This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
File:                     bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json)
Hash identifier:          dhbrVLYlKKKrWU3s0i/Oq5iKF4izbyvrrWb5ah+x32A=
Subject key identifier:   6D:79:16:42:7A:13:76:7B:22:0A:27:8D:18:29:85:02:C4:C0:B7:50
Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11
Certificate issuer:       /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
Manifest number:          B1
Signing time:             Thu 01 Jan 2026 05:39:22 +0000
Manifest this update:     Thu 01 Jan 2026 05:39:21 +0000
Manifest next update:     Thu 08 Jan 2026 05:39:21 +0000
Files and hashes:         1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: 0PfSSIIqpHhdjTjXJpdjGvh1hmu30sp84v86HKdHjg4=)
                          2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: 4d4Ou4cSb0acdXH9Bn2waQ4IMkbvtakYfcIPMGQdXao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl
                          rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 05:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11
        Validity
            Not Before: Jan  1 05:39:21 2026 GMT
            Not After : Jan  8 05:39:21 2026 GMT
        Subject: CN=6956088a-64b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:93:f6:e6:27:9b:95:f2:8b:6b:1c:f3:16:
                    ca:2e:ec:5f:7b:e5:ed:b6:9a:97:4b:7d:20:5b:3d:
                    7c:f6:98:6f:cd:0b:cf:96:a5:f1:fe:d2:f1:c6:ba:
                    95:cc:35:e9:69:e3:3f:a7:1b:8c:92:45:74:f4:b2:
                    74:a6:85:27:d2:04:4d:b3:24:be:e8:a0:bb:f0:54:
                    47:aa:7c:e7:e7:47:c1:84:3d:01:f8:eb:12:f6:8c:
                    87:0c:bd:18:79:a7:78:66:6a:1c:71:6a:6e:fb:15:
                    a8:9b:fd:76:94:61:97:4b:15:15:cc:b2:61:c1:e1:
                    9e:46:3e:b2:45:f8:5a:19:f2:03:01:3a:66:4e:fc:
                    fd:3a:06:0e:5c:a7:25:21:52:b3:d4:2e:ce:cc:0e:
                    d4:27:a5:58:a7:10:28:62:ef:e1:5d:c4:91:6e:59:
                    8d:56:07:50:f3:ec:96:ae:c9:83:cf:88:05:4f:5d:
                    ee:80:5d:9c:50:8e:99:60:6e:5b:76:b4:25:e8:b1:
                    4a:23:43:b0:06:c0:d3:29:a8:a4:ee:5a:a6:ae:86:
                    15:f8:e8:c5:eb:88:a2:5a:2f:2f:ef:8f:ea:dd:55:
                    10:5d:2c:4b:60:69:76:79:42:eb:04:1d:1e:42:03:
                    3e:9e:77:c1:43:95:26:64:34:80:2e:25:e0:32:d6:
                    85:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:79:16:42:7A:13:76:7B:22:0A:27:8D:18:29:85:02:C4:C0:B7:50
            X509v3 Authority Key Identifier:
                keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b9:22:24:52:24:56:56:88:86:64:66:5e:33:d0:a8:e8:ea:
         75:d9:43:32:94:8f:01:c4:d6:b5:88:72:98:af:48:2a:3f:14:
         9d:49:0d:5c:bd:89:f7:74:e5:c5:d4:01:bc:42:2b:9c:9d:b0:
         43:f7:de:9c:39:f7:f9:95:e9:34:b3:32:02:f5:34:08:2a:97:
         78:5b:d6:07:1f:c2:47:62:06:be:2d:af:62:ce:b1:3e:c0:be:
         d9:cc:99:82:cf:73:6c:d6:99:37:1e:33:45:30:86:37:b3:df:
         7f:97:37:d0:57:96:ca:58:7c:32:4a:49:a0:cf:ea:89:c7:fc:
         32:a6:47:b4:4d:16:8e:88:b3:d9:b9:bf:dc:63:3b:7a:a1:32:
         8b:68:bd:02:bd:84:1f:33:2b:e8:47:66:2e:7a:a4:c1:17:ac:
         a1:61:91:ac:e8:37:e8:fc:45:0b:20:d1:e7:b6:02:0a:31:13:
         48:a8:e3:84:3f:07:db:f2:09:06:d5:2c:d2:e9:6e:08:89:ca:
         73:16:53:5f:dc:ec:0e:8d:d5:1a:68:14:37:4a:ff:74:a7:9c:
         1e:68:45:ed:d1:46:d8:e2:5f:ce:d9:7a:cd:90:7a:62:ea:09:
         25:cc:50:1a:e0:8d:79:de:13:e3:99:34:9a:ae:23:5c:49:8b:
         ee:65:fd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 19:52:37 2026 by rpki-client