This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
File:                     BoQptByg8Segp10v_LJsA6lfYHE.mft (raw, json)
Hash identifier:          JDvmhilybazp7sLVurMyJUt+QxqHjykEmm3Dfv+WnfU=
Subject key identifier:   B6:28:9C:D8:17:18:A6:1B:B4:AC:7C:61:15:26:25:09:EB:6B:CC:14
Authority key identifier: 06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
Certificate issuer:       /CN=A91CCABB/serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
Manifest number:          15
Signing time:             Sun 25 Jan 2026 07:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:17 +0000
Manifest next update:     Sun 01 Feb 2026 07:01:17 +0000
Files and hashes:         1: BoQptByg8Segp10v_LJsA6lfYHE.crl (hash: S0M6GQxytMQvU1pZOCks2c6He9qSTvFZmUgrTR4dzT4=)
                          2: BE1ACA36DD7911F088A95D31386F56BC.roa (hash: j+GVnaL8BPJQSWQPq5FtsM0SwBZ1v0wUH5GMij24NF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
                          rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 07:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCABB, serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
        Validity
            Not Before: Jan 25 07:01:17 2026 GMT
            Not After : Feb  1 07:01:17 2026 GMT
        Subject: CN=6975bfbd-5eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:a8:18:f3:b7:38:19:8e:de:dc:55:f3:8f:
                    ed:c2:fc:ea:92:c5:56:42:a2:a0:1c:0c:76:b9:96:
                    fc:76:6e:de:29:aa:60:6f:b2:e7:65:a8:98:c8:cc:
                    93:49:34:fe:6e:21:93:d3:96:2f:1f:4e:a0:c9:9e:
                    09:3b:ed:4c:61:ec:bf:53:46:12:ae:22:78:67:28:
                    4e:f2:3d:37:f0:da:19:47:2c:cb:8a:85:94:ed:6f:
                    bc:f7:d4:0e:64:ac:5c:7e:1f:5f:ba:f7:48:9e:2e:
                    1f:51:3d:bf:a4:c4:3d:18:42:d5:fc:a3:3e:8d:df:
                    5f:14:7f:3f:62:3f:4c:eb:6c:4c:87:f4:86:84:a5:
                    43:e0:4a:97:ce:20:84:ad:58:05:96:28:73:22:cc:
                    c6:e7:76:ca:77:8a:e1:70:68:ef:4d:38:6c:40:ba:
                    75:35:6d:77:e2:09:26:7c:49:06:ec:ba:7b:01:b8:
                    c3:2c:fc:5a:9b:82:65:f1:0b:a8:bb:97:e2:f4:8d:
                    1d:80:ab:42:be:e4:10:09:94:8c:f8:7c:54:26:da:
                    38:25:37:af:8d:a8:e8:cf:37:87:d1:cf:80:72:de:
                    c3:2c:78:fb:1d:47:1c:25:f4:02:54:53:0b:fb:12:
                    fe:21:12:38:b8:92:d5:45:18:07:72:a4:f1:04:ff:
                    30:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:28:9C:D8:17:18:A6:1B:B4:AC:7C:61:15:26:25:09:EB:6B:CC:14
            X509v3 Authority Key Identifier:
                keyid:06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:96:1c:fe:3c:fa:4a:50:79:88:12:25:57:c6:77:7f:1f:f2:
         ff:e5:25:a4:2b:35:b1:67:bd:ca:32:a4:80:9d:f3:c2:fc:3e:
         a1:65:04:d2:e2:96:7e:97:ae:ad:b6:14:66:35:2e:3b:f2:7d:
         b0:88:61:d0:87:06:6a:87:41:bc:13:66:79:80:d8:6c:55:82:
         20:f8:e5:25:43:6b:8a:1d:b1:eb:1a:cf:bc:0c:a2:05:c0:a6:
         59:87:d1:4c:61:f9:0a:be:19:20:5d:dc:39:b8:47:76:9d:d3:
         d9:3e:ec:1b:5e:c7:7e:44:a0:33:b4:ea:8d:ab:d5:83:35:04:
         20:0d:38:88:1d:69:59:2a:b8:03:3b:1c:3a:93:6f:b1:1f:1f:
         fe:7c:bf:eb:53:0e:b2:43:45:86:93:a9:da:68:81:f8:65:80:
         f3:36:e6:06:37:91:44:02:88:7d:d1:ee:35:d4:0b:7d:4a:a2:
         4c:a4:81:80:d4:a7:03:69:6d:3b:f9:53:3d:1b:42:17:a9:1a:
         58:f9:de:78:c5:8b:d4:43:f4:27:49:02:ab:6b:d4:33:03:d5:
         cf:24:30:b2:d9:fc:ce:75:f7:84:ed:9e:c0:8b:cf:1f:64:9b:
         bb:49:2e:33:18:1c:2c:11:a7:78:2a:1d:3a:81:0a:dc:e4:d8:
         f1:cb:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:33:49 2026 by rpki-client