This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
File:                     bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json)
Hash identifier:          2IzQKXpz60bF/tL6SCXjY7U9OXpFbKy5shOWA7lKehY=
Subject key identifier:   F5:12:F2:ED:E5:03:33:76:9F:C8:A1:45:59:10:21:0D:E0:A8:FF:B0
Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
Certificate issuer:       /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
Certificate serial:       02B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
Manifest number:          02B0
Signing time:             Wed 07 Jan 2026 00:36:02 +0000
Manifest this update:     Wed 07 Jan 2026 00:36:02 +0000
Manifest next update:     Wed 14 Jan 2026 00:36:02 +0000
Files and hashes:         1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: 60co2IvuoMuo8nRBBsi3sN6WzVSy9ytSBUb+4nTWlcY=)
                          2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: F+DLJ1aQV5oLLpGFe5erh1ip1G2eNsPVMkZyfdufJjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Jan 2026 00:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
        Validity
            Not Before: Jan  7 00:36:02 2026 GMT
            Not After : Jan 14 00:36:02 2026 GMT
        Subject: CN=695daa72-2215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:cd:ba:6c:af:81:02:71:b1:26:29:19:34:
                    8f:dc:20:58:d8:a3:b7:a0:c1:b1:c5:54:1e:51:8b:
                    03:7f:cf:d4:54:1b:50:1f:cb:99:e6:ae:cc:b5:23:
                    d2:fe:b3:e6:5d:91:9e:9a:e1:4c:08:c0:3a:84:10:
                    9d:8e:fc:a4:ab:18:23:4f:83:33:6d:cd:39:f7:94:
                    43:03:51:f5:44:5c:cf:ad:4e:25:d7:e1:2f:b4:45:
                    d4:68:6b:c9:71:dd:eb:4a:74:b3:c1:82:eb:2f:ca:
                    28:6a:18:52:cb:7a:17:49:22:40:ff:9d:db:61:bb:
                    e9:46:1d:93:38:08:22:c4:92:7a:a2:8f:38:78:4b:
                    dc:b1:19:55:4a:70:c3:67:fb:e7:6e:4b:ac:f3:d5:
                    4d:e7:42:78:e3:a6:4c:8f:78:64:28:07:f1:57:6d:
                    0d:e0:e6:21:78:36:69:0d:c8:41:c2:01:f4:f0:08:
                    8e:7c:8f:b5:28:5f:7d:45:c7:3c:a8:ed:ea:df:32:
                    26:0b:76:ee:b0:1c:c2:46:e6:b8:a4:51:5e:43:27:
                    80:0a:ca:1a:f5:c0:06:1a:09:5e:8e:67:f7:d2:ab:
                    e7:ed:09:4e:c2:9a:5e:ae:c9:a9:10:5f:4b:24:db:
                    f7:01:dc:e4:c5:06:2a:9b:5e:21:55:79:07:f2:6f:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:12:F2:ED:E5:03:33:76:9F:C8:A1:45:59:10:21:0D:E0:A8:FF:B0
            X509v3 Authority Key Identifier:
                keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:53:c1:ae:3e:9a:73:92:68:84:60:dd:08:72:3a:1e:cb:
         44:01:88:76:5c:76:15:a6:58:31:8d:60:56:2e:e8:6d:e7:a6:
         bf:23:44:8f:99:aa:a1:f5:d2:cc:b3:3a:69:8a:3c:8c:97:7f:
         93:e2:e9:8c:a3:94:3d:3a:0d:4d:8d:9b:00:91:49:dc:a1:8c:
         4c:43:f5:f3:b4:58:68:20:f9:7f:a2:96:db:b2:90:68:46:a2:
         8b:9f:9d:ab:10:36:8e:56:c5:b1:fe:57:3d:97:92:b2:34:36:
         c2:c1:ca:fd:20:1d:05:58:cd:eb:cd:68:c6:8e:1e:5d:f7:a2:
         6f:61:0d:71:04:74:b6:5d:af:d9:8e:7c:f7:f6:7d:d6:b4:c9:
         1b:9d:a6:dc:40:8f:69:a2:88:33:aa:20:e3:01:dc:f4:d6:dd:
         62:7e:91:57:47:5f:2c:e7:50:0b:d3:25:4a:45:a7:38:8c:b9:
         2b:fe:c7:81:92:5e:d6:8b:81:c1:4b:e4:a0:41:13:83:c3:48:
         b4:53:cb:04:a1:7a:7c:df:df:14:56:6d:a3:8f:30:ea:26:87:
         0b:68:49:92:6a:cb:29:60:40:06:a0:79:4d:95:60:4c:ee:d2:
         7c:c5:36:4a:0b:84:91:23:b8:6a:86:ca:9f:c3:c6:13:25:2f:
         9c:42:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 07:00:03 2026 by rpki-client