This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
File:                     Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json)
Hash identifier:          kfFrgwumK9uO+O6QXme4pEuBx+RHp5/mUSnUHKpN1pw=
Subject key identifier:   EF:4B:08:EC:8F:6C:B1:A7:56:7A:B9:E2:18:02:95:22:15:4D:B7:6D
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Certificate issuer:       /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
Manifest number:          0198
Signing time:             Sun 11 Jan 2026 02:47:56 +0000
Manifest this update:     Sun 11 Jan 2026 02:47:55 +0000
Manifest next update:     Sun 18 Jan 2026 02:47:55 +0000
Files and hashes:         1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: X4xApMjSVLc+j5RZeWCl1/rS4Y9Mj0PV6JF6WM8jhxg=)
                          2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: xBDn9AWjOK6Aqn3gbjUogny+8VL+MgIvem+Ks8BAr84=)
                          3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: tYqoSMRO2FbmTyJPaTn7rKwwsKt8LyDB3rT6mhobJ3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
                          rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 02:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
        Validity
            Not Before: Jan 11 02:47:55 2026 GMT
            Not After : Jan 18 02:47:55 2026 GMT
        Subject: CN=69630f5c-ba58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0d:6c:13:9d:3a:29:d0:62:f8:1a:92:5f:26:
                    4d:d7:90:a2:53:21:40:cc:a7:ca:d3:d9:45:73:b5:
                    c0:1f:bd:60:ca:61:98:61:86:60:37:c2:d6:4c:d4:
                    d7:b9:30:15:f3:d3:5f:17:5b:bf:32:15:35:9a:81:
                    36:99:39:a7:0d:4a:7e:81:45:aa:03:95:61:71:a3:
                    f2:06:ad:76:19:0a:d8:e8:f5:7a:76:84:59:0f:9f:
                    4f:e4:aa:b1:1c:8b:7f:a0:54:34:e6:31:91:64:84:
                    1b:86:8c:72:c3:cb:8b:47:34:3a:73:9f:9e:5e:1c:
                    08:b5:85:1c:59:29:5c:ac:0c:8d:49:79:61:73:83:
                    7f:6e:b9:fe:df:c8:e8:9d:0f:e0:43:1b:51:64:04:
                    46:2c:2e:ed:b9:d9:99:e3:a2:53:cd:fb:e2:70:3a:
                    7d:b2:f0:a2:af:bd:28:a7:03:13:af:93:af:04:4f:
                    4a:12:03:fd:ab:56:52:83:b1:53:d7:86:21:10:41:
                    3a:e8:1c:81:af:c3:21:25:41:b4:9e:32:12:89:c7:
                    d8:9a:d7:b3:06:79:91:0f:a9:45:27:ce:cd:fd:f8:
                    71:3b:36:01:7f:08:ac:f2:e9:64:d4:2b:f5:f4:97:
                    f2:8c:06:ee:85:53:69:d3:5e:99:fd:b1:d7:b0:05:
                    1a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4B:08:EC:8F:6C:B1:A7:56:7A:B9:E2:18:02:95:22:15:4D:B7:6D
            X509v3 Authority Key Identifier:
                keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b8:38:f6:e8:17:2f:59:3d:28:2a:e2:d4:3b:b4:18:f5:c1:
         a4:a3:12:64:b7:97:24:d3:65:fc:a1:ce:5e:15:94:cd:04:84:
         0d:c0:b0:23:ab:4a:1b:19:ad:bc:b2:c8:91:8c:f8:1b:a2:02:
         63:dc:1c:fa:fd:a2:8b:ef:d2:db:39:7f:f1:c8:a0:aa:4f:8e:
         f9:b0:d4:e2:1a:22:5b:dd:a7:61:26:a6:b0:22:05:c7:8c:d7:
         80:e3:ff:1f:22:dd:5d:d8:dd:86:b7:a7:de:3b:c9:57:29:6e:
         2a:6d:36:e6:a4:06:3c:f7:1d:0a:2f:62:55:00:96:18:18:c1:
         68:9f:b9:04:80:35:bb:cc:8f:40:a7:07:03:1b:5b:df:fd:8c:
         17:e1:19:ab:f1:76:46:d7:f3:93:da:dc:fc:ae:64:7a:e0:61:
         f4:27:0e:53:00:a7:19:cd:46:cc:b7:af:44:41:0e:93:6a:86:
         28:49:4c:bc:ff:00:23:22:4c:d9:78:b4:a8:e5:cd:39:66:c9:
         79:dd:6e:e2:be:e4:6c:32:5c:0d:fb:03:59:79:ae:6c:5d:03:
         0b:27:9c:c5:2d:ca:a4:77:4c:ad:8f:c7:59:eb:ae:82:1c:8c:
         2c:7a:42:0f:28:c1:e3:a0:08:a0:b9:d3:ea:88:04:7e:5b:64:
         c7:1f:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:13:23 2026 by rpki-client