This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
File:                     R0Blek4vuGe_tE2_bLi8HdGywg4.mft (raw, json)
Hash identifier:          LBXj34CmwIq+RLpnj4RVWG3INYWtYMxjk65zEOSINew=
Subject key identifier:   E4:0C:1A:72:4C:87:6C:8B:5E:65:58:8E:85:3D:A7:16:9A:CF:F4:6B
Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
Certificate issuer:       /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Certificate serial:       02F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
Manifest number:          02F2
Signing time:             Sun 25 Jan 2026 00:26:40 +0000
Manifest this update:     Sun 25 Jan 2026 00:26:40 +0000
Manifest next update:     Sun 01 Feb 2026 00:26:40 +0000
Files and hashes:         1: R0Blek4vuGe_tE2_bLi8HdGywg4.crl (hash: UUW5LBBZ0iG4R9AB2Zbe6N+ek43/dqNK8YBnzoYXYO4=)
                          2: 7AD326AC663911EDA919A02AC4F9AE02.roa (hash: e4e/2weEWR9V4/NE3J2YPV05BSS+/w2P0bwX2/dmeeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
                          rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
        Validity
            Not Before: Jan 25 00:26:40 2026 GMT
            Not After : Feb  1 00:26:40 2026 GMT
        Subject: CN=69756340-ce94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:44:23:8c:06:11:9e:18:0f:e9:c1:9b:7f:
                    c5:39:ba:3d:32:8f:fb:6c:34:b2:7b:27:23:8d:78:
                    01:b4:58:e2:0b:7f:0b:e8:57:10:4e:fd:17:92:40:
                    96:92:3d:40:61:70:57:2f:cf:ec:6b:8b:f8:a5:e8:
                    e5:02:89:2f:c3:cc:0f:54:7b:89:a2:50:9e:7b:61:
                    bc:c5:15:ae:2b:9f:b8:21:b4:be:e3:cd:44:23:4e:
                    a5:87:f2:aa:c9:bc:96:d5:6a:3d:46:04:3d:97:ab:
                    62:4b:8d:7a:52:a8:d7:1c:83:5b:8f:87:c9:e4:1f:
                    be:67:8e:e5:e8:3c:a4:b9:04:2e:f6:3f:0a:74:ee:
                    3b:10:85:ce:e8:a0:7a:82:96:48:0e:dc:4a:00:1f:
                    78:13:80:39:d4:b3:c3:46:2a:6e:f2:04:c7:f5:63:
                    4a:65:55:d7:8d:d9:16:51:7f:a4:d9:a3:78:e7:9c:
                    12:58:26:ec:3f:f4:06:82:33:67:92:de:82:4b:13:
                    08:21:24:d6:87:c2:ea:64:49:ce:25:a9:33:16:91:
                    6f:e8:64:ee:aa:19:df:f0:bd:e1:c2:f7:75:3b:28:
                    42:1d:b7:b7:ca:70:9d:7b:80:2a:dc:90:9a:8c:ac:
                    12:39:72:f8:b5:68:ff:b4:58:69:07:62:a7:9a:89:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0C:1A:72:4C:87:6C:8B:5E:65:58:8E:85:3D:A7:16:9A:CF:F4:6B
            X509v3 Authority Key Identifier:
                keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f8:ea:e0:42:83:d6:38:c1:fc:f5:92:65:c5:4f:b2:4c:0f:
         e3:f0:06:3c:4a:6f:3f:d8:58:6e:84:65:49:b1:5e:47:a0:ce:
         3b:7b:43:20:8e:a1:a4:34:d0:ed:62:9d:7a:f3:68:41:02:53:
         4f:30:e8:4a:9a:fa:f0:54:14:cc:10:80:0e:9b:62:97:80:4e:
         23:b8:ae:d3:49:29:20:7e:fd:5d:7d:14:97:54:7c:29:7f:63:
         1c:eb:6a:c2:82:56:a4:8a:d0:8f:3d:0f:fd:7b:d4:83:ca:6b:
         03:58:7c:c6:f6:2d:20:fc:ba:e2:52:a5:83:9a:89:54:c2:ff:
         ac:f4:ba:39:e3:0c:85:52:6f:ce:f1:b4:53:2b:f6:98:05:2f:
         2e:92:50:f9:60:6f:ad:0e:b8:81:5d:e5:e7:58:55:3f:eb:24:
         d0:6d:be:23:3e:7e:14:3f:f7:42:34:50:4e:43:3d:d0:33:1b:
         9d:dc:49:ae:08:a2:0b:f3:f4:e8:33:3f:33:a1:23:9c:9a:b6:
         0b:b2:fb:14:96:b0:e3:0e:bc:98:ec:bd:39:52:95:ae:c2:c8:
         e4:3a:b6:cd:45:bd:a2:db:97:db:c7:2e:17:ea:0a:67:9e:68:
         98:1d:3a:bd:e9:68:9e:1f:64:c5:fe:c5:19:56:55:92:01:05:
         d0:8f:58:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:02 2026 by rpki-client