
Files and hashes:         1: BAiuYP82i4xPzZMY6lKlnIcolJw.crl (hash: 0TQXD5jvXlRughuEqZLnMWyZeDVL274Sl8dF1SnO9lE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2267 (0x8db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0AE, serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
        Validity
            Not Before: Jan 24 19:50:00 2026 GMT
            Not After : Jan 31 19:50:00 2026 GMT
        Subject: CN=69752268-cfc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:31:81:87:e1:4f:e8:25:12:df:ed:7d:96:
                    2f:67:d1:2d:d9:6b:1f:4e:d0:ec:88:54:84:d0:28:
                    7b:db:11:4e:c8:57:6f:2d:85:69:34:64:1b:79:21:
                    97:eb:3c:ba:e7:9f:d1:c2:47:94:bf:e0:61:97:93:
                    86:11:3e:de:06:60:09:ae:02:7a:9e:ba:a8:98:74:
                    06:fb:e1:66:9b:85:41:12:01:2d:89:f8:86:1f:76:
                    65:12:12:75:46:44:5b:85:f9:3c:76:59:be:dc:81:
                    f4:3f:60:ee:03:33:11:11:fa:4e:13:fb:7a:f4:9f:
                    f0:cb:20:55:03:4e:95:35:cb:1c:ed:b6:f0:62:ae:
                    a6:d1:16:8e:da:a1:ed:ff:53:2d:04:2b:b7:da:3c:
                    51:df:99:92:5b:46:08:15:2b:1b:44:f1:0e:07:10:
                    bb:82:10:b1:c6:8d:ab:ef:da:2d:0c:7a:6b:33:d3:
                    2c:75:ca:24:c8:c1:95:6c:e9:06:61:28:b0:27:87:
                    50:3b:6b:7d:79:68:b5:4d:59:78:07:5f:e9:d9:e7:
                    89:d6:c1:35:25:19:c1:24:29:da:9a:2a:42:46:42:
                    27:51:67:0c:f7:3e:71:3a:95:04:86:70:87:ed:c4:
                    c3:ff:6e:e8:6d:5b:7a:05:fa:7b:1f:00:37:99:a1:
                    f8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A6:F4:2C:F3:39:D6:04:CE:83:E6:C7:12:5C:2F:CB:B7:41:68:40
            X509v3 Authority Key Identifier:
                keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:50:63:79:fa:41:d5:11:38:39:eb:80:c0:91:53:a8:89:76:
         74:55:57:34:45:2e:27:84:2c:e3:33:4b:36:67:9f:36:57:d1:
         78:1f:fa:8c:96:cf:65:93:07:9d:92:65:68:00:3b:d9:e3:13:
         85:58:75:46:24:91:c6:b9:89:77:86:c2:fb:80:60:9b:9e:a2:
         20:25:14:01:96:a1:49:7b:10:a8:04:cf:fd:63:43:23:92:90:
         32:6b:5c:20:9a:e0:37:05:51:e2:2d:c6:48:89:6d:96:2b:44:
         1d:bc:fa:f3:31:99:3d:d0:2e:c9:62:1d:75:3e:6d:33:7c:72:
         9e:f3:a8:6c:77:3c:78:8e:44:02:9d:06:b2:dc:d3:25:bd:cd:
         9c:a2:d8:1a:13:9c:6b:69:70:28:57:65:3e:99:c0:99:7b:38:
         85:ea:bd:99:a9:c4:21:4d:d3:ea:43:f7:9d:1a:f6:7b:57:ff:
         61:76:b6:9a:bc:a0:2d:34:72:32:ff:89:41:e7:53:a6:3f:4c:
         b7:ec:7f:7e:2b:1b:4f:75:53:40:7c:aa:9e:51:d1:e2:7d:66:
         ca:65:3f:05:7e:fd:71:65:74:03:b3:1d:fb:9a:16:df:59:65:
         c3:fe:21:73:7e:73:eb:e3:6d:c8:0b:bb:52:52:1c:46:e7:b6:
         b4:e3:f5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:03 2026 by rpki-client