This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
File:                     1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json)
Hash identifier:          tXLePzlcaaTLJbz4lHKOgO9CqyGLpIO/XRnjJrjJiyI=
Subject key identifier:   5C:07:38:A4:C3:01:62:ED:B3:E2:A9:03:FF:16:3C:20:B1:58:4C:8B
Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
Certificate issuer:       /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Certificate serial:       080A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
Manifest number:          0804
Signing time:             Sat 24 Jan 2026 20:25:22 +0000
Manifest this update:     Sat 24 Jan 2026 20:25:21 +0000
Manifest next update:     Sat 31 Jan 2026 20:25:21 +0000
Files and hashes:         1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: 94GRZkNfpfYknc+UzilqjohnW9czG5tHDUK8yAHlBsc=)
                          2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: IYriA7iqlPrIGEwVZWLwnn3g/0OVL8pkTIBJVf9/TyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
        Validity
            Not Before: Jan 24 20:25:21 2026 GMT
            Not After : Jan 31 20:25:21 2026 GMT
        Subject: CN=69752ab1-d512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:1e:70:b6:76:bd:4d:9b:a0:14:d6:eb:26:
                    ec:c9:b6:28:8c:a3:74:2b:27:84:2b:2e:74:2a:bf:
                    8b:da:88:f0:bb:38:45:1c:1e:86:86:0d:6d:06:16:
                    1c:3e:4f:0c:34:3c:f0:cd:1c:b8:8c:ff:cd:7e:7f:
                    f1:a2:d9:03:7f:cd:3d:63:d2:22:92:a8:09:83:f8:
                    71:f5:33:52:1c:f2:17:c6:db:5d:72:32:b5:5a:cb:
                    a0:bb:af:07:23:5f:1b:bd:09:99:ae:a9:65:95:26:
                    2b:65:f4:51:c2:e2:5f:f0:39:8f:99:0f:6e:2f:f6:
                    56:f0:f5:aa:c7:6f:39:e7:20:31:14:34:35:32:05:
                    63:cf:57:f6:0e:2a:7b:84:db:85:fe:3c:3e:c1:a3:
                    10:cc:48:eb:c3:bd:df:4a:15:da:40:e2:82:23:cb:
                    a4:45:e1:5c:ef:9e:e8:92:79:4c:1d:40:ca:43:e1:
                    a1:bc:06:50:77:17:56:6f:98:28:11:ae:52:96:20:
                    e0:46:d0:70:06:3f:80:49:19:1b:3c:0a:55:27:9a:
                    b1:3f:c7:5d:f1:e6:81:dd:11:bb:1c:b9:ab:3e:d5:
                    65:e3:d7:cd:f4:b5:f1:23:b0:2c:72:c3:a7:f6:ba:
                    5e:17:8d:05:30:83:43:28:76:10:1f:35:e0:b7:de:
                    49:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:07:38:A4:C3:01:62:ED:B3:E2:A9:03:FF:16:3C:20:B1:58:4C:8B
            X509v3 Authority Key Identifier:
                keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a2:23:13:e6:f9:1a:95:db:18:ea:98:7e:fc:19:ec:18:92:
         60:e2:76:80:d6:2c:94:3b:f5:76:01:39:98:44:32:d2:26:f5:
         f1:52:b1:9d:85:93:a8:26:92:dd:4d:31:97:bc:8a:07:8f:d2:
         7e:51:73:b3:2e:4d:fc:33:75:3b:87:b6:3d:4f:0d:36:36:49:
         b9:3a:0a:80:27:05:64:09:fb:84:37:eb:ce:ae:94:ca:a6:ef:
         2c:14:92:d9:98:3a:6c:75:81:18:67:c7:88:95:a4:f8:1d:0d:
         51:26:f0:25:39:24:9c:f1:a1:47:6b:79:88:ee:2f:4b:d0:cb:
         92:3e:25:ab:d8:52:8d:87:79:be:d5:73:8e:3c:b4:c9:30:7e:
         7d:99:60:07:62:3e:fe:26:51:62:b3:4d:c6:f3:56:b1:32:eb:
         af:9a:bb:5a:dc:22:95:43:ba:7e:91:5b:d8:d9:bb:b4:02:4c:
         a7:68:32:41:af:f4:50:4d:80:b2:8e:fd:74:4a:d2:2f:0b:99:
         9e:de:af:75:14:87:9f:b2:c7:c0:06:b6:8e:3b:94:cd:9b:7d:
         54:37:f3:c3:d8:ea:89:b0:f1:80:c4:fa:be:d9:d1:d1:d1:4b:
         fa:8f:03:27:dc:3d:f8:36:5c:d6:01:c4:a6:64:2b:c9:10:d5:
         f6:a8:91:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:41 2026 by rpki-client