This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
File:                     bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json)
Hash identifier:          cwQE9OcqhwDV44z95NsZzs/GshEMRVJ0Bk8Bdll+cB8=
Subject key identifier:   A8:72:4F:27:31:21:A1:5B:8C:AF:B9:CB:8A:66:9F:BC:40:A5:63:9A
Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D
Certificate issuer:       /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D
Certificate serial:       0973
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
Manifest number:          0965
Signing time:             Sat 10 Jan 2026 19:32:36 +0000
Manifest this update:     Sat 10 Jan 2026 19:32:35 +0000
Manifest next update:     Sat 17 Jan 2026 19:32:35 +0000
Files and hashes:         1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: 3I1B90FpGlvAcWmY0393WDox+HxNot6cOxKOuqGjNnE=)
                          2: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: AF8iSINyYs/yviryAgwAaGDxt3e7QveTWxIVOikxElk=)
                          3: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: 9+lw98rdFugqdiBRyKbVp2oC9fkpMpQz4UV/k8IjCXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl
                          rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 19:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2419 (0x973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D
        Validity
            Not Before: Jan 10 19:32:35 2026 GMT
            Not After : Jan 17 19:32:35 2026 GMT
        Subject: CN=6962a953-729f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:7d:b6:ed:c9:e8:35:88:b5:dc:f4:ad:b5:
                    d5:6d:f6:ff:9b:43:02:02:7b:65:62:09:8f:45:a5:
                    70:75:09:ad:d8:71:29:d3:41:67:84:99:58:e0:5e:
                    ed:22:41:98:c7:76:56:46:a7:f5:ff:d5:ec:65:5c:
                    a8:71:50:05:20:03:36:51:0a:dc:01:c9:aa:b4:e3:
                    75:a6:76:22:1c:29:ff:35:54:47:5c:83:5a:d5:05:
                    51:31:7c:02:b7:52:d0:b4:41:a8:a4:c3:2f:a9:96:
                    aa:e3:bc:fb:4c:85:91:49:3c:d5:2e:5d:dc:1e:91:
                    f3:db:d7:b4:50:bf:13:37:ae:4f:c3:f8:6f:34:f4:
                    ee:98:04:68:54:82:eb:96:dd:c4:68:77:56:a1:8b:
                    65:bb:74:e0:05:d3:6e:d3:14:b2:6d:d7:1a:d6:c8:
                    ca:08:90:62:59:5f:a4:f1:3d:9b:1d:51:d5:34:29:
                    23:f1:56:5e:bf:ae:36:f3:8c:a5:d1:1f:42:80:8d:
                    ce:22:c1:e5:32:8c:81:78:82:45:49:3d:e7:e8:e5:
                    14:28:99:5c:b6:23:86:46:f3:06:a0:3e:a7:3e:83:
                    c7:29:28:37:31:0b:4c:90:e9:3f:81:43:e5:5a:53:
                    85:db:f5:79:15:c8:8a:9b:67:65:3c:cc:88:2a:39:
                    bd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:72:4F:27:31:21:A1:5B:8C:AF:B9:CB:8A:66:9F:BC:40:A5:63:9A
            X509v3 Authority Key Identifier:
                keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:63:1f:a9:38:4a:db:97:e1:32:39:01:69:3a:72:13:54:7d:
         b3:81:9b:29:f1:ec:2e:35:2c:03:d1:1e:6d:d8:03:7f:9b:89:
         df:32:eb:a9:f4:13:c8:43:34:51:81:cc:49:9a:f9:f1:10:7b:
         bb:42:e8:79:68:3b:8f:13:74:84:b5:f3:86:e2:92:5c:84:53:
         f4:6c:d6:31:f7:12:82:c1:66:a0:d7:76:87:ef:ad:d9:b0:25:
         a0:ef:61:26:d6:67:0b:60:81:da:35:3e:bc:8f:87:fd:d1:d4:
         c9:7b:01:4e:89:8f:8b:3b:9c:1c:92:d3:e2:d6:dc:51:29:18:
         6f:33:c9:f6:68:f4:df:a6:02:8a:34:10:3e:bb:53:3d:24:53:
         a0:fa:3a:8b:9c:4d:00:da:64:86:41:9a:30:1c:42:a8:30:da:
         80:a0:b1:bd:b0:24:68:91:cc:ca:c3:ae:43:02:ae:5a:03:94:
         1e:98:ad:af:bb:8f:25:59:68:91:b7:7c:5d:32:1e:54:54:4b:
         ad:75:b2:3a:4b:97:3d:86:c9:e3:89:81:f8:c8:70:9b:99:74:
         9e:5c:c7:32:47:01:26:d6:d8:a5:52:e9:3d:ba:8f:bc:f1:ea:
         bc:b2:6d:36:2c:ae:76:db:bb:81:6a:fc:59:80:64:f5:3d:3c:
         b0:fd:4f:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBBNTMxMTAvBgNVBAUTKDZFNEU2OUJFMTNENjEzQTcwMjc0QzBDRTc3MzgzOTIz
RjE1NjI3MkQwHhcNMjYwMTEwMTkzMjM1WhcNMjYwMTE3MTkzMjM1WjAYMRYwFAYD
VQQDDA02OTYyYTk1My03MjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvj99tu3J6DWItdz0rbXVbfb/m0MCAntlYgmPRaVwdQmt2HEp00FnhJlY4F7t
IkGYx3ZWRqf1/9XsZVyocVAFIAM2UQrcAcmqtON1pnYiHCn/NVRHXINa1QVRMXwC
t1LQtEGopMMvqZaq47z7TIWRSTzVLl3cHpHz29e0UL8TN65Pw/hvNPTumARoVILr
lt3EaHdWoYtlu3TgBdNu0xSybdca1sjKCJBiWV+k8T2bHVHVNCkj8VZev64284yl
0R9CgI3OIsHlMoyBeIJFST3n6OUUKJlctiOGRvMGoD6nPoPHKSg3MQtMkOk/gUPl
WlOF2/V5FciKm2dlPMyIKjm9qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhyTycx
IaFbjK+5y4pmn7xApWOaMB8GA1UdIwQYMBaAFG5Oab4T1hOnAnTAznc4OSPxVict
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEE1My83MUI3RDQ3MEFC
NEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2Y0NkTURPZHpnNUlfRldK
eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JrNXB2aFBXRTZjQ2RNRE9kemc1SV9GV0p5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MEE1My83MUI3RDQ3MEFCNEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2
Y0NkTURPZHpnNUlfRldKeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3Yx+pOErbl+EyOQFpOnITVH2zgZsp8ewuNSwD0R5t2AN/m4nfMuup
9BPIQzRRgcxJmvnxEHu7Quh5aDuPE3SEtfOG4pJchFP0bNYx9xKCwWag13aH763Z
sCWg72Em1mcLYIHaNT68j4f90dTJewFOiY+LO5wcktPi1txRKRhvM8n2aPTfpgKK
NBA+u1M9JFOg+jqLnE0A2mSGQZowHEKoMNqAoLG9sCRokczKw65DAq5aA5QemK2v
u48lWWiRt3xdMh5UVEutdbI6S5c9hsnjiYH4yHCbmXSeXMcyRwEm1tilUuk9uo+8
8eq8sm02LK5227uBavxZgGT1PTyw/U+X
-----END CERTIFICATE-----
Generated at Mon Jan 12 07:36:34 2026 by rpki-client