This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
File:                     C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json)
Hash identifier:          I4mwLLiEsR5av0KnvVM/aKoEgv1AxaMa0B2mYTP9JcY=
Subject key identifier:   0B:DB:1A:32:5E:FB:86:E0:70:CA:7C:AE:1C:1B:2E:10:8E:A1:CA:CF
Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B
Certificate issuer:       /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
Certificate serial:       1B69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
Manifest number:          1B61
Signing time:             Sat 10 Jan 2026 16:03:49 +0000
Manifest this update:     Sat 10 Jan 2026 16:03:49 +0000
Manifest next update:     Sat 17 Jan 2026 16:03:49 +0000
Files and hashes:         1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: LlYjewmPI48ESsP5+Py6vtKg6Zl7BAp35/Z1pd5UnGc=)
                          2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: kDD/H8WFjXbUdZ8XMqSbxZ1nkfDp4SgLtxpYaPPgHM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl
                          rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 16:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7017 (0x1b69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
        Validity
            Not Before: Jan 10 16:03:49 2026 GMT
            Not After : Jan 17 16:03:49 2026 GMT
        Subject: CN=69627865-7498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:e0:f1:40:00:40:45:82:e8:54:2a:63:d1:
                    ea:33:df:72:be:cc:26:12:db:f5:87:63:16:3e:de:
                    b6:7a:f1:21:7e:b6:fe:e1:e1:6c:02:84:18:f7:a1:
                    78:f2:d8:9c:af:c5:ec:22:d7:15:79:52:12:ba:b9:
                    ff:ff:ba:6b:4f:f3:4f:89:15:c5:88:02:92:fc:97:
                    77:6f:44:ef:b8:4a:de:16:bb:1c:ba:47:13:df:af:
                    d3:95:d7:f6:39:cc:9a:18:8b:50:b4:cc:5c:42:d7:
                    bc:e6:a0:0c:80:23:9b:76:54:e3:78:33:4a:24:46:
                    56:69:f0:61:4d:50:69:f3:48:0a:c9:26:ab:93:69:
                    89:cc:13:3f:96:be:48:d1:ac:a8:9d:e8:a9:bf:ea:
                    78:9f:e7:58:6f:e3:7d:15:b9:77:ef:d1:28:4a:ca:
                    ea:d9:26:8f:20:1b:57:3c:72:fb:03:1a:b8:7e:53:
                    37:23:5c:4e:3c:f3:b7:06:c9:19:23:ee:e8:7e:ad:
                    0f:c2:d3:03:e2:39:66:c7:49:d6:2d:29:a9:33:45:
                    c5:f2:6b:65:68:e2:b8:99:c9:3a:1f:65:26:09:56:
                    4a:ab:19:c2:32:7c:84:21:d9:e3:1c:26:fe:0d:b9:
                    c7:33:99:d5:cb:c1:ad:ad:c8:35:ce:ec:44:fe:fc:
                    e0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DB:1A:32:5E:FB:86:E0:70:CA:7C:AE:1C:1B:2E:10:8E:A1:CA:CF
            X509v3 Authority Key Identifier:
                keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:41:b9:a5:f3:2c:4c:4b:2a:1a:a0:d7:e6:e3:41:16:1d:1e:
         a2:11:97:80:8e:b2:b2:3e:6d:ae:91:97:48:32:79:ac:b1:53:
         18:05:22:d7:20:41:f2:b2:5c:6b:db:bc:34:3f:ba:10:bf:32:
         67:a0:b6:51:56:e3:f2:3c:7b:be:bc:51:37:4c:62:ec:4c:f6:
         56:05:c4:1f:6f:b2:58:81:3e:8d:1e:72:eb:b0:4a:08:05:1f:
         3f:fe:9d:5b:a9:1e:63:d5:30:f3:e1:8a:12:0e:7e:87:89:5f:
         50:d3:15:0e:3c:ee:52:9b:e0:e4:2f:12:6d:f8:9f:a2:f6:de:
         b0:12:67:38:52:d2:50:9d:01:60:01:70:54:15:8f:3f:25:cb:
         b5:7c:d2:62:ec:ea:b7:66:da:7b:61:5d:af:c3:a6:18:a9:1b:
         ad:3c:a8:0d:17:ad:c8:69:7f:b2:10:0a:82:47:19:41:dd:1c:
         d6:cd:11:59:3c:ef:d5:69:67:f9:ac:c6:16:0a:8c:85:60:98:
         ad:e8:2c:72:f8:fe:67:c5:2b:bf:3a:05:98:84:dd:eb:8b:cd:
         1a:ef:47:76:a8:bd:90:f3:ad:1c:3e:11:d8:bb:5c:be:5b:c0:
         95:b4:23:22:9e:a8:08:8b:4c:92:e1:b9:a3:ba:d1:70:25:ef:
         41:53:67:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:47:19 2026 by rpki-client