This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
File:                     bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft (raw, json)
Hash identifier:          jbrlZv43jYEcs/DM9UBjDNSeeeUy6guUIi0TxnSeNEg=
Subject key identifier:   FD:E7:76:53:C9:5B:D9:3B:27:2B:2A:A2:BE:50:99:57:59:EE:D1:B2
Authority key identifier: 6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74
Certificate issuer:       /CN=A916B232/serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
Certificate serial:       0789
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
Manifest number:          0781
Signing time:             Sat 10 Jan 2026 20:55:30 +0000
Manifest this update:     Sat 10 Jan 2026 20:55:29 +0000
Manifest next update:     Sat 17 Jan 2026 20:55:29 +0000
Files and hashes:         1: bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl (hash: p9nMMsQMsyOjOFxxDeI6uCV03WSXZ1riWXkh2U9NtaY=)
                          2: A2C94D9C3F0F11EB80256B25C4F9AE02.roa (hash: VsARmmeViDsi1FVlV4Qtd1FMCrKISqOnhPnZTXsK7F8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 20:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B232, serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
        Validity
            Not Before: Jan 10 20:55:29 2026 GMT
            Not After : Jan 17 20:55:29 2026 GMT
        Subject: CN=6962bcc1-12a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:3d:a4:aa:73:9a:6e:89:0c:6e:49:fc:39:
                    28:af:2f:08:1a:5b:ca:56:35:f6:18:d3:7d:3a:df:
                    cf:68:00:a7:a4:8a:72:2c:20:f3:37:9b:47:4d:26:
                    0f:be:c3:24:cc:fb:d1:35:13:c0:cc:05:50:30:35:
                    04:d5:b3:49:25:c2:b6:cd:f9:a5:10:c0:fe:fe:b3:
                    c0:ea:8b:c0:59:82:3f:a1:b1:83:9e:22:5f:07:f4:
                    fa:d4:33:47:12:e7:b6:65:89:3c:7b:b7:05:b1:82:
                    0e:bd:64:f3:fc:57:ad:d4:c4:b0:83:bd:8a:42:47:
                    19:18:a6:91:42:38:78:41:03:2f:10:c9:6a:9e:c5:
                    a4:e5:fe:46:c7:fa:35:b4:12:1b:9f:15:0e:76:a4:
                    dd:e8:41:be:4c:8d:56:a6:67:60:e9:06:f0:50:f7:
                    33:df:24:3a:e8:1e:c2:a4:85:c0:40:dd:4a:e3:56:
                    6d:ae:0e:30:50:ef:c6:ae:09:36:2b:8f:fb:56:32:
                    72:54:cb:c3:b4:57:6c:5f:3a:e5:f5:49:99:d5:2a:
                    96:b6:08:5e:f1:98:76:65:69:a4:7b:6b:1c:fe:e4:
                    4f:41:86:12:01:4a:ff:7d:ea:01:8d:ab:df:8f:63:
                    1b:c8:b7:95:15:ed:af:a6:1d:f7:66:49:20:78:ec:
                    be:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E7:76:53:C9:5B:D9:3B:27:2B:2A:A2:BE:50:99:57:59:EE:D1:B2
            X509v3 Authority Key Identifier:
                keyid:6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c5:dd:89:00:3e:70:92:a9:57:eb:5e:37:f5:78:80:8a:4f:
         df:16:c5:6e:2d:62:90:7e:53:45:7e:61:55:0a:bf:50:03:08:
         6f:4c:8a:ea:ca:85:4a:52:a7:01:fd:b6:2c:db:cf:13:c6:04:
         dc:a1:3c:da:d9:08:dd:a8:34:35:80:36:e6:95:7b:78:7d:c8:
         26:56:04:a9:fa:9e:25:b8:b7:48:6c:ba:6a:c1:30:8c:61:4d:
         b8:b9:f7:2f:4e:bd:4e:17:01:41:0a:f3:fb:7e:05:39:f4:f3:
         5d:a5:35:ac:c2:62:1a:2c:3a:ec:ae:c6:5c:1e:99:8d:4c:d5:
         04:87:97:34:e1:73:9d:95:f0:f9:a6:af:e6:35:29:89:03:f7:
         51:ab:4d:35:c4:c6:2d:4e:bc:07:5e:15:c9:c3:8c:ab:ea:3a:
         d7:2f:2a:78:97:8d:45:82:e3:0e:d0:e8:62:71:07:7d:67:6a:
         10:8e:32:d0:47:b0:05:1b:ee:36:53:34:1b:61:04:c6:00:15:
         e0:23:13:6b:49:b2:b1:ab:23:18:63:3e:2c:65:35:6d:62:92:
         26:76:5c:1b:b9:22:cd:02:53:57:e3:16:be:a7:6a:d6:3f:55:
         7c:99:b6:c4:8a:ad:e4:05:1f:c2:6e:bb:f2:a3:eb:ce:11:04:
         3b:e9:ec:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIyMzIxMTAvBgNVBAUTKDZFMTg0QkUxNDYxMkQ1QTJCNTNDNDk4NzY4NDQ1MDg1
MERCMDJDNzQwHhcNMjYwMTEwMjA1NTI5WhcNMjYwMTE3MjA1NTI5WjAYMRYwFAYD
VQQDDA02OTYyYmNjMS0xMmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArgg9pKpzmm6JDG5J/Dkory8IGlvKVjX2GNN9Ot/PaACnpIpyLCDzN5tHTSYP
vsMkzPvRNRPAzAVQMDUE1bNJJcK2zfmlEMD+/rPA6ovAWYI/obGDniJfB/T61DNH
Eue2ZYk8e7cFsYIOvWTz/Fet1MSwg72KQkcZGKaRQjh4QQMvEMlqnsWk5f5Gx/o1
tBIbnxUOdqTd6EG+TI1Wpmdg6QbwUPcz3yQ66B7CpIXAQN1K41Ztrg4wUO/Grgk2
K4/7VjJyVMvDtFdsXzrl9UmZ1SqWtghe8Zh2ZWmke2sc/uRPQYYSAUr/feoBjavf
j2MbyLeVFe2vph33ZkkgeOy++QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3ndlPJ
W9k7Jysqor5QmVdZ7tGyMB8GA1UdIwQYMBaAFG4YS+FGEtWitTxJh2hEUIUNsCx0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjIzMi85NEQ0Qzc0MDNG
MEQxMUVCQUYxRkNFMjJDNEY5QUUwMi9iaGhMNFVZUzFhSzFQRW1IYUVSUWhRMndM
SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JoaEw0VVlTMWFLMVBFbUhhRVJRaFEyd0xIUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjIzMi85NEQ0Qzc0MDNGMEQxMUVCQUYxRkNFMjJDNEY5QUUwMi9iaGhMNFVZUzFh
SzFQRW1IYUVSUWhRMndMSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTxd2JAD5wkqlX61439XiAik/fFsVuLWKQflNFfmFVCr9QAwhvTIrq
yoVKUqcB/bYs288TxgTcoTza2QjdqDQ1gDbmlXt4fcgmVgSp+p4luLdIbLpqwTCM
YU24ufcvTr1OFwFBCvP7fgU59PNdpTWswmIaLDrsrsZcHpmNTNUEh5c04XOdlfD5
pq/mNSmJA/dRq001xMYtTrwHXhXJw4yr6jrXLyp4l41FguMO0OhicQd9Z2oQjjLQ
R7AFG+42UzQbYQTGABXgIxNrSbKxqyMYYz4sZTVtYpImdlwbuSLNAlNX4xa+p2rW
P1V8mbbEiq3kBR/Cbrvyo+vOEQQ76ez0
-----END CERTIFICATE-----
Generated at Sun Jan 11 14:34:13 2026 by rpki-client