This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
File:                     gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json)
Hash identifier:          RRoN/+YiJkRrJfTyZd18R1juF4tFmLWk9NNbKuYS2/Q=
Subject key identifier:   07:A2:B1:1F:CD:DC:4C:E0:AD:EE:3F:5F:03:78:6B:37:1A:01:8C:E3
Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55
Certificate issuer:       /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
Certificate serial:       0292
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
Manifest number:          028B
Signing time:             Sun 25 Jan 2026 00:43:53 +0000
Manifest this update:     Sun 25 Jan 2026 00:43:53 +0000
Manifest next update:     Sun 01 Feb 2026 00:43:53 +0000
Files and hashes:         1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: bxArLfOYsfy/hpzs79+IKIxDcELKH4Dl97wtIlbmcS0=)
                          2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: +md5I194ApAFzI9Vr3T+f9A2DpbYrH7HshUb/eOgpZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl
                          rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
        Validity
            Not Before: Jan 25 00:43:53 2026 GMT
            Not After : Feb  1 00:43:53 2026 GMT
        Subject: CN=69756749-e5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:18:e0:bc:1c:8f:b7:bc:b5:96:8c:5f:5c:
                    9e:8d:9e:df:17:43:82:8c:87:f0:d7:df:f3:f3:85:
                    85:96:e5:e6:22:03:e0:76:5a:b9:c6:fe:93:98:f4:
                    8c:0f:bb:d6:c5:ad:1d:ad:3f:3b:f7:12:6e:43:24:
                    92:11:98:9c:b3:c6:8f:94:34:9b:c1:b1:e1:15:6c:
                    43:a1:72:c9:23:ff:69:d3:f8:cd:b3:d3:a0:6c:40:
                    bb:e0:e5:8d:bd:51:54:92:1a:15:75:b7:89:fd:01:
                    a1:f1:28:a7:2e:66:0c:f3:64:8c:be:ec:9e:80:5e:
                    84:f0:19:36:96:f7:09:33:43:5c:de:8d:50:e0:15:
                    ee:9b:68:87:8e:59:21:7a:98:a7:af:b3:8c:1c:31:
                    77:f7:1a:f1:2e:e1:7a:81:61:bf:d3:d8:0a:25:34:
                    7e:b0:d9:42:55:0b:03:bd:a0:68:96:e3:fe:ed:f3:
                    3f:0f:af:85:d3:e8:a5:aa:c0:2b:37:c7:8c:ad:09:
                    2e:9b:dc:f1:65:02:f3:13:7f:02:2e:14:bd:d7:59:
                    43:11:80:a1:5c:83:bc:56:0b:30:a2:08:03:6e:22:
                    b0:c4:bf:a4:ca:ba:2d:49:90:97:6a:ae:62:c9:25:
                    5e:7b:5f:2f:f1:82:2a:20:80:a3:05:00:8f:4f:6e:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A2:B1:1F:CD:DC:4C:E0:AD:EE:3F:5F:03:78:6B:37:1A:01:8C:E3
            X509v3 Authority Key Identifier:
                keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e0:93:ef:b9:66:46:29:06:38:1f:71:bc:b7:8f:e8:07:45:
         51:4f:40:d3:57:08:35:9c:3c:4b:e2:8f:ac:10:b3:9c:9a:08:
         24:c2:ae:29:cf:a4:89:8a:eb:00:64:ce:a2:03:dd:c5:ae:68:
         6b:e9:02:04:1b:86:2d:be:60:ee:31:23:92:69:81:c2:e1:c8:
         f8:44:bf:0f:2a:9c:67:f6:9c:f0:b5:36:da:03:21:3b:89:40:
         9e:ca:ba:72:a9:40:1f:06:10:40:2c:a6:25:2d:a5:e3:b9:7e:
         fa:14:0c:e8:36:3c:e8:06:a3:31:60:b2:5e:dd:a6:5f:cc:a7:
         2a:0d:79:7b:73:6f:f3:ac:b2:f0:f4:ce:89:18:48:30:da:b5:
         44:94:0a:2d:c8:1e:62:4c:32:83:57:d1:9f:bb:cf:ef:21:6e:
         97:c1:59:7f:fd:11:cf:23:da:bd:e6:5c:47:c7:b5:2a:9b:40:
         6f:19:7c:dc:4b:ab:ef:6f:ad:b9:21:ac:ca:d8:99:72:28:9d:
         cc:62:65:71:ae:60:b6:0b:2b:a9:de:40:60:9b:00:07:79:d5:
         7c:0b:25:cc:7f:57:16:25:56:45:cd:70:4d:6e:3b:4e:b5:87:
         70:5b:60:3c:35:a8:1e:99:c5:f7:d1:f3:c7:e4:43:30:9e:4d:
         85:1e:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:11 2026 by rpki-client