This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
File:                     v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json)
Hash identifier:          fok08XzBV5kGd5mh/03g9evBfa5SHmNchlSZ72kMAIM=
Subject key identifier:   8C:F0:8B:39:A5:5D:26:96:D9:1F:E6:A8:97:D6:03:54:02:D3:AD:CD
Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2
Certificate issuer:       /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
Manifest number:          81
Signing time:             Fri 23 Jan 2026 05:47:31 +0000
Manifest this update:     Fri 23 Jan 2026 05:47:31 +0000
Manifest next update:     Fri 30 Jan 2026 05:47:31 +0000
Files and hashes:         1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: otANlXOoGM4xSE7HFUFtJg0X91WSWu0hx4SBmeqNcuM=)
                          2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: fSlcIZdpNT8EGzQOFMuevlDD2po6QEISgofqICdF3UI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl
                          rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
        Validity
            Not Before: Jan 23 05:47:31 2026 GMT
            Not After : Jan 30 05:47:31 2026 GMT
        Subject: CN=69730b73-2afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:85:99:b3:d5:8f:d1:45:87:d5:00:f8:64:
                    76:3b:de:7f:c5:f1:72:66:fd:47:e3:3f:02:eb:9a:
                    c3:70:75:93:a7:93:51:fb:c1:34:29:9a:4a:6c:08:
                    53:9a:44:a7:18:e6:51:1a:27:7e:89:f1:08:27:ae:
                    b0:12:46:52:df:84:45:b4:d4:bf:dc:01:5e:0f:bc:
                    04:6e:1d:b0:83:17:17:22:80:52:e8:bf:5a:90:5e:
                    f6:41:9c:cd:91:47:35:3d:4d:13:10:44:d8:6d:29:
                    56:e8:d4:62:30:9a:bc:e7:e5:ee:4f:b6:74:23:b6:
                    c8:ba:dc:20:95:af:d6:de:33:36:59:80:d8:56:53:
                    7f:8e:1f:52:9e:ba:08:90:e8:57:c2:72:22:57:a3:
                    b0:89:bf:1c:2f:e5:82:4d:7f:53:d2:f5:6e:24:46:
                    56:96:82:06:22:f1:44:97:4c:61:e9:9d:dc:5f:ac:
                    68:fe:b9:67:a1:35:84:ce:05:ef:37:a7:c3:87:85:
                    b3:50:b3:41:82:4d:b5:5b:e9:46:7f:4f:dc:27:02:
                    e5:22:e9:5f:da:43:d4:5d:f3:cc:a9:d2:57:b2:71:
                    32:c9:d3:1f:8f:91:71:21:99:72:01:39:12:4d:bc:
                    bf:8b:54:f7:be:ff:f4:a8:26:d1:4d:2d:80:e6:db:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F0:8B:39:A5:5D:26:96:D9:1F:E6:A8:97:D6:03:54:02:D3:AD:CD
            X509v3 Authority Key Identifier:
                keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:00:e8:f8:51:fa:48:53:7a:da:5e:90:d3:7d:e6:56:0f:24:
         38:7d:4a:57:49:6c:a5:ae:78:3a:7d:fd:b7:0b:07:a8:ba:4e:
         4c:b6:ea:a3:87:5a:f4:50:ed:02:69:0e:c6:4b:ec:fc:fc:12:
         fb:f1:8e:8c:26:e8:c1:00:89:eb:fe:52:63:bd:86:62:60:5a:
         2c:5e:36:ff:ae:64:a8:a3:07:c5:bb:73:b8:70:16:ab:ac:69:
         47:7d:67:d9:c1:13:59:72:40:13:d6:49:99:e3:d8:d9:f0:a1:
         d4:42:71:83:c9:bf:c1:b8:9f:0f:88:ee:81:98:99:77:1f:42:
         29:e0:95:f0:f1:9a:1c:5a:26:42:1b:17:74:d4:1a:88:46:b5:
         e6:f2:b3:98:25:99:d6:68:2c:dc:85:2c:87:32:b9:e2:0b:1a:
         d9:2d:84:63:36:3f:ed:d1:53:c3:03:2c:b9:45:a0:e9:34:70:
         61:a6:31:04:ba:d1:38:5e:ab:6b:65:3a:33:8a:f2:09:ab:58:
         08:f6:28:c2:a7:59:1b:4d:c6:db:6d:6f:a9:57:56:09:35:77:
         42:ea:3e:3c:63:fb:00:21:e2:4e:77:be:69:cc:f2:dc:34:86:
         14:47:c6:92:87:5f:31:df:52:01:f9:9a:e0:f4:c4:25:45:94:
         68:8a:4c:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdCNzQxMTAvBgNVBAUTKEJGODg2MEIyQzAzNzdCQjVFRkVEQkUzQUQ0MEYxQ0Yx
ODlGMkFDQjIwHhcNMjYwMTIzMDU0NzMxWhcNMjYwMTMwMDU0NzMxWjAYMRYwFAYD
VQQDDA02OTczMGI3My0yYWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs3eFmbPVj9FFh9UA+GR2O95/xfFyZv1H4z8C65rDcHWTp5NR+8E0KZpKbAhT
mkSnGOZRGid+ifEIJ66wEkZS34RFtNS/3AFeD7wEbh2wgxcXIoBS6L9akF72QZzN
kUc1PU0TEETYbSlW6NRiMJq85+XuT7Z0I7bIutwgla/W3jM2WYDYVlN/jh9SnroI
kOhXwnIiV6Owib8cL+WCTX9T0vVuJEZWloIGIvFEl0xh6Z3cX6xo/rlnoTWEzgXv
N6fDh4WzULNBgk21W+lGf0/cJwLlIulf2kPUXfPMqdJXsnEyydMfj5FxIZlyATkS
Tby/i1T3vv/0qCbRTS2A5ts+zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzwizml
XSaW2R/mqJfWA1QC063NMB8GA1UdIwQYMBaAFL+IYLLAN3u17+2+OtQPHPGJ8qyy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I3NC9DRTAwNDI1QTM2
QkMxMUYwODFENTVGMTdDNEY5QUUwMi92NGhnc3NBM2U3WHY3YjQ2MUE4YzhZbnly
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Y0aGdzc0EzZTdYdjdiNDYxQThjOFlueXJMSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0I3NC9DRTAwNDI1QTM2QkMxMUYwODFENTVGMTdDNEY5QUUwMi92NGhnc3NBM2U3
WHY3YjQ2MUE4YzhZbnlyTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNAOj4UfpIU3raXpDTfeZWDyQ4fUpXSWylrng6ff23Cweouk5Mtuqj
h1r0UO0CaQ7GS+z8/BL78Y6MJujBAInr/lJjvYZiYFosXjb/rmSoowfFu3O4cBar
rGlHfWfZwRNZckAT1kmZ49jZ8KHUQnGDyb/BuJ8PiO6BmJl3H0Ip4JXw8ZocWiZC
Gxd01BqIRrXm8rOYJZnWaCzchSyHMrniCxrZLYRjNj/t0VPDAyy5RaDpNHBhpjEE
utE4XqtrZTozivIJq1gI9ijCp1kbTcbbbW+pV1YJNXdC6j48Y/sAIeJOd75pzPLc
NIYUR8aSh18x31IB+Zrg9MQlRZRoikze
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:03 2026 by rpki-client