This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
File:                     BstI9X1UOpeC2KfJbaTh3tvDwws.mft (raw, json)
Hash identifier:          i9u4Jw6ff2iB361wpQbrXg7WU/ZFJArMo6l53D3i13w=
Subject key identifier:   50:B6:D1:C5:98:9E:54:63:C5:41:FD:2F:7E:F1:BF:07:7C:C4:EB:96
Authority key identifier: 06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B
Certificate issuer:       /CN=A91E2EFF/serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
Manifest number:          74
Signing time:             Sun 25 Jan 2026 05:57:12 +0000
Manifest this update:     Sun 25 Jan 2026 05:57:12 +0000
Manifest next update:     Sun 01 Feb 2026 05:57:12 +0000
Files and hashes:         1: BstI9X1UOpeC2KfJbaTh3tvDwws.crl (hash: KmZAd/JTNQ8b/bkLseVlxOh0kL5xfF+aH0+ewGlynNQ=)
                          2: 3698C9BA484A11F0B96B9D10C4F9AE02.roa (hash: 3/VlviI5lXmsXT9HHGTTjCEqy33hQJaRKWakW7gYvqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl
                          rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2EFF, serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
        Validity
            Not Before: Jan 25 05:57:12 2026 GMT
            Not After : Feb  1 05:57:12 2026 GMT
        Subject: CN=6975b0b8-8974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:f8:74:ec:73:d8:0e:d7:1f:18:d5:a9:83:
                    b4:2b:c0:c1:b5:76:a0:1a:47:9c:76:ff:08:45:ba:
                    5d:3d:31:a5:0f:db:54:62:8b:63:88:24:7a:7b:49:
                    a6:5b:88:02:fd:a1:47:99:82:9a:e9:9d:0f:c1:ea:
                    cd:32:07:ea:a2:49:33:c5:6e:a4:a4:03:dc:8e:12:
                    f3:39:e2:14:1f:06:d4:ac:d7:9e:25:f1:ef:1f:3a:
                    ea:02:a7:92:f1:57:db:47:f8:cb:82:e6:ee:df:fa:
                    e8:96:f4:10:b5:a8:49:35:1c:c7:65:34:4d:35:4d:
                    03:e5:43:89:c7:13:f9:02:fc:66:3c:ce:6d:2b:e8:
                    c5:b5:4b:be:e3:95:c2:54:b8:79:cb:5a:0d:02:9f:
                    a5:08:4a:fd:d4:5b:2b:28:29:23:19:d5:eb:72:f4:
                    6e:50:43:05:09:4f:77:7f:86:d7:2a:a1:83:92:c9:
                    e4:f8:2c:0b:bf:ff:60:4c:55:7d:42:d7:e8:be:ac:
                    0f:3a:11:06:0a:1c:33:33:76:f0:2b:3c:ea:25:5a:
                    82:67:6c:c3:87:13:7f:46:f0:36:9e:7d:df:2a:f1:
                    9a:7b:a0:9d:b6:19:53:d5:0c:0a:ae:5d:2d:1a:c8:
                    dd:96:3e:6f:6a:ab:49:75:e3:f5:6d:8e:eb:72:ce:
                    41:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B6:D1:C5:98:9E:54:63:C5:41:FD:2F:7E:F1:BF:07:7C:C4:EB:96
            X509v3 Authority Key Identifier:
                keyid:06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:17:57:4e:79:28:c7:f2:a5:3e:53:85:9e:96:b5:81:17:
         f5:64:87:b2:2b:a0:bd:21:1c:b9:1e:b6:23:e2:9a:af:3f:ae:
         07:09:49:2b:60:75:3e:4f:3b:01:74:da:37:e5:19:bf:5c:80:
         1c:75:1c:18:5e:24:38:2f:c9:35:8d:f6:75:bb:e2:96:be:5f:
         bd:5a:a9:e4:cf:e1:de:58:be:2a:cc:cc:c9:1c:08:b2:28:36:
         ab:44:3d:07:5a:25:57:19:32:fd:8a:16:48:ba:1d:dd:97:37:
         bb:4a:7a:eb:c5:98:fa:eb:08:f4:ce:e0:c5:eb:5d:39:72:54:
         1f:46:76:37:9a:74:64:dd:68:11:b0:8a:7f:60:8d:2e:4c:a2:
         9d:53:04:e8:e7:e2:c9:82:b7:e9:75:c2:c9:22:3f:a2:ef:6b:
         cf:10:83:6e:87:be:ca:79:28:0f:67:59:65:19:13:f0:06:cb:
         e3:d7:00:c2:c4:24:71:79:53:8f:f7:eb:21:c0:b9:95:14:15:
         78:89:76:6d:6f:e9:4d:9c:77:1d:0b:e4:f0:33:c2:5e:de:13:
         8f:c6:f3:94:33:51:62:3a:91:35:1f:0e:46:f5:f6:b2:5d:bf:
         93:7d:54:31:d1:c2:e3:84:e0:5c:e2:95:c9:3a:5c:aa:31:99:
         a2:4c:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:36:08 2026 by rpki-client