This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
File:                     RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json)
Hash identifier:          rPbK+W7u20tdPYYLlZ6+bVIufNGfi9F1YeRFNfg9wY4=
Subject key identifier:   25:4A:D1:20:72:FD:B7:9A:27:4B:2E:C6:A0:EC:04:67:2B:75:C2:70
Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Certificate issuer:       /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Certificate serial:       07EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
Manifest number:          0FC5
Signing time:             Sat 24 Jan 2026 20:34:37 +0000
Manifest this update:     Sat 24 Jan 2026 20:34:37 +0000
Manifest next update:     Sat 31 Jan 2026 20:34:37 +0000
Files and hashes:         1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: egmOvCZTXCqFQwaPCa4TNHhGhhiuMKv34Sxs9TxU5c4=)
                          2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: EUTRK8zTZimnCog0ijkhm9FDi0k0sx3nv6s5rDsc3FM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
                          rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027 (0x7eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
        Validity
            Not Before: Jan 24 20:34:37 2026 GMT
            Not After : Jan 31 20:34:37 2026 GMT
        Subject: CN=69752cdd-57eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fd:86:69:0f:f1:ee:d8:ff:d5:c6:11:c8:43:
                    96:df:36:02:9a:88:c8:e9:a8:f1:e2:15:eb:83:7e:
                    83:4d:26:f7:6a:e7:92:2a:d4:cc:44:ff:9b:5f:28:
                    0c:e9:ba:04:4c:65:de:7a:3d:ff:eb:94:f7:ac:4e:
                    b7:83:85:62:90:8e:e6:9f:a0:91:13:5d:63:ec:4f:
                    5e:52:f3:9b:9e:86:11:dc:81:0f:9d:c3:f5:62:20:
                    d4:e4:49:73:ec:02:48:68:47:8b:2e:1c:fa:04:bb:
                    28:68:93:c6:96:2f:7d:de:63:74:2b:c3:2b:c6:59:
                    e6:2d:2e:c8:da:cc:82:42:8d:93:46:4f:df:9f:9e:
                    6c:16:5a:d6:45:e2:3b:90:c6:dc:7e:43:e0:c3:26:
                    4c:e1:60:57:af:e5:da:9e:81:2c:f1:94:bf:e6:f6:
                    ca:04:16:62:73:68:4b:98:22:a2:bf:80:85:54:15:
                    09:8c:cd:6b:e2:dc:3d:ed:49:4a:a1:eb:56:1d:cf:
                    d9:6d:9f:e8:7b:3f:82:b7:94:8b:43:b7:29:2c:ac:
                    44:d2:22:91:26:b2:0d:c3:44:16:d6:a4:4a:ff:52:
                    7e:0b:ba:97:73:b8:f8:ce:30:0c:2f:54:d2:1a:bb:
                    f3:7a:68:32:d6:c8:0b:c3:f6:bd:89:17:19:74:dc:
                    a8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4A:D1:20:72:FD:B7:9A:27:4B:2E:C6:A0:EC:04:67:2B:75:C2:70
            X509v3 Authority Key Identifier:
                keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:bb:b1:8c:44:34:36:fc:1c:95:08:a4:5f:b8:a8:ee:fd:3b:
         f9:c0:23:a1:63:c0:54:e4:02:80:8f:7e:a3:89:93:37:29:e6:
         45:bd:06:7c:64:e4:44:c8:ac:cf:25:d2:71:e2:e0:86:6e:3e:
         14:4c:57:8e:12:3a:58:76:a7:c3:0c:99:80:ab:10:77:28:ba:
         07:a2:c7:4b:58:89:1f:d7:57:bd:0c:b0:7d:f2:98:ed:53:a3:
         a6:8a:f7:9a:2e:46:8a:36:4d:62:ab:44:ba:4b:32:88:2d:f2:
         b4:3b:46:d3:32:4d:9a:c7:1e:99:e9:b5:33:48:1b:6d:11:6b:
         68:dc:d7:5e:b0:aa:71:a3:08:cf:3d:31:23:ec:a3:1f:a2:4f:
         19:1b:b7:d9:6a:2b:06:2c:eb:43:c6:39:8e:7a:c6:11:58:2b:
         f7:2b:d6:43:90:43:59:44:0e:cc:48:c1:5e:7d:ae:b8:ab:1c:
         35:84:9b:bd:ca:b5:58:97:aa:40:d3:70:10:d4:b2:47:94:65:
         53:2d:cf:0c:cf:fd:fc:43:65:f7:9a:e3:4f:26:27:2e:e8:09:
         0b:ee:0c:b1:1d:81:4e:c5:43:05:46:5d:07:ca:ad:2f:9c:7d:
         e0:0b:e9:5a:13:c7:93:fb:8a:d7:49:fc:74:30:3e:05:5b:06:
         64:28:fe:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:43:55 2026 by rpki-client