This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
File:                     BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json)
Hash identifier:          AkokrXBt3OUNT5UdMBB96pHX5XjOZ3f1Fl8psaOwiUM=
Subject key identifier:   84:02:3A:1B:83:BD:E7:B2:72:68:D6:F1:1C:91:5A:E3:84:68:47:88
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Certificate issuer:       /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial:       170F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
Manifest number:          16F5
Signing time:             Sat 24 Jan 2026 16:24:17 +0000
Manifest this update:     Sat 24 Jan 2026 16:24:17 +0000
Manifest next update:     Sat 31 Jan 2026 16:24:17 +0000
Files and hashes:         1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: poR7BWXS8OHQ9zB6a6i58sPZz1Dw/gK7nPKES8bCaBA=)
                          2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: UDYOsBhZuGxPbiC3JStIpRl29abp1z9bfR4dnN93V5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5903 (0x170f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
        Validity
            Not Before: Jan 24 16:24:17 2026 GMT
            Not After : Jan 31 16:24:17 2026 GMT
        Subject: CN=6974f231-3fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:ef:34:8b:6e:d1:99:dc:58:31:50:63:3c:
                    d8:85:02:ba:3d:8c:4d:0f:ca:bf:06:30:b2:d9:73:
                    b3:88:89:90:8e:ae:85:68:dc:7e:41:c7:34:73:f0:
                    f8:66:74:a4:71:1d:b2:44:52:71:1e:9f:d9:17:72:
                    c2:bb:e3:44:f5:17:0e:45:83:b6:1a:73:aa:c0:82:
                    db:09:fb:4a:2b:9e:5b:08:19:5e:02:41:03:34:3b:
                    f5:9b:84:11:b2:ba:6f:f9:25:bc:46:e5:11:88:0f:
                    48:87:ec:f7:f3:e2:22:9f:25:2c:d8:6d:09:b1:46:
                    b0:18:ea:34:eb:09:6b:19:0e:41:ad:75:28:bb:d3:
                    97:af:10:a3:3c:57:a3:49:52:d7:30:f3:15:52:6f:
                    4c:dc:e5:e6:49:80:ee:ef:85:97:be:38:1f:0e:e6:
                    61:37:cf:37:fd:5a:12:c7:66:f8:e3:15:b6:50:73:
                    dc:14:c2:69:0b:43:a8:9c:75:ff:1a:25:8b:00:1b:
                    68:ca:b2:ea:79:d0:bc:7e:20:d4:a8:69:89:38:a2:
                    56:ca:5a:87:2c:ec:67:8c:6b:e2:9b:17:0f:f1:6d:
                    d0:74:83:51:a5:87:d8:27:71:4b:f2:16:eb:4a:1e:
                    d1:50:3e:f8:ad:82:1d:53:ac:d3:ef:93:c6:09:ab:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:02:3A:1B:83:BD:E7:B2:72:68:D6:F1:1C:91:5A:E3:84:68:47:88
            X509v3 Authority Key Identifier:
                keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:23:30:a4:b2:47:c2:76:b9:b6:5d:a1:39:50:2f:51:00:d9:
         d1:97:5e:b5:3a:85:e2:04:45:de:98:15:df:d5:ec:bd:c2:78:
         34:fb:0b:d9:90:79:eb:5d:cf:38:90:ce:5f:4e:85:fb:5c:9c:
         b2:0d:82:40:03:fb:fa:57:6d:e3:99:81:62:b5:60:88:0e:bd:
         5b:d2:2e:e6:ce:58:10:3b:75:cd:65:7d:10:20:c3:52:97:7e:
         52:dd:77:26:7f:cf:06:d4:08:82:25:85:25:c4:ca:2a:a8:fe:
         51:7c:e5:96:46:6a:23:b4:0b:d8:6f:d5:48:c3:1d:d0:5d:33:
         32:c7:47:c2:91:ba:61:ee:9c:4a:65:2b:85:a0:2a:34:c1:97:
         1c:9f:87:de:c2:50:39:14:e2:07:3f:11:27:28:6d:09:b2:56:
         0e:58:54:85:60:1e:33:e0:ff:56:4a:ba:00:8b:f9:d0:32:50:
         00:37:83:33:72:1b:8a:38:03:38:b7:60:56:74:f5:10:76:6e:
         84:9a:b2:01:c1:5e:8e:94:e4:2a:40:6e:ff:58:65:78:fa:bb:
         29:86:8e:13:46:2d:65:54:66:a3:e0:2c:1d:75:16:e3:fa:fe:
         24:37:12:dd:32:81:b2:50:33:a0:e2:54:6b:7e:02:68:97:6a:
         7a:60:14:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:20:57 2026 by rpki-client