This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
File:                     9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json)
Hash identifier:          RyzeLHO1OenH35mXnObToLMigkK7NU3HwogD1sMf81g=
Subject key identifier:   DA:0B:D9:A0:75:57:21:3C:3B:C1:ED:FE:41:01:CB:61:07:C9:8D:C8
Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2
Certificate issuer:       /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
Manifest number:          01C5
Signing time:             Sat 10 Jan 2026 15:37:17 +0000
Manifest this update:     Sat 10 Jan 2026 15:37:17 +0000
Manifest next update:     Sat 17 Jan 2026 15:37:17 +0000
Files and hashes:         1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: ecZC4HuPWTWttxT16ECF+o0ydLR/bLg2qypLR+BGJo8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 15:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
        Validity
            Not Before: Jan 10 15:37:17 2026 GMT
            Not After : Jan 17 15:37:17 2026 GMT
        Subject: CN=6962722d-c0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:91:e7:40:94:62:75:5f:b5:45:4e:83:e3:69:
                    dc:03:30:d2:69:f3:53:93:d1:16:a6:66:75:3a:84:
                    d9:cd:dc:10:8f:f1:a3:20:ca:f7:68:07:8a:27:97:
                    ad:b4:c2:61:70:25:c0:30:66:17:53:63:f9:2a:85:
                    ce:b4:c4:2b:83:2c:e1:3a:29:d3:cb:d0:9f:8f:89:
                    94:d9:77:8f:44:f5:35:80:25:1a:2e:fb:26:ea:e8:
                    eb:d4:21:85:a9:de:a7:0f:09:14:a9:56:2f:05:97:
                    b3:58:2c:7c:17:ee:4b:8a:36:2f:12:02:b5:ee:ef:
                    ad:01:48:18:76:bc:5c:d6:18:5d:d5:c8:a0:33:e9:
                    81:cf:9e:ca:f4:13:42:f9:59:fe:99:0b:99:70:b0:
                    17:0b:7b:30:d4:50:e5:a9:ef:97:09:22:b0:7f:f2:
                    2a:3d:68:69:1f:bb:24:42:2a:38:55:ea:40:77:08:
                    70:a0:e2:c3:a5:b9:26:ca:51:ac:56:e2:ef:de:99:
                    4b:41:8c:fd:07:4b:00:3c:88:a7:b3:87:fb:55:e3:
                    44:88:77:b3:c8:62:a4:69:fb:bc:96:d9:ad:f2:6b:
                    bb:cf:f3:d7:e4:01:d4:25:3a:c8:de:39:9e:53:a6:
                    c4:26:c2:66:bb:06:2c:25:0f:9b:5d:d8:dd:9e:78:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0B:D9:A0:75:57:21:3C:3B:C1:ED:FE:41:01:CB:61:07:C9:8D:C8
            X509v3 Authority Key Identifier:
                keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:05:24:d3:5e:2e:9d:6f:47:56:23:f4:35:41:13:90:d2:dc:
         68:07:5a:ee:a8:5f:5f:ee:54:43:55:76:aa:4d:ac:af:dd:0c:
         87:9e:a5:52:62:29:a4:b5:5a:7c:ee:99:1f:4b:e9:ba:96:7a:
         b8:b5:b8:03:07:c3:bf:55:6b:ea:f8:b7:04:2c:3e:96:ea:5a:
         03:fd:ac:11:99:dc:ab:3c:3e:ac:06:9d:b0:5f:03:8c:dd:5f:
         08:f8:6b:7f:e5:64:d2:ce:bd:65:0f:dd:4f:0a:4f:f8:d2:dc:
         83:87:b1:32:63:f0:b5:c0:ec:f9:9e:5e:15:00:8c:36:83:10:
         b3:51:68:a9:d7:b5:bd:07:91:21:f5:de:3f:35:a6:49:23:7c:
         7f:b6:b4:2f:2a:8a:33:be:6d:0f:ee:50:3a:8e:7b:b1:a5:dd:
         3b:0f:b1:ac:41:09:ae:e5:86:e9:3f:69:e2:50:8f:c1:1e:e7:
         68:b4:be:8d:f3:00:ea:4d:7c:2c:c6:a4:0b:eb:ec:19:1f:27:
         e2:cc:21:13:5c:a2:fc:30:74:0a:e5:52:96:09:e6:8f:7f:df:
         b0:62:cc:71:7f:a6:a5:0c:f3:9e:a1:79:a4:f0:df:b6:ab:1e:
         a6:34:46:0a:ad:f2:f5:85:8d:21:95:14:8f:fa:61:75:f7:f4:
         63:54:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:14:53 2026 by rpki-client