This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
File:                     bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft (raw, json)
Hash identifier:          jk+vSJA6PtfYOqmtdxa6ED8/QE/2rMa1DOMpjfLkwoE=
Subject key identifier:   89:C1:81:9B:35:12:2E:21:AC:23:D9:E0:3C:DB:5C:C6:95:DE:6C:C3
Authority key identifier: 6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74
Certificate issuer:       /CN=A916B232/serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
Certificate serial:       077D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
Manifest number:          0775
Signing time:             Thu 18 Dec 2025 21:03:20 +0000
Manifest this update:     Thu 18 Dec 2025 21:03:19 +0000
Manifest next update:     Thu 25 Dec 2025 21:03:19 +0000
Files and hashes:         1: bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl (hash: 1P/NjxLMnPdK5On1oeUg0vtuw2c26rus7uFEIdpZZhE=)
                          2: A2C94D9C3F0F11EB80256B25C4F9AE02.roa (hash: VsARmmeViDsi1FVlV4Qtd1FMCrKISqOnhPnZTXsK7F8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1917 (0x77d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B232, serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
        Validity
            Not Before: Dec 18 21:03:19 2025 GMT
            Not After : Dec 25 21:03:19 2025 GMT
        Subject: CN=69446c17-8dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:4b:7b:5f:47:8b:6f:30:f6:93:05:fd:6b:
                    70:c9:84:c1:ab:bd:67:20:6b:60:57:0f:01:56:a0:
                    82:45:cd:ce:fd:0a:34:1b:f1:7c:d4:ac:5c:1c:c6:
                    00:7c:ca:9c:33:08:57:73:6f:37:60:a3:f0:69:af:
                    0d:20:d5:e8:34:db:b3:bf:4f:73:fd:35:0f:76:ef:
                    14:06:86:14:de:c6:37:95:2a:09:23:3c:17:85:69:
                    af:99:91:b2:0e:f6:5f:60:f6:76:d1:3b:6a:8f:c1:
                    b1:f3:bd:4e:d1:90:d1:62:c5:bf:72:f7:42:e4:c1:
                    a5:e4:f3:76:28:81:0e:75:af:68:16:25:3b:ca:db:
                    d3:d9:10:d7:9e:68:71:45:1e:54:26:30:68:67:ed:
                    e3:16:a0:eb:25:af:6b:09:97:9b:6e:04:8c:ff:b8:
                    66:0a:f1:5d:50:40:cc:f6:98:e2:b6:77:69:3a:b1:
                    c9:9d:ec:ae:eb:f7:83:fa:65:c3:52:41:f3:4e:ce:
                    63:e9:29:a3:85:67:1d:fe:79:cc:f0:1b:fb:ad:12:
                    3c:c6:36:ee:79:70:8a:68:15:e0:db:1d:7a:7a:b2:
                    6d:fd:8d:9b:bc:cb:89:7a:8c:c2:6f:20:45:6a:74:
                    c8:3b:d4:af:56:e0:31:98:51:2f:06:4c:07:b5:c4:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C1:81:9B:35:12:2E:21:AC:23:D9:E0:3C:DB:5C:C6:95:DE:6C:C3
