This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
File:                     ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft (raw, json)
Hash identifier:          f9Yg2nFlE5mOviagryZT/NFa2X6jPfSijcb07yhgawk=
Subject key identifier:   52:B7:F2:34:96:0F:B9:2C:F7:65:1E:F1:F3:57:21:A4:09:A2:E2:0E
Authority key identifier: 6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7
Certificate issuer:       /CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
Certificate serial:       0CB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
Manifest number:          0CAF
Signing time:             Sat 10 Jan 2026 17:57:49 +0000
Manifest this update:     Sat 10 Jan 2026 17:57:48 +0000
Manifest next update:     Sat 17 Jan 2026 17:57:48 +0000
Files and hashes:         1: ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl (hash: 9uj0VBNHyfuqDHROaucBqwC/ck1zOVlvzb38IVBULe0=)
                          2: F0208B2012BC11EBB3294950C4F9AE02.roa (hash: YAZVPBwhRd3Zwtu+5mGrhQ3oIunZzsRzOetYRLfqDuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl
                          rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3255 (0xcb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C451, serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
        Validity
            Not Before: Jan 10 17:57:48 2026 GMT
            Not After : Jan 17 17:57:48 2026 GMT
        Subject: CN=6962931d-c074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3f:56:cf:01:1b:4d:31:fd:13:27:7e:df:05:
                    f3:6a:49:26:d2:fc:79:8c:cb:66:17:dc:eb:63:09:
                    6e:e6:44:23:cb:42:98:62:39:49:0f:24:4f:79:35:
                    e8:f6:60:e1:ea:8f:db:03:70:2c:89:54:49:a9:f7:
                    79:89:c7:9f:3a:cf:70:4e:6d:71:86:95:c9:04:1d:
                    38:cd:10:a0:7d:f3:c4:f1:f3:fd:b0:23:b4:d4:40:
                    b7:8f:75:22:7c:46:88:0a:54:39:f8:9e:63:4c:d4:
                    1c:98:20:de:d2:20:2e:f7:78:dd:33:8c:c5:f1:f6:
                    71:43:b7:f4:49:78:65:7e:49:59:61:35:b5:15:e0:
                    d8:4d:d6:d4:d0:2a:b3:39:9e:09:4a:55:d2:ed:c6:
                    51:ce:60:4f:3d:af:0b:41:d5:6e:c5:9c:fe:de:2a:
                    69:7d:e5:64:fd:60:1a:6c:8e:76:05:5b:fe:db:de:
                    66:70:1c:ac:73:46:03:1c:bd:4c:35:45:73:93:ca:
                    b8:af:f6:0e:65:a3:78:7a:f1:a6:55:cc:b4:c6:f0:
                    85:50:37:24:9b:7e:69:e5:2e:e4:02:a8:a7:d1:33:
                    1c:d3:a3:49:4e:d2:1f:98:b3:c5:72:49:85:a7:52:
                    1e:2d:c5:7d:aa:bb:ed:83:a3:9c:2f:05:7e:58:19:
                    15:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B7:F2:34:96:0F:B9:2C:F7:65:1E:F1:F3:57:21:A4:09:A2:E2:0E
