This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
File:                     BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json)
Hash identifier:          mRtW6jURm6tXgfOkOt481iijuRMWHuInO+nt+4cWQEI=
Subject key identifier:   E9:30:15:13:0C:BD:30:59:B5:9C:39:D1:46:2C:C5:69:11:D6:C5:22
Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
Certificate issuer:       /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Certificate serial:       084E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
Manifest number:          083E
Signing time:             Mon 12 Jan 2026 20:11:12 +0000
Manifest this update:     Mon 12 Jan 2026 20:11:12 +0000
Manifest next update:     Mon 19 Jan 2026 20:11:12 +0000
Files and hashes:         1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: iF175sxeyx6V0/yzMOh81LAlFxkYPZZxkbP9DnpCnkA=)
                          2: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: HmCUmLVw28r2IcR7zzOMBoMlcQpH+3WxtRZQvA+31cE=)
                          3: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: M4ZsvutOyCk2s1KYcKAwaMHyjjGJAz91GGFqruJgJoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl
                          rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 20:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2126 (0x84e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
        Validity
            Not Before: Jan 12 20:11:12 2026 GMT
            Not After : Jan 19 20:11:12 2026 GMT
        Subject: CN=69655560-b18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:f7:c6:94:e4:71:16:da:19:6c:59:16:26:
                    ff:c6:50:dd:ca:7c:a2:ba:3b:26:2f:57:d7:e6:5f:
                    ae:79:b9:6b:a1:50:9f:14:55:67:e1:40:43:47:15:
                    a8:6d:86:3d:89:be:77:0a:30:db:5f:c2:27:e3:fc:
                    08:70:19:75:f2:b1:7a:60:73:92:c7:55:f0:98:b5:
                    0c:63:d9:41:e2:92:47:07:08:05:3c:0c:0e:2c:9d:
                    a4:63:f8:b0:fd:28:ac:ca:cc:f4:10:2b:2b:5f:b7:
                    3e:98:d1:86:48:09:f0:a1:fb:f8:6c:19:60:d1:0b:
                    36:dc:20:5d:23:0c:1e:ae:39:94:d4:9b:08:61:1c:
                    d3:7d:51:92:48:58:28:85:59:ac:4d:16:cf:20:8d:
                    95:10:cd:37:b4:5d:26:5a:e4:80:1c:6e:4b:56:ef:
                    e5:f2:c7:58:91:73:04:f7:0e:6e:9f:65:8d:bb:58:
                    e8:3b:82:7c:4c:ef:10:a1:4f:80:2b:fb:5d:e1:77:
                    ce:ff:c3:ff:ab:e5:fe:f8:d3:40:c9:ce:66:19:d8:
                    3f:86:ff:5f:6d:f0:f5:da:fd:f9:fe:07:dc:1d:61:
                    72:7d:4e:58:51:bf:7f:f3:29:79:98:e4:bc:dd:c6:
                    0d:f7:3c:96:19:0c:ad:03:1b:83:df:e8:0d:f9:40:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:30:15:13:0C:BD:30:59:B5:9C:39:D1:46:2C:C5:69:11:D6:C5:22
            X509v3 Authority Key Identifier:
                keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e4:38:86:50:ca:ff:d1:62:18:54:a5:42:5e:78:83:f7:b9:
         4e:e8:a5:40:91:37:ac:b1:08:bd:04:31:49:15:94:ea:34:4a:
         3e:d6:5a:14:79:a7:d5:35:26:dc:c0:86:41:02:bd:a0:4e:5b:
         7a:4b:6c:e4:3e:ba:b1:ca:aa:ac:7b:ea:59:c1:1c:46:8b:31:
         eb:61:8c:11:47:32:0a:31:fc:c1:75:95:4f:80:32:e9:46:00:
         21:eb:b0:62:73:72:50:7f:08:e6:15:32:d7:7d:58:c6:61:44:
         5f:aa:5b:b9:83:80:3d:e0:5d:52:9a:a5:7b:c1:5e:d4:45:05:
         cb:56:02:81:1c:e5:2b:96:9d:28:0a:ab:8a:d1:76:d8:46:c3:
         bc:72:d4:ee:1b:9d:b3:15:23:0b:c6:87:d4:35:96:34:73:f9:
         34:68:2e:34:9a:a2:27:2c:60:0e:cc:e9:a7:27:3a:8b:ce:7e:
         80:ca:bf:b9:b9:c6:62:36:7e:54:2c:dd:19:7c:3f:97:86:84:
         c4:d3:ac:29:6b:d1:d0:c5:16:1d:fb:fd:72:a2:54:6c:00:82:
         0d:df:f7:de:13:37:06:a9:50:8f:6d:c7:cc:58:be:23:9f:87:
         81:19:06:6f:18:c2:86:6b:6e:3a:98:e4:97:4f:73:95:92:2f:
         76:67:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 01:31:25 2026 by rpki-client