This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
File:                     bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json)
Hash identifier:          TkHFQbsKXSmsyvjAqIlO/QZdFQ3qGM7tbK/65y2bLeY=
Subject key identifier:   27:AE:C5:F6:6D:E2:80:B5:74:C2:C0:26:77:00:27:52:79:EE:46:F7
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       370A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
Manifest number:          3620
Signing time:             Sat 24 Jan 2026 14:17:37 +0000
Manifest this update:     Sat 24 Jan 2026 14:17:37 +0000
Manifest next update:     Sat 31 Jan 2026 14:17:37 +0000
Files and hashes:         1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: YFLa5kvibqpGFnTLJlm0SiAEL1I9E78RpREqY5ktlHw=)
                          2: 119B023E80A111EFAC559545C4F9AE02.roa (hash: 1F2PjvvkE2AaSgeG4V1HwpJyJzd9D1cyafOqmUFFDW4=)
                          3: BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (hash: 1GKrFOo4PRyIC5kVawdkCoK2XveZwW1+PoQcaZjaQts=)
                          4: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: +f3UhsaAUpz9PsmzKRjsmaNPrmF4rqNZQU/a29jOYXA=)
                          5: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: XtMBMBocrLwPpOx8n83/oDiCHYCCR2mBVEmPLFnSE28=)
                          6: 88978730772311EBB972032EC4F9AE02.roa (hash: Pxr8NCWMZtWJcRw6TEct7JEjFahdBNRUJrI0ahvRgLM=)
                          7: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: SHfxrOPXs2xCvoYHmprRYsQB4kpv3qSs6NXFqQDThDo=)
                          8: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: XQUxJKrG/4jg7RU3mf165JAmUkfpGEaIQ86XSTUnYoU=)
                          9: 89A73D46772311EBB972032EC4F9AE02.roa (hash: x4ObJ0WiyB3L1Gxbu271TDNMhdlJGG/Bty+LE9Lf0SI=)
                          10: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: ruLamf4e42DcI6xOKev/6+m8zhfkS5Gid2r1rhcza8I=)
                          11: 181D46FCEE5611F0B0ABEB00546F56BC.roa (hash: 1S29d4nvNSsRSVL1Gx1w3p5mAVBc0qAACJOrNvlCC14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14090 (0x370a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Jan 24 14:17:37 2026 GMT
            Not After : Jan 31 14:17:37 2026 GMT
        Subject: CN=6974d481-7113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:39:c0:64:fe:bd:27:57:1d:45:fa:65:4c:
                    ca:7a:40:ba:84:93:ac:6d:ce:ed:ae:39:9e:5c:26:
                    98:57:8b:3a:01:ae:49:ed:0e:ce:e7:e7:81:f2:88:
                    3f:06:2f:52:61:9c:d0:22:9f:c0:94:c4:67:17:2e:
                    ba:72:6f:b4:6c:07:84:0f:d8:c6:e5:b0:9a:5c:1d:
                    db:9c:05:e0:69:f3:61:a1:de:53:85:de:78:f9:6d:
                    19:39:dd:11:30:ad:80:66:bf:1f:3c:36:9e:70:96:
                    ab:89:fb:fd:14:c9:41:5e:ea:91:75:b9:5b:9c:bc:
                    b4:11:03:5c:f6:be:70:25:0e:01:32:c0:a9:e3:e6:
                    06:80:1c:31:b4:d5:8c:0b:a0:74:f5:c8:d3:d2:59:
                    06:6e:c0:53:61:d0:5a:38:6c:ed:7c:d1:cb:2a:b7:
                    c8:a5:2e:14:4e:1d:d0:03:5f:74:4a:4a:cd:2c:ea:
                    72:0d:22:94:f5:6c:e0:3b:0b:fa:ec:05:8b:55:a6:
                    2a:de:4e:71:99:6a:d6:15:46:d0:1d:43:b0:22:1f:
                    e3:48:0b:8b:50:5e:6c:aa:68:12:5f:0a:50:df:c6:
                    0e:ff:bb:46:1c:1b:db:bf:62:ad:67:4d:84:81:4e:
                    c5:51:59:30:dd:50:73:ad:ae:a2:e7:2c:34:1c:b8:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AE:C5:F6:6D:E2:80:B5:74:C2:C0:26:77:00:27:52:79:EE:46:F7
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:53:9f:2a:65:bb:4a:1b:b0:5a:96:98:b8:bb:a3:f8:24:8f:
         de:88:00:4c:20:9f:79:4d:23:2d:20:78:cc:27:73:df:07:5d:
         d7:a8:1e:b3:03:7a:53:f5:70:e9:28:57:3d:9a:3a:31:02:7e:
         f1:32:4b:9a:ad:2f:08:97:24:b6:05:07:22:3b:89:91:c8:ae:
         55:53:1b:1f:c4:5a:1a:05:af:35:50:be:85:98:65:d1:12:c5:
         f9:5f:45:96:b7:a9:f2:d6:15:00:12:9a:bf:37:50:7c:f6:fb:
         c8:e2:68:03:90:e1:31:cf:a3:05:e9:b9:1b:7e:2e:22:d9:fd:
         f4:f6:75:90:35:3f:2b:9c:f7:55:a5:42:f4:75:c6:0a:15:04:
         54:60:e1:5b:29:cf:11:28:b0:b6:89:af:4a:b7:81:65:56:8a:
         4c:04:b9:7b:ed:f9:b5:ed:61:4c:e6:6b:69:fa:a0:4d:11:0d:
         d8:96:d2:03:26:57:99:40:2a:ce:7f:af:d0:36:cb:0a:b9:e5:
         74:f3:e0:8d:2d:08:f9:42:ee:0b:69:e1:2d:ee:4f:05:69:5c:
         a2:f2:f6:54:44:96:ee:d5:ef:d8:e8:4a:82:c2:ba:44:cb:48:
         bf:4c:67:4b:7a:42:bf:06:b8:02:3f:4e:f1:1c:00:93:47:6c:
         dc:6b:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:45:27 2026 by rpki-client