            X509v3 Authority Key Identifier:
                keyid:6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:21:a5:a1:52:df:16:84:3a:e8:e9:23:5c:d6:b0:f3:f9:ef:
         00:8b:69:98:9b:1d:48:3a:38:c3:ba:b3:8d:7b:5f:d0:14:7f:
         2c:34:99:19:bf:b7:e6:17:41:5d:ea:d4:cf:2f:3c:e9:ba:73:
         23:6d:fd:1d:fc:8a:1c:d6:4b:a6:7f:bc:b0:7c:56:b2:e4:72:
         bd:25:b5:57:80:bd:33:d8:f0:c1:a1:61:6d:fe:34:74:23:c6:
         fd:8f:40:9d:8d:0e:ba:a5:29:47:8f:19:39:a5:6b:06:30:01:
         86:36:2f:3e:b0:09:6e:3d:b9:88:55:9f:f8:57:16:64:d8:1a:
         9f:05:9c:6b:91:ac:d9:6f:8c:71:86:23:5e:98:e0:3f:30:97:
         a6:c8:69:ad:e9:20:4a:9c:f4:3c:97:47:27:73:2e:8e:c4:47:
         00:b8:a4:29:c2:5e:12:29:d4:1b:fb:5e:8b:8e:4a:c0:3f:ff:
         7b:df:77:8d:5c:f0:f2:e6:1b:79:65:c3:a6:7b:7f:c4:9f:3f:
         be:d2:eb:aa:4f:f3:dc:dd:68:91:44:8e:84:6c:23:9a:99:ee:
         d6:9d:00:63:e3:45:18:5e:ce:63:72:fb:19:42:a3:09:0a:e8:
         a3:86:00:e4:85:91:e1:c5:ce:a5:dd:3c:22:d8:45:40:fe:c8:
         8f:2c:9e:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM0NTExMTAvBgNVBAUTKDZBMTg1QkY0MTdBMkVCMDJBMTJFMTlENTc1OTBBRDhE
MTE4NDc1RjcwHhcNMjYwMTEwMTc1NzQ4WhcNMjYwMTE3MTc1NzQ4WjAYMRYwFAYD
VQQDDA02OTYyOTMxZC1jMDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiT9WzwEbTTH9Eyd+3wXzakkm0vx5jMtmF9zrYwlu5kQjy0KYYjlJDyRPeTXo
9mDh6o/bA3AsiVRJqfd5icefOs9wTm1xhpXJBB04zRCgffPE8fP9sCO01EC3j3Ui
fEaIClQ5+J5jTNQcmCDe0iAu93jdM4zF8fZxQ7f0SXhlfklZYTW1FeDYTdbU0Cqz
OZ4JSlXS7cZRzmBPPa8LQdVuxZz+3ippfeVk/WAabI52BVv+295mcBysc0YDHL1M
NUVzk8q4r/YOZaN4evGmVcy0xvCFUDckm35p5S7kAqin0TMc06NJTtIfmLPFckmF
p1IeLcV9qrvtg6OcLwV+WBkV8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFK38jSW
D7ks92Ue8fNXIaQJouIOMB8GA1UdIwQYMBaAFGoYW/QXousCoS4Z1XWQrY0RhHX3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ1MS9COTM0OTM3QTA2
RDAxMUVBOEQ0MzhDM0ZDNEY5QUUwMi9haGhiOUJlaTZ3S2hMaG5WZFpDdGpSR0Vk
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FoaGI5QmVpNndLaExoblZkWkN0alJHRWRmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzQ1MS9COTM0OTM3QTA2RDAxMUVBOEQ0MzhDM0ZDNEY5QUUwMi9haGhiOUJlaTZ3
S2hMaG5WZFpDdGpSR0VkZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsIaWhUt8WhDro6SNc1rDz+e8Ai2mYmx1IOjjDurONe1/QFH8sNJkZ
v7fmF0Fd6tTPLzzpunMjbf0d/Ioc1kumf7ywfFay5HK9JbVXgL0z2PDBoWFt/jR0
I8b9j0CdjQ66pSlHjxk5pWsGMAGGNi8+sAluPbmIVZ/4VxZk2BqfBZxrkazZb4xx
hiNemOA/MJemyGmt6SBKnPQ8l0cncy6OxEcAuKQpwl4SKdQb+16LjkrAP/9733eN
XPDy5ht5ZcOme3/Enz++0uuqT/Pc3WiRRI6EbCOame7WnQBj40UYXs5jcvsZQqMJ
CuijhgDkhZHhxc6l3Twi2EVA/siPLJ78
-----END CERTIFICATE-----
Generated at Mon Jan 12 01:32:15 2026 by rpki-client