This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
File:                     bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json)
Hash identifier:          VSRmNREcCpnBKpxYryLE1mqVCEXuBGXShuqS8HwYWKU=
Subject key identifier:   F6:CB:6D:15:D2:D9:8D:E6:C9:04:81:6C:FF:92:91:E0:DB:91:3D:AE
Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
Certificate issuer:       /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Certificate serial:       11A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
Manifest number:          1197
Signing time:             Sat 10 Jan 2026 16:55:36 +0000
Manifest this update:     Sat 10 Jan 2026 16:55:35 +0000
Manifest next update:     Sat 17 Jan 2026 16:55:35 +0000
Files and hashes:         1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: Ht93bhq9yYwNvBw7OqxqQehka3iAvdFt8ygMBNKsixk=)
                          2: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: oY1WXZVko8XjgFNGHLeULp2ndsYGuRPLSE4EMHTqlSY=)
                          3: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: 28+4DGnpX6Ji2cYmKm+1uSknOVpH5kmdClZ3WCtYgVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
                          rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 16:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4519 (0x11a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
        Validity
            Not Before: Jan 10 16:55:35 2026 GMT
            Not After : Jan 17 16:55:35 2026 GMT
        Subject: CN=69628488-8b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:5f:6f:97:a7:be:bf:d4:df:3f:a7:b1:2c:
                    0f:0c:d1:d5:1c:b2:94:ee:79:0d:93:53:ff:91:78:
                    82:da:3d:4e:4d:c8:e9:4d:7e:1c:70:82:9e:6d:6c:
                    c7:79:ce:03:37:9d:e3:33:15:95:27:bf:bc:76:72:
                    9f:75:a2:57:59:3e:05:e0:36:a1:33:92:13:f9:2d:
                    95:8c:3f:f3:48:ae:82:fd:4f:51:bf:c6:6f:ef:f4:
                    44:21:d4:3a:78:c7:e1:31:36:4d:66:b2:f7:51:31:
                    af:52:1d:e4:b3:ca:54:de:be:cc:ab:2e:79:ca:9d:
                    6d:f2:23:96:11:59:47:10:ba:1c:9d:5e:92:db:fb:
                    94:6b:0c:32:b4:8c:f9:78:ac:db:b4:84:64:bd:96:
                    d9:99:d6:93:de:dc:8a:49:a4:45:8b:3d:86:6f:47:
                    e9:39:9b:ed:5f:7f:40:75:34:e4:16:68:f8:5b:b2:
                    a0:9a:a7:f0:fd:f2:d6:98:4f:8e:20:6a:83:71:d6:
                    0f:86:f7:a3:2d:07:39:26:27:9e:bc:c5:95:60:69:
                    11:49:0c:a5:cd:0d:72:42:3f:7a:86:fb:5a:26:36:
                    b3:1f:fe:65:06:87:3c:a3:29:0d:97:4f:b8:d7:83:
                    cc:07:c4:da:f9:d7:2b:20:1e:2e:78:ff:9d:ea:01:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CB:6D:15:D2:D9:8D:E6:C9:04:81:6C:FF:92:91:E0:DB:91:3D:AE
            X509v3 Authority Key Identifier:
                keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:83:71:11:14:66:5f:f7:63:8a:01:ff:14:7b:c7:2d:d9:e6:
         39:3f:ab:9b:4c:2e:14:f3:07:d4:bb:3a:8d:fc:20:17:ee:fd:
         81:d2:6a:05:5a:8c:fc:82:b6:f7:f6:c3:49:9c:3c:b2:9a:06:
         24:19:ff:58:9d:bc:41:e3:78:5c:a7:dd:41:72:0c:28:50:dd:
         34:13:ca:ea:b5:b2:4b:5d:f8:74:08:cd:ff:f8:fe:04:f5:33:
         1c:7a:9d:5b:98:7c:ef:f4:3a:d0:77:32:e0:00:2c:6f:1f:81:
         e1:dd:6b:ec:1a:15:f4:13:be:9f:93:e9:bf:ba:5c:3a:86:60:
         ee:2b:50:4a:d0:3d:d0:01:3c:21:23:57:9c:4c:50:ca:89:3f:
         c5:fa:36:b4:97:17:0a:19:6e:da:0a:f3:11:56:ba:63:ee:45:
         31:dc:e7:3c:de:18:c0:18:27:41:76:f5:dd:bd:45:23:38:46:
         2c:89:98:70:8f:36:00:ff:18:17:92:e1:c0:47:80:1b:f0:5b:
         2a:19:23:36:2e:45:aa:c2:60:0b:54:1a:c0:2e:61:85:d8:98:
         ca:68:82:de:a8:67:03:1a:17:e4:32:9d:c7:ab:5b:2d:fa:eb:
         17:be:21:e3:cb:9d:b2:d1:19:36:57:12:33:36:a5:3e:01:9b:
         95:fd:79:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:06:24 2026 by rpki-client