This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
File:                     BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json)
Hash identifier:          Tj8oN2T3PgSekG1XRT0/uYwgpbP0CPox1Lu6ytLhFqk=
Subject key identifier:   BB:77:F1:92:50:F9:46:36:D0:96:DF:3D:B5:D5:C1:3D:49:0D:0B:CD
Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C
Certificate issuer:       /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
Certificate serial:       018C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
Manifest number:          0185
Signing time:             Fri 23 Jan 2026 02:54:42 +0000
Manifest this update:     Fri 23 Jan 2026 02:54:42 +0000
Manifest next update:     Fri 30 Jan 2026 02:54:42 +0000
Files and hashes:         1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: k0Jp/AwPSt1hWF6mdbFfