This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
File:                     1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json)
Hash identifier:          SkW63TWlk4sGQnvpjgqi6Zr/RMu1najRnXjIWPjXX50=
Subject key identifier:   C7:19:9D:24:03:C2:CC:FF:4F:DD:12:C5:B0:7A:C2:D9:58:D4:06:F2
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Certificate issuer:       /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial:       15CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
Manifest number:          15B6
Signing time:             Sat 24 Jan 2026 16:29:52 +0000
Manifest this update:     Sat 24 Jan 2026 16:29:52 +0000
Manifest next update:     Sat 31 Jan 2026 16:29:52 +0000
Files and hashes:         1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: aRnS52k4Xi/R/65mJqcMd/9rOOe7LqL0Z7EVseo5GMY=)
                          2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: 4omxKGchAtANINcKNMUv81DprGm9m6mhlkl3cRG7vXI=)
                          3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: b5yX1QAOSGwKLnK6fw3PZvYuW4+NY2un1A6EM1jEmyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
                          rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5578 (0x15ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
        Validity
            Not Before: Jan 24 16:29:52 2026 GMT
            Not After : Jan 31 16:29:52 2026 GMT
        Subject: CN=6974f380-a7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6e:72:c0:5d:a6:7a:e3:c2:2f:51:65:d6:76:
                    6f:18:01:b1:e4:76:0c:fd:1a:96:08:85:44:1f:79:
                    ab:e9:e8:a2:15:9e:6f:d1:dd:00:e5:9f:6a:6b:c0:
                    cc:e8:0a:46:60:8c:c5:d4:2b:35:3f:54:b9:82:a7:
                    4a:5c:85:1e:75:88:8b:31:e9:e8:9a:c4:15:c6:2d:
                    74:49:9f:78:3f:53:98:8f:ab:e5:ec:37:2a:4b:97:
                    cd:00:9d:8c:78:b1:4e:75:c5:8b:f0:88:81:4b:99:
                    31:48:86:6c:da:f5:59:f2:02:6d:9d:e0:89:09:00:
                    8f:74:a2:00:37:ab:31:3a:04:14:ee:8a:be:e1:4e:
                    a5:14:31:ce:56:58:62:1e:00:77:15:e3:d5:5d:57:
                    77:29:ea:2a:6d:63:ed:01:8f:5e:17:08:62:b0:a0:
                    67:c9:8c:1d:84:57:11:56:00:34:01:44:54:d3:18:
                    df:79:cf:04:d1:21:73:ed:4f:3b:0a:11:0e:61:a5:
                    6f:b4:91:17:36:03:53:07:cb:56:a1:d3:01:d6:40:
                    31:f3:98:af:77:2f:dc:43:f1:9c:9f:bf:84:73:57:
                    3b:87:98:78:8a:08:1d:83:7e:14:ce:1e:25:5b:0f:
                    63:e6:63:ee:2d:8b:7a:57:55:96:fb:11:f3:02:0c:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:19:9D:24:03:C2:CC:FF:4F:DD:12:C5:B0:7A:C2:D9:58:D4:06:F2
            X509v3 Authority Key Identifier:
                keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:a6:ce:d5:b7:19:cd:5e:cb:20:88:1b:3a:e4:31:e1:ef:
         51:e5:c8:8a:e7:37:93:ae:b0:82:38:72:91:18:9a:ef:75:f2:
         c9:d5:4a:d8:01:03:ff:d7:fe:4d:0d:30:4c:f3:2b:0b:95:fa:
         80:88:91:ae:cb:f8:01:51:af:f4:88:7f:59:5e:1d:21:df:27:
         6b:26:bc:39:41:60:ee:07:4b:2d:dc:b5:38:5f:07:71:cc:6b:
         2b:1b:89:bc:16:f6:9c:c8:7e:aa:00:51:69:2a:89:da:ba:7a:
         98:7f:1d:ad:04:88:4b:54:ea:e6:bf:df:01:a5:6f:fa:ad:a6:
         60:1f:8b:93:19:9b:5e:3a:3e:c7:b7:9b:6a:46:6b:f0:67:ac:
         41:72:27:25:6b:5a:c7:ca:d6:49:04:ee:25:81:98:49:37:5c:
         19:ba:91:82:4f:df:99:73:ee:34:9d:2d:d2:8d:62:ff:c4:1e:
         ae:1f:87:a2:78:17:f2:b1:6d:2b:3c:b9:c7:b0:0d:b3:03:76:
         59:d1:83:42:ea:ec:8e:61:29:2f:a1:d5:fb:b5:5e:9f:89:13:
         d2:07:cb:c6:c1:6e:31:ea:1d:ad:8d:43:24:11:b8:af:e1:8f:
         bf:f5:91:12:0a:e6:77:de:d9:b3:3f:c1:ff:bd:b6:a0:0d:05:
         27:42:3e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:11:59 2026 by rpki-client