This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
File:                     bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft (raw, json)
Hash identifier:          keGqDPrWIVrE21qFn8hNIxkToltAJ4z7K+VWH4H9khE=
Subject key identifier:   86:FB:BE:B7:48:8F:73:56:B8:93:F9:D1:82:F6:4D:06:7E:AB:CA:EC
Authority key identifier: 6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38
Certificate issuer:       /CN=A913EA16/serialNumber=6E148A0D085780386A817DCD8D64695411C76838
Certificate serial:       0464
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
Manifest number:          045D
Signing time:             Sat 06 Dec 2025 22:51:40 +0000
Manifest this update:     Sat 06 Dec 2025 22:51:39 +0000
Manifest next update:     Sat 13 Dec 2025 22:51:39 +0000
Files and hashes:         1: bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl (hash: vgz/HppFmmKJH7umE8+8rSPbuEkGEC+1mld/tIaEkqQ=)
                          2: 8B729608B62F11EFB2DE315FC4F9AE02.roa (hash: ERP6Y5/dUFxszjFDuuFfjwGYbKhjm1R8qrQOrEiUTKw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl
                          rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EA16, serialNumber=6E148A0D085780386A817DCD8D64695411C76838
        Validity
            Not Before: Dec  6 22:51:39 2025 GMT
            Not After : Dec 13 22:51:39 2025 GMT
        Subject: CN=6934b37c-444b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:34:36:65:4f:10:ca:be:0e:12:9f:6a:75:
                    0a:7a:83:06:4f:82:e5:0a:21:9a:8d:ed:47:82:fa:
                    71:e6:b4:17:9e:2c:4c:7e:e7:45:44:a7:29:fd:ad:
                    21:7d:51:8d:eb:82:12:84:53:38:bc:b3:52:49:4c:
                    0f:ab:bc:30:b2:8e:c0:b3:f2:83:b4:12:b7:09:13:
                    83:25:4d:f2:d0:03:c5:91:18:b9:3f:28:26:8a:a3:
                    0e:da:cf:1e:44:d4:83:fe:7f:b6:05:ee:6a:0d:f7:
                    0e:1f:7d:b2:bb:3e:95:5c:32:c7:57:97:c7:ef:97:
                    ae:f8:a2:f4:d1:a3:d2:e0:4a:92:ae:c0:1a:83:96:
                    0d:c0:62:6b:e2:12:00:c1:2c:7f:c5:a8:52:49:74:
                    9c:31:ec:4f:b1:ba:66:8e:90:17:8d:26:1c:0d:02:
                    d7:e5:6d:06:81:8d:cb:dc:9b:9b:e0:09:8a:4a:51:
                    77:44:00:65:89:ed:b1:1a:97:a4:40:48:a0:67:ee:
                    c8:3d:39:52:aa:64:fd:61:c0:1c:49:92:c7:41:e4:
                    07:4c:9e:97:76:f4:42:00:3d:73:80:6d:f0:86:89:
                    9e:1c:4b:21:ab:74:32:a8:18:27:2f:f7:05:22:a6:
                    75:61:c8:69:e9:38:8d:f0:f4:eb:81:e9:dd:35:03:
                    7a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FB:BE:B7:48:8F:73:56:B8:93:F9:D1:82:F6:4D:06:7E:AB:CA:EC
            X509v3 Authority Key Identifier:
                keyid:6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:29:c6:d1:b6:ce:fe:1f:fe:e0:0b:5c:0e:be:be:2d:03:1a:
         ad:84:c3:73:2e:db:86:2b:e7:e8:a3:3d:a9:12:f4:95:50:d0:
         24:6a:73:ad:00:b1:e6:29:ca:86:a7:7e:be:b7:5d:3d:3b:f0:
         ac:16:9b:d9:68:59:1b:58:be:df:63:89:16:bb:7f:d8:c5:78:
         5d:fc:08:85:f3:30:0c:aa:da:ab:a0:e0:ca:2f:b9:8c:68:e5:
         ef:28:5b:b2:32:60:19:50:41:5a:2a:41:6c:6e:ff:a5:47:c3:
         94:d9:77:d1:2a:17:4e:e5:6c:fb:0e:e7:d6:af:dc:2c:99:38:
         81:5b:a0:b6:a5:a6:eb:63:1b:23:70:db:32:3d:f3:7e:d5:82:
         ec:12:1c:8c:59:6e:ca:de:d3:77:43:cc:1d:97:11:6f:85:3f:
         cb:39:31:be:0a:71:9a:fa:0e:e0:bc:4c:87:d2:74:cc:7b:e7:
         9a:8c:64:5f:68:cd:39:f9:7e:77:c0:a7:84:07:74:34:9d:c9:
         bd:6d:78:2d:e1:c7:28:a2:40:0d:4c:d8:51:09:1e:9d:e5:84:
         74:94:67:5a:c3:ff:bf:29:03:76:94:8a:12:3d:38:45:ca:b6:
         20:ec:fc:4f:f2:15:f7:d6:fa:65:30:6c:76:19:ee:1a:03:13:
         29:a2:00:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VBMTYxMTAvBgNVBAUTKDZFMTQ4QTBEMDg1NzgwMzg2QTgxN0RDRDhENjQ2OTU0
MTFDNzY4MzgwHhcNMjUxMjA2MjI1MTM5WhcNMjUxMjEzMjI1MTM5WjAYMRYwFAYD
VQQDEw02OTM0YjM3Yy00NDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1L40NmVPEMq+DhKfanUKeoMGT4LlCiGaje1Hgvpx5rQXnixMfudFRKcp/a0h
fVGN64IShFM4vLNSSUwPq7wwso7As/KDtBK3CRODJU3y0APFkRi5PygmiqMO2s8e
RNSD/n+2Be5qDfcOH32yuz6VXDLHV5fH75eu+KL00aPS4EqSrsAag5YNwGJr4hIA
wSx/xahSSXScMexPsbpmjpAXjSYcDQLX5W0GgY3L3Jub4AmKSlF3RABlie2xGpek
QEigZ+7IPTlSqmT9YcAcSZLHQeQHTJ6XdvRCAD1zgG3whomeHEshq3QyqBgnL/cF
IqZ1Ychp6TiN8PTrgendNQN6fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb7vrdI
j3NWuJP50YL2TQZ+q8rsMB8GA1UdIwQYMBaAFG4Uig0IV4A4aoF9zY1kaVQRx2g4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUExNi80NTJGN0FFRTc3
N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdEaHFnWDNOaldScFZCSEhh
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JoU0tEUWhYZ0RocWdYM05qV1JwVkJISGFEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUExNi80NTJGN0FFRTc3N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdE
aHFnWDNOaldScFZCSEhhRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVKcbRts7+H/7gC1wOvr4tAxqthMNzLtuGK+fooz2pEvSVUNAkanOt
ALHmKcqGp36+t109O/CsFpvZaFkbWL7fY4kWu3/YxXhd/AiF8zAMqtqroODKL7mM
aOXvKFuyMmAZUEFaKkFsbv+lR8OU2XfRKhdO5Wz7DufWr9wsmTiBW6C2pabrYxsj
cNsyPfN+1YLsEhyMWW7K3tN3Q8wdlxFvhT/LOTG+CnGa+g7gvEyH0nTMe+eajGRf
aM05+X53wKeEB3Q0ncm9bXgt4ccookANTNhRCR6d5YR0lGdaw/+/KQN2lIoSPThF
yrYg7PxP8hX31vplMGx2Ge4aAxMpogDp
-----END CERTIFICATE-----
Generated at Sun Dec 7 22:25:06 2025 by rpki-client