            X509v3 Authority Key Identifier:
                keyid:6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6c:14:4a:1a:e1:2f:bc:c6:c9:8e:94:45:38:68:72:a3:62:
         9d:66:20:07:c3:8c:bd:dd:35:13:2f:10:b6:85:7c:e6:dd:8c:
         33:ba:0e:85:25:a8:7b:86:b6:4d:38:1a:cb:35:dd:c8:7a:0b:
         c2:b9:ec:8d:99:99:2b:87:0c:66:48:d7:2c:51:5d:ea:30:f2:
         38:34:12:b9:d6:d3:f2:03:62:a2:e3:db:a0:de:39:e6:bf:2f:
         39:2f:b2:df:2b:a9:11:19:e5:e2:06:88:f8:61:7f:1f:4c:30:
         23:da:93:e3:3f:89:f1:a7:db:cc:5f:8b:e6:f6:95:bd:f6:36:
         b2:ce:81:bc:a8:d9:27:c8:a9:cc:f8:59:3b:11:0c:25:4f:f1:
         89:06:3d:43:5d:b6:12:35:64:ce:35:c9:83:fa:09:6e:e2:5a:
         65:b9:72:b7:61:8f:a3:19:6e:ae:e8:95:a1:27:e7:97:0f:81:
         7b:c5:7d:89:2b:e9:1e:24:3f:10:e5:aa:ff:f8:0c:9e:4e:e7:
         4f:f4:f8:72:96:39:de:e3:d9:d7:55:6b:4d:84:cb:cf:ed:05:
         e4:0f:d8:70:6c:f8:88:8b:0a:f3:2d:cf:9c:38:c5:cc:c6:20:
         3a:1a:9e:a9:aa:61:31:51:8e:65:50:06:c3:18:33:8d:78:5e:
         8e:4f:97:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIyMzIxMTAvBgNVBAUTKDZFMTg0QkUxNDYxMkQ1QTJCNTNDNDk4NzY4NDQ1MDg1
MERCMDJDNzQwHhcNMjUxMjE4MjEwMzE5WhcNMjUxMjI1MjEwMzE5WjAYMRYwFAYD
VQQDDA02OTQ0NmMxNy04ZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfxLe19Hi28w9pMF/WtwyYTBq71nIGtgVw8BVqCCRc3O/Qo0G/F81KxcHMYA
fMqcMwhXc283YKPwaa8NINXoNNuzv09z/TUPdu8UBoYU3sY3lSoJIzwXhWmvmZGy
DvZfYPZ20Ttqj8Gx871O0ZDRYsW/cvdC5MGl5PN2KIEOda9oFiU7ytvT2RDXnmhx
RR5UJjBoZ+3jFqDrJa9rCZebbgSM/7hmCvFdUEDM9pjitndpOrHJneyu6/eD+mXD
UkHzTs5j6SmjhWcd/nnM8Bv7rRI8xjbueXCKaBXg2x16erJt/Y2bvMuJeozCbyBF
anTIO9SvVuAxmFEvBkwHtcRshwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInBgZs1
Ei4hrCPZ4DzbXMaV3mzDMB8GA1UdIwQYMBaAFG4YS+FGEtWitTxJh2hEUIUNsCx0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjIzMi85NEQ0Qzc0MDNG
MEQxMUVCQUYxRkNFMjJDNEY5QUUwMi9iaGhMNFVZUzFhSzFQRW1IYUVSUWhRMndM
SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JoaEw0VVlTMWFLMVBFbUhhRVJRaFEyd0xIUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjIzMi85NEQ0Qzc0MDNGMEQxMUVCQUYxRkNFMjJDNEY5QUUwMi9iaGhMNFVZUzFh
SzFQRW1IYUVSUWhRMndMSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEbBRKGuEvvMbJjpRFOGhyo2KdZiAHw4y93TUTLxC2hXzm3Ywzug6F
Jah7hrZNOBrLNd3IegvCueyNmZkrhwxmSNcsUV3qMPI4NBK51tPyA2Ki49ug3jnm
vy85L7LfK6kRGeXiBoj4YX8fTDAj2pPjP4nxp9vMX4vm9pW99jayzoG8qNknyKnM
+Fk7EQwlT/GJBj1DXbYSNWTONcmD+glu4lpluXK3YY+jGW6u6JWhJ+eXD4F7xX2J
K+keJD8Q5ar/+AyeTudP9Phyljne49nXVWtNhMvP7QXkD9hwbPiIiwrzLc+cOMXM
xiA6Gp6pqmExUY5lUAbDGDONeF6OT5d8
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:59 2025 by rpki-client