This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File:                     BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier:          nHf9CM0EL178+GoighapvAWW/BbGaTKTwvw/1TSQyPU=
Subject key identifier:   CD:CF:28:6A:55:6E:A2:B7:A3:97:BE:FA:FC:DE:59:56:66:69:B8:E1
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer:       /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial:       0435
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number:          042A
Signing time:             Sat 24 Jan 2026 23:32:48 +0000
Manifest this update:     Sat 24 Jan 2026 23:32:48 +0000
Manifest next update:     Sat 31 Jan 2026 23:32:48 +0000
Files and hashes:         1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: +ZDtQcUZp5g0M3WttGmcYviuhOGVwh2SHWZRnOT3p2Y=)
                          2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: yEVRrXufQh+Qc/HqPk/jAvaqGmnT+PN1jZ/kXTfyo9A=)
                          3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: hYiudA2rwhN316Pb5lt+GNf53uhu2FFhMUzTaTRI2hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077 (0x435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
        Validity
            Not Before: Jan 24 23:32:48 2026 GMT
            Not After : Jan 31 23:32:48 2026 GMT
        Subject: CN=697556a0-1e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1b:55:cb:5d:41:96:1e:fb:61:dc:cf:e0:59:
                    90:99:49:92:00:bc:ad:86:71:11:ac:fa:f7:5a:ca:
                    76:37:43:7e:99:63:13:18:7f:52:e7:8f:17:92:94:
                    a4:60:f3:c1:94:bb:90:f2:f8:d8:b3:aa:86:fa:b3:
                    4f:8c:a5:a6:bc:00:0f:61:04:9b:83:0a:83:bd:66:
                    77:6d:aa:e0:fd:f9:2e:75:27:dc:60:4c:f3:9e:7b:
                    64:78:9c:59:47:81:98:0e:99:e4:92:73:23:98:43:
                    d5:5f:d8:0e:a8:f5:4c:00:f5:4f:8d:0a:b9:92:d7:
                    15:85:6e:a7:93:0e:12:6d:59:4f:c4:f7:6a:b6:62:
                    1a:32:11:34:a3:95:b8:3e:99:4f:0e:f5:1a:2b:20:
                    24:b2:f1:7f:98:ad:ae:18:de:61:c7:87:d7:10:b5:
                    fb:d3:66:7b:6b:af:2b:be:de:8b:31:b2:01:f5:2c:
                    50:cd:44:e4:56:31:9f:df:eb:a5:c0:bd:a1:80:3c:
                    c6:0c:70:65:b6:ce:d6:af:b0:7f:64:74:d1:d4:50:
                    be:d4:86:f6:08:df:e0:b0:d8:76:3f:22:4a:a0:2a:
                    46:f5:95:82:f9:e3:44:35:5a:24:b7:1d:08:92:fb:
                    ad:b0:0d:a3:0e:33:fd:02:41:2a:68:97:0b:ae:57:
                    43:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CF:28:6A:55:6E:A2:B7:A3:97:BE:FA:FC:DE:59:56:66:69:B8:E1
            X509v3 Authority Key Identifier:
                keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:0c:be:d2:09:82:ad:96:81:df:0c:e7:44:da:f9:0a:43:4d:
         f9:e3:ae:22:ee:c7:00:b8:5f:0b:8d:c8:ca:56:b8:b7:59:9b:
         2e:87:30:6e:c5:56:b2:e5:16:3e:37:23:2c:27:db:e5:66:a6:
         18:8a:b9:d8:ca:f0:36:bc:b4:4c:20:57:d2:92:b1:31:24:20:
         ad:89:db:51:cf:3c:4f:e4:d6:df:a9:5b:ff:fd:5c:be:c2:bd:
         be:21:0b:88:8d:8c:9c:3f:02:24:79:c5:3e:fa:b6:78:d7:6d:
         3c:2f:6d:4c:6a:cc:a0:95:c7:60:96:39:32:08:b8:c8:53:ff:
         07:3b:91:cd:62:70:bc:b8:f1:33:d2:ba:b1:1f:d4:32:00:f1:
         82:bc:67:eb:65:43:7d:c7:33:ab:d7:b0:c9:59:3e:d1:1f:bf:
         67:e7:b7:4c:a7:e2:83:e5:c6:c3:98:28:77:ad:08:b2:a6:9d:
         2d:c9:8b:0c:67:34:60:b5:dd:09:76:7a:0e:aa:fe:e7:0a:57:
         a0:b5:50:c2:24:93:ec:bb:08:10:36:de:81:5f:1f:2c:34:75:
         22:ac:aa:a1:29:82:dc:68:4e:37:0d:43:4a:a2:3c:7e:db:8e:
         c2:62:b0:20:b2:f7:d7:6b:9a:eb:be:02:d9:3e:c8:69:9b:bf:
         79:b6:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:39:13 2026 by rpki-client