This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
File:                     SBcgosjubOySR3dhkymcEP63ykQ.mft (raw, json)
Hash identifier:          RVhbgl7eYZbVIzWaXvJmAi7v45My3UIDGwlUSE/EllY=
Subject key identifier:   4B:D7:ED:BE:C0:1D:C0:AE:EA:A0:58:05:74:63:63:07:7C:6B:A0:83
Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44
Certificate issuer:       /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
Manifest number:          019B
Signing time:             Thu 01 Jan 2026 03:01:40 +0000
Manifest this update:     Thu 01 Jan 2026 03:01:40 +0000
Manifest next update:     Thu 08 Jan 2026 03:01:40 +0000
Files and hashes:         1: SBcgosjubOySR3dhkymcEP63ykQ.crl (hash: Pr02qm2+Gk+rg0Nmtj8F4141QzSKMGGWmlPI5qiqMJs=)
                          2: A38F041873C011EEB1A68245C4F9AE02.roa (hash: 3QT9VgasquPbgXpBTFff0Gu2hJL8xTVrH9a//E9hWWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 03:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD2E3, serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
        Validity
            Not Before: Jan  1 03:01:40 2026 GMT
            Not After : Jan  8 03:01:40 2026 GMT
        Subject: CN=6955e394-66ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:b6:19:e6:a2:a7:19:f0:80:d7:59:bd:a3:
                    50:51:e0:5e:b5:2b:c7:84:be:66:5d:4d:45:ef:21:
                    73:a7:13:cc:c8:18:97:45:7a:68:3d:b5:3a:ed:8c:
                    ec:47:96:81:51:d8:eb:b4:f0:7c:9a:32:64:99:d0:
                    d5:fb:df:b8:a0:e9:d2:b7:36:c8:13:d6:40:a2:9a:
                    8e:a3:76:79:79:7c:02:9c:eb:64:79:7a:88:52:db:
                    bb:96:2b:5d:9b:1b:42:21:a6:55:6e:9b:20:e2:4c:
                    d1:d9:94:61:7b:fe:ee:b9:45:e3:b2:20:3d:0c:6f:
                    e2:21:8c:9a:cb:88:c5:7c:3c:4f:85:b5:ad:93:98:
                    3c:0c:1e:41:8f:89:c8:c7:43:34:47:6c:e5:2e:6e:
                    28:e5:58:00:4c:cc:4d:c0:d9:67:a0:12:a1:9b:bd:
                    c3:7f:85:78:bf:1f:3f:95:8b:0b:c1:9a:64:26:51:
                    b9:84:9e:22:35:41:7a:d2:6b:76:71:90:29:b1:07:
                    94:1f:6c:b6:5d:f5:14:d9:a5:3b:9a:a4:43:f3:18:
                    cc:62:d2:db:06:97:89:a5:fa:5c:8a:c8:9d:5b:ab:
                    d8:39:86:54:2e:bf:7f:c4:46:a4:50:e2:cd:e4:35:
                    62:79:9f:03:8e:53:51:d8:a8:16:55:c9:d5:28:52:
                    f9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D7:ED:BE:C0:1D:C0:AE:EA:A0:58:05:74:63:63:07:7C:6B:A0:83
            X509v3 Authority Key Identifier:
                keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:59:c2:0a:4e:45:a5:21:28:dd:75:78:15:4e:ef:cc:93:a1:
         e8:60:af:5b:61:ff:9b:24:6d:22:a6:bc:d2:ed:f0:77:93:22:
         ec:a3:ed:03:4f:1d:14:3b:dc:98:76:2c:f3:7a:37:52:46:21:
         be:b4:0f:47:6c:58:57:58:e9:df:a0:d0:73:25:e5:55:1f:5c:
         b5:9a:f4:4b:ee:aa:9c:68:41:55:29:72:a5:0d:ed:25:98:aa:
         ae:9a:30:a2:ee:8e:3d:47:8f:ad:a6:97:ec:48:a7:6a:9a:95:
         a8:e2:d7:fe:f1:11:13:51:02:aa:c9:c5:32:49:dc:cf:41:ac:
         74:18:11:35:36:ae:47:a5:a3:09:8e:ce:6c:d0:49:23:c9:a4:
         9d:1f:0e:36:41:90:3c:03:19:93:ad:8c:74:5c:45:b4:59:82:
         54:4d:2b:63:93:a7:4f:c6:88:95:4e:8f:42:70:f1:67:00:ca:
         8d:01:41:37:43:6a:99:79:87:6f:4d:9f:cf:02:e1:36:4e:f3:
         09:d8:fd:ae:75:3b:c5:54:02:70:0e:02:be:db:a5:18:82:9e:
         e6:f3:3a:2c:11:1f:bd:70:9d:59:fd:00:7e:da:4a:e4:17:fc:
         da:e8:5d:28:8c:d5:c0:1b:e8:46:50:f7:bf:f9:ba:3c:6f:d9:
         c9:10:fb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 02:20:36 2026 by rpki-client