This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
File:                     bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json)
Hash identifier:          7/YGXQKW25oDZsFACnQgTezWn4HsykjHoCZs+xEEs7U=
Subject key identifier:   55:EA:C0:71:68:CB:67:A4:DA:8B:FF:DB:3E:50:78:45:B5:CB:B1:F5
Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
Certificate issuer:       /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Certificate serial:       11A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
Manifest number:          1195
Signing time:             Tue 06 Jan 2026 16:55:36 +0000
Manifest this update:     Tue 06 Jan 2026 16:55:36 +0000
Manifest next update:     Tue 13 Jan 2026 16:55:36 +0000
Files and hashes:         1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: wdA/sb9akqm5HHLXu6pxZuveDHNxOjsZJoi7iTY7/YY=)
                          2: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: oY1WXZVko8XjgFNGHLeULp2ndsYGuRPLSE4EMHTqlSY=)
                          3: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: 28+4DGnpX6Ji2cYmKm+1uSknOVpH5kmdClZ3WCtYgVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
                          rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Jan 2026 16:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4517 (0x11a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
        Validity
            Not Before: Jan  6 16:55:36 2026 GMT
            Not After : Jan 13 16:55:36 2026 GMT
        Subject: CN=695d3e88-d07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:67:11:1d:55:00:51:89:34:4d:5b:88:77:
                    bc:73:52:a9:8c:d9:e5:7b:f0:67:b3:fb:81:aa:e3:
                    84:1b:a6:6b:30:dc:7c:ab:3e:ef:e4:ef:72:02:a5:
                    63:0d:53:6d:9b:5b:b0:c3:a8:1a:ce:41:19:f9:d6:
                    2e:99:2e:f8:5e:10:7a:43:9b:c6:51:4b:a4:2e:e0:
                    20:69:ed:4a:fa:c7:71:2e:05:df:fa:c9:37:bd:4f:
                    b7:69:c5:13:9b:d0:52:49:08:68:15:2e:50:8c:74:
                    c2:b8:f4:9a:85:af:a2:55:ab:cb:14:b4:66:2c:69:
                    40:5c:7a:8d:90:a6:2c:b5:6d:41:6e:7f:1c:d7:2e:
                    b6:43:1f:d2:81:c2:77:3a:ba:fa:af:30:64:9e:5a:
                    d4:31:4e:b1:ea:7e:57:34:0a:bf:a1:25:b5:cf:84:
                    17:dd:60:9a:95:2a:6a:88:83:80:7c:1e:c7:50:3a:
                    c8:f9:65:7e:6f:10:93:60:f2:92:b3:b2:1b:f8:56:
                    80:e7:df:cb:61:c2:a5:99:a6:89:42:8c:8c:f5:e8:
                    e1:0a:7d:7b:79:cd:a3:c3:43:24:0a:94:36:69:3b:
                    68:0a:3c:c2:1d:ba:8c:eb:ca:5b:35:fd:e5:82:b5:
                    ed:fe:63:c0:7a:76:f7:49:68:b5:10:d7:d3:c0:ac:
                    4e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EA:C0:71:68:CB:67:A4:DA:8B:FF:DB:3E:50:78:45:B5:CB:B1:F5
            X509v3 Authority Key Identifier:
                keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:36:f3:56:01:9b:70:83:b4:d2:73:b9:02:fa:b9:cf:2c:9c:
         17:64:11:d3:b8:7f:10:d8:ad:12:03:2e:be:ab:e0:80:6f:44:
         7a:0d:79:51:9c:00:ce:b9:3b:53:c9:08:5a:f3:67:ce:e8:92:
         c7:a9:de:d6:77:c6:88:4b:be:cd:b8:2d:63:4d:fb:e4:e5:0e:
         b0:2f:6d:a2:9a:54:a8:ae:57:62:b4:27:16:ea:78:6d:26:e9:
         44:46:b2:4e:2a:f1:4c:40:23:85:65:70:58:9a:42:4d:28:c5:
         0b:d1:ce:20:98:1a:1b:79:8d:19:77:fa:8b:f5:1a:dd:4e:55:
         d7:17:04:eb:fd:52:2c:47:2d:45:45:41:7e:82:23:75:92:95:
         33:ac:22:e3:ff:cf:c9:7b:03:31:d3:8f:a6:45:2e:95:c0:6b:
         5a:5e:2f:01:21:4b:9f:0e:2f:34:12:96:0d:53:c0:c4:a6:67:
         bf:b8:72:e0:49:30:1d:f1:ec:f0:fd:72:b4:43:9a:19:7f:3d:
         84:5b:b3:6a:ef:ef:df:ff:f3:d7:95:d0:3a:80:2c:3b:f7:d1:
         1a:6c:a0:d4:aa:04:1f:07:fd:b6:19:4b:a3:69:0c:69:12:4f:
         06:19:b3:d4:c1:be:4d:cd:73:74:23:64:78:a3:b4:d1:af:38:
         3b:ad:3e:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTYxNzIxMTAvBgNVBAUTKDZDM0E3RTAyQUNCQjczQTY2MzVCREFGRTAyMkQ3ODVE
MDBDNDQ3REIwHhcNMjYwMTA2MTY1NTM2WhcNMjYwMTEzMTY1NTM2WjAYMRYwFAYD
VQQDDA02OTVkM2U4OC1kMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2oZnER1VAFGJNE1biHe8c1KpjNnle/Bns/uBquOEG6ZrMNx8qz7v5O9yAqVj
DVNtm1uww6gazkEZ+dYumS74XhB6Q5vGUUukLuAgae1K+sdxLgXf+sk3vU+3acUT
m9BSSQhoFS5QjHTCuPSaha+iVavLFLRmLGlAXHqNkKYstW1Bbn8c1y62Qx/SgcJ3
Orr6rzBknlrUMU6x6n5XNAq/oSW1z4QX3WCalSpqiIOAfB7HUDrI+WV+bxCTYPKS
s7Ib+FaA59/LYcKlmaaJQoyM9ejhCn17ec2jw0MkCpQ2aTtoCjzCHbqM68pbNf3l
grXt/mPAenb3SWi1ENfTwKxOSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXqwHFo
y2ek2ov/2z5QeEW1y7H1MB8GA1UdIwQYMBaAFGw6fgKsu3OmY1va/gIteF0AxEfb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjE3Mi9FODY3Q0IxMDBG
MUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2WmpXOXItQWkxNFhRREVS
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JEcC1BcXk3YzZaalc5ci1BaTE0WFFERVI5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NjE3Mi9FODY3Q0IxMDBGMUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2
WmpXOXItQWkxNFhRREVSOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4NvNWAZtwg7TSc7kC+rnPLJwXZBHTuH8Q2K0SAy6+q+CAb0R6DXlR
nADOuTtTyQha82fO6JLHqd7Wd8aIS77NuC1jTfvk5Q6wL22imlSorlditCcW6nht
JulERrJOKvFMQCOFZXBYmkJNKMUL0c4gmBobeY0Zd/qL9RrdTlXXFwTr/VIsRy1F
RUF+giN1kpUzrCLj/8/JewMx04+mRS6VwGtaXi8BIUufDi80EpYNU8DEpme/uHLg
STAd8ezw/XK0Q5oZfz2EW7Nq7+/f//PXldA6gCw799EabKDUqgQfB/22GUujaQxp
Ek8GGbPUwb5NzXN0I2R4o7TRrzg7rT5G
-----END CERTIFICATE-----
Generated at Wed Jan 7 10:24:01 2026 by rpki-client