This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
File:                     bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json)
Hash identifier:          sqzzrN4TXXiwFiAGZddx2aeK4ZSdZ0GNInvyOD3JBlE=
Subject key identifier:   0B:BE:C4:26:21:D6:7A:F4:2F:16:65:03:2A:0D:3D:85:36:6F:34:67
Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3
Certificate issuer:       /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
Manifest number:          F3
Signing time:             Wed 07 Jan 2026 04:29:20 +0000
Manifest this update:     Wed 07 Jan 2026 04:29:20 +0000
Manifest next update:     Wed 14 Jan 2026 04:29:20 +0000
Files and hashes:         1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: rou5T0VEoWsNJBUJWAjaPHCS8m9c06SEEg8I93wLKyM=)
                          2: F2F0E3FE882E11EFB58CD069C4F9AE02.roa (hash: LLMFfpd/hOZPtrpRcrn1k8tmtQOd8WCmuw0OVbODbIo=)
                          3: 50A6B6427C6B11EFAB9AB658C4F9AE02.roa (hash: BsH1QXXdR63B8qNDLxP6migCbs5bygzeNgwy6naNCOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl
                          rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Jan 2026 04:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91643F8, serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
        Validity
            Not Before: Jan  7 04:29:20 2026 GMT
            Not After : Jan 14 04:29:20 2026 GMT
        Subject: CN=695de120-1d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:cc:55:19:7c:e3:de:b9:3b:cb:04:89:57:
                    ee:11:3b:f8:1e:65:55:cc:4f:12:70:0b:8b:09:3d:
                    af:d1:56:a8:30:f8:1f:bc:bd:41:78:50:11:eb:3e:
                    f6:5b:7d:1d:95:da:3e:37:aa:68:0b:b1:fc:3c:6f:
                    8d:63:2a:41:8a:4c:41:c5:d9:28:25:7f:69:b5:b0:
                    30:3e:0d:9e:ac:bd:77:ee:ca:a7:a6:4b:1b:64:8b:
                    a1:1e:c9:c3:57:3d:9d:08:6b:57:d1:95:26:7e:80:
                    4e:00:af:91:00:f1:c6:ce:e6:5e:be:30:d7:54:59:
                    ee:f8:94:ba:5b:a9:1d:c6:9b:e7:87:66:3c:d1:db:
                    13:03:f8:4c:ec:b6:5b:01:26:66:0e:ed:97:f2:97:
                    92:10:fd:e2:91:9d:05:04:a9:d4:48:d4:05:4b:2d:
                    d6:f1:c7:aa:b3:de:a4:71:da:ea:5a:6c:b7:bd:a0:
                    49:99:62:4d:c4:27:c4:5f:58:98:55:74:b4:df:1d:
                    e5:e1:73:87:00:03:6b:10:ff:d4:7b:8b:9a:58:41:
                    f5:e6:b0:fa:5b:8c:08:d1:c6:e0:52:1c:ca:03:e3:
                    f8:ed:03:d9:89:5d:f7:8b:d7:6c:cd:f5:13:fa:b8:
                    db:e7:02:65:0d:68:5d:31:f6:42:d3:51:db:95:9e:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:C4:26:21:D6:7A:F4:2F:16:65:03:2A:0D:3D:85:36:6F:34:67
            X509v3 Authority Key Identifier:
                keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:df:50:aa:52:9e:8a:d1:1f:72:b5:78:a6:09:6c:b6:af:95:
         ad:c7:1b:9a:da:c4:58:f3:69:3a:96:e8:06:a7:c8:1d:96:39:
         61:89:21:84:e3:cb:d6:29:32:41:63:55:b0:bd:17:60:bc:99:
         53:c4:54:cc:21:2c:be:d3:df:da:32:1c:07:bb:4e:0b:7b:f2:
         b9:11:da:0d:3d:38:74:04:85:96:7b:f5:bf:f2:a1:0d:83:95:
         a9:c7:08:9a:54:8b:eb:4c:75:e4:bd:ba:2d:c5:79:f3:75:fa:
         ca:b4:64:29:6f:b7:b1:37:be:e9:1e:3b:33:06:ff:f4:0b:f8:
         77:5a:15:18:cb:7e:40:3c:bd:2b:2f:8d:82:97:41:a0:9e:da:
         36:62:12:83:4e:87:6f:88:86:2e:a8:57:1c:8e:ef:5b:91:eb:
         0e:08:16:45:8e:c5:75:ef:25:8d:f1:06:e0:94:2f:b8:ed:fc:
         77:4d:73:f2:78:d9:9e:93:5d:20:5e:67:98:23:eb:bf:62:4e:
         6f:c6:b2:0d:8b:a7:cc:c4:27:75:1c:aa:d5:4c:c0:36:f1:44:
         04:c6:7c:ee:2b:02:35:ad:52:05:0c:ab:c6:99:13:dc:37:ea:
         56:7b:70:09:a9:0a:5a:c4:9f:29:f4:0d:9a:fc:6d:28:86:65:
         34:e2:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 11:29:34 2026 by rpki-client