This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
File:                     pBG7PJekzTyP_HCtY6ny7JaSrbc.mft (raw, json)
Hash identifier:          x9zZtTbDxKY9F79RIFgXsp2lfTlcyN1nZi+G7z35Xnw=
Subject key identifier:   7C:99:80:3D:04:D4:9F:90:D0:C5:55:F6:F9:AC:0C:31:E8:B3:B5:A3
Authority key identifier: A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7
Certificate issuer:       /CN=A91EFD20/serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
Manifest number:          3A
Signing time:             Sun 25 Jan 2026 03:59:18 +0000
Manifest this update:     Sun 25 Jan 2026 03:59:18 +0000
Manifest next update:     Sun 01 Feb 2026 03:59:18 +0000
Files and hashes:         1: pBG7PJekzTyP_HCtY6ny7JaSrbc.crl (hash: qplZ2dEa/hoQZYAa9Und8FmPYFdTM9yq8sEY/Q0RlHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl
                          rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFD20, serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7
        Validity
            Not Before: Jan 25 03:59:18 2026 GMT
            Not After : Feb  1 03:59:18 2026 GMT
        Subject: CN=69759516-569d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:14:5b:11:77:cb:86:39:92:ec:96:35:df:
                    d9:fc:28:20:9a:0e:c0:19:35:12:36:03:98:f5:71:
                    37:67:7b:a8:80:67:88:ba:bb:a4:dd:02:9b:c2:08:
                    4b:53:2f:02:48:5a:8c:2d:81:a1:15:3d:d8:80:24:
                    81:d3:c6:fd:57:b2:18:35:64:35:6d:5e:ef:9c:fb:
                    ad:63:18:06:82:3d:52:5d:71:f6:a8:4f:92:43:1e:
                    44:f4:b9:81:fd:34:2e:e0:29:30:4e:da:a2:40:53:
                    0e:c1:58:0a:ec:63:1a:aa:c8:c6:c0:e2:45:02:8f:
                    ce:29:de:82:df:31:f1:f9:86:27:40:ed:9d:ec:9e:
                    eb:2f:61:69:b6:74:a8:62:f6:9c:1e:3a:9d:fe:d3:
                    a4:3f:94:8b:19:f5:4f:59:dc:5a:4d:a1:a1:f5:32:
                    5d:13:5c:a1:5b:d2:af:ae:b2:ab:7e:7a:0f:ad:09:
                    74:51:88:83:a2:d9:26:65:02:2c:48:7a:25:cb:24:
                    c6:68:87:45:0b:93:00:cb:5a:24:13:75:c2:e0:d8:
                    02:85:06:be:18:42:a7:d3:39:a7:39:e3:ce:f5:27:
                    4c:8d:f6:53:62:50:47:af:28:42:76:af:60:9f:fe:
                    67:4a:35:20:0e:35:70:f8:2a:be:f1:5a:c4:48:c7:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:99:80:3D:04:D4:9F:90:D0:C5:55:F6:F9:AC:0C:31:E8:B3:B5:A3
            X509v3 Authority Key Identifier:
                keyid:A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:13:e2:18:3a:8e:73:01:c7:9a:5c:15:57:0a:72:b8:09:f8:
         9f:61:95:74:47:6a:97:96:15:99:34:c6:e0:b1:de:53:d7:51:
         b9:ea:47:01:03:6a:e2:fa:0a:bb:c1:0d:4b:22:b4:d4:9b:30:
         68:8e:b7:29:64:56:21:1e:b4:d4:d2:1a:65:45:b1:83:8d:86:
         81:a2:3d:8d:da:12:e8:63:5e:4d:b9:47:05:84:9f:ba:42:74:
         ec:80:ef:b3:20:45:d7:47:0c:0b:9f:2c:ae:37:67:54:ee:dd:
         09:98:67:bc:74:e7:8a:ac:ae:db:e3:58:ff:a7:22:11:5f:62:
         ca:1c:36:70:76:c0:98:8b:45:31:c0:b6:b8:da:bc:99:2e:50:
         1b:07:a4:8e:12:1d:b4:34:31:1d:20:ca:85:e0:fb:de:7e:a8:
         91:98:33:32:c4:81:c4:ae:08:4d:72:7e:ac:ea:32:26:73:be:
         86:0b:38:0c:c7:f0:f8:dd:98:4c:5c:a2:1d:be:82:8b:cd:83:
         24:4f:f6:71:dc:fe:56:9e:f1:3b:3d:14:b0:4f:05:1b:cc:0b:
         5f:c4:f6:d5:57:be:f5:93:84:48:14:80:9d:4a:14:76:f2:7a:
         e0:b2:c3:5a:d1:92:48:dd:11:4d:37:95:1a:a0:3d:5d:38:07:
         b0:4c:aa:21
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
RkQyMDExMC8GA1UEBRMoQTQxMUJCM0M5N0E0Q0QzQzhGRkM3MEFENjNBOUYyRUM5
NjkyQURCNzAeFw0yNjAxMjUwMzU5MThaFw0yNjAyMDEwMzU5MThaMBgxFjAUBgNV
BAMMDTY5NzU5NTE2LTU2OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDK5hRbEXfLhjmS7JY139n8KCCaDsAZNRI2A5j1cTdne6iAZ4i6u6TdApvCCEtT
LwJIWowtgaEVPdiAJIHTxv1Xshg1ZDVtXu+c+61jGAaCPVJdcfaoT5JDHkT0uYH9
NC7gKTBO2qJAUw7BWArsYxqqyMbA4kUCj84p3oLfMfH5hidA7Z3snusvYWm2dKhi
9pweOp3+06Q/lIsZ9U9Z3FpNoaH1Ml0TXKFb0q+usqt+eg+tCXRRiIOi2SZlAixI
eiXLJMZoh0ULkwDLWiQTdcLg2AKFBr4YQqfTOac54871J0yN9lNiUEevKEJ2r2Cf
/mdKNSAONXD4Kr7xWsRIx/z9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfJmAPQTU
n5DQxVX2+awMMeiztaMwHwYDVR0jBBgwFoAUpBG7PJekzTyP/HCtY6ny7JaSrbcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGRDIwL0MyNkZBMjc2QTFE
QTExRjA4MEIyNjQ1M0M0RjlBRTAyL3BCRzdQSmVrelR5UF9IQ3RZNm55N0phU3Ji
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcEJHN1BKZWt6VHlQX0hDdFk2bnk3SmFTcmJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG
RDIwL0MyNkZBMjc2QTFEQTExRjA4MEIyNjQ1M0M0RjlBRTAyL3BCRzdQSmVrelR5
UF9IQ3RZNm55N0phU3JiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALwT4hg6jnMBx5pcFVcKcrgJ+J9hlXRHapeWFZk0xuCx3lPXUbnqRwED
auL6CrvBDUsitNSbMGiOtylkViEetNTSGmVFsYONhoGiPY3aEuhjXk25RwWEn7pC
dOyA77MgRddHDAufLK43Z1Tu3QmYZ7x054qsrtvjWP+nIhFfYsocNnB2wJiLRTHA
trjavJkuUBsHpI4SHbQ0MR0gyoXg+95+qJGYMzLEgcSuCE1yfqzqMiZzvoYLOAzH
8PjdmExcoh2+govNgyRP9nHc/lae8Ts9FLBPBRvMC1/E9tVXvvWThEgUgJ1KFHby
euCyw1rRkkjdEU03lRqgPV04B7BMqiE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:19:27 2026 by rpki-client