This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
File:                     bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json)
Hash identifier:          4HKcDUISfPVLwnAxVLf9o20mh81Q17DqxhIs4k7fBak=
Subject key identifier:   B5:DA:CF:9B:AC:CF:B5:BB:6E:E5:08:CC:CB:92:38:2D:73:5E:3F:71
Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C
Certificate issuer:       /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
Certificate serial:       07C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
Manifest number:          07BE
Signing time:             Sat 24 Jan 2026 20:43:52 +0000
Manifest this update:     Sat 24 Jan 2026 20:43:52 +0000
Manifest next update:     Sat 31 Jan 2026 20:43:52 +0000
Files and hashes:         1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: FWJZE9HGvEA45GasjXk61LmkcPYlISLC63UM1BbH6cw=)
                          2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: RwnDEUUAUVLXLFBhhOVnnsEMoCnye/eCleYIc6KZk8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl
                          rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1989 (0x7c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
        Validity
            Not Before: Jan 24 20:43:52 2026 GMT
            Not After : Jan 31 20:43:52 2026 GMT
        Subject: CN=69752f08-8e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:52:99:3a:57:ed:45:ad:c4:d9:56:20:41:
                    bc:e7:3d:43:f5:3f:8d:22:e7:bf:47:b9:5e:e4:a2:
                    fd:c6:60:9b:bd:16:9c:eb:56:a8:8b:07:b6:9a:b4:
                    0c:51:0d:b8:00:6a:c5:e4:bc:65:6c:37:82:63:0d:
                    c1:21:c9:41:f7:e1:95:6d:f5:91:2f:99:83:78:1a:
                    5e:8c:65:af:55:2e:a4:d6:54:b1:38:6d:18:3a:b8:
                    f0:d5:dc:51:86:7a:d8:3c:13:40:be:cc:cf:d0:d2:
                    32:45:04:8d:1e:a9:c7:e5:99:b8:c7:e7:51:88:cf:
                    c2:30:6f:aa:26:c8:b8:ac:7e:6c:73:d5:72:5d:84:
                    ec:be:d5:24:0f:78:69:3f:77:54:43:0d:c7:38:1e:
                    8f:3f:03:26:94:ac:78:c1:b0:1a:ad:05:59:52:46:
                    2a:f8:5f:ba:4b:31:64:b4:d8:43:32:c0:da:c9:31:
                    46:7b:6c:07:6c:f9:6b:83:3f:13:a9:57:8f:01:92:
                    c7:a2:94:8f:6e:8e:85:fa:a0:eb:51:3d:75:a1:4f:
                    fd:ac:51:8b:63:8b:b7:a3:f2:89:64:af:12:40:81:
                    8f:7a:0a:fa:06:f8:bd:41:8c:d2:cd:d4:04:0c:1b:
                    94:a6:a0:51:7b:c9:d3:37:76:46:ad:f4:0e:68:2e:
                    eb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DA:CF:9B:AC:CF:B5:BB:6E:E5:08:CC:CB:92:38:2D:73:5E:3F:71
            X509v3 Authority Key Identifier:
                keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:db:0e:11:87:92:5b:22:ae:6a:7c:ae:5f:f6:33:bf:d8:
         af:43:7e:a2:bc:f6:67:83:48:e8:18:b9:db:b1:ac:46:09:ff:
         1b:9b:ee:b0:21:55:eb:28:02:de:59:fb:e0:8d:2c:9e:de:7e:
         af:f3:c6:69:43:fb:51:3d:48:20:d0:08:86:3f:a3:7c:1a:5e:
         08:56:22:dc:3e:5d:45:af:88:6a:e1:ae:28:be:cf:42:d4:d9:
         d1:35:9d:07:4d:ae:59:22:ac:a6:8e:90:6b:75:01:33:9f:17:
         1d:4d:3b:8c:60:b2:02:4d:e4:ed:f1:7f:87:bd:ba:1d:55:13:
         58:b6:83:32:50:cb:90:7d:26:4d:6d:d9:90:94:bb:73:1a:0c:
         09:5b:df:8c:b1:ec:19:bb:ad:c4:53:49:6b:10:02:71:a4:3a:
         ee:5d:fc:ed:79:2b:85:70:1d:12:ce:bc:bd:02:f2:e4:28:8e:
         20:cc:a4:78:57:90:72:d0:dd:2b:01:5e:a6:17:28:27:1d:31:
         0d:d3:1e:38:6d:74:b7:77:14:ff:58:c8:4c:64:67:5e:6b:28:
         8a:47:7c:59:fa:ff:2e:3d:f7:aa:b6:2f:d3:52:1d:ea:45:a7:
         40:52:52:70:96:d6:a0:a4:03:49:e4:47:0c:0c:3d:2b:2f:0c:
         aa:1a:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:34 2026 by rpki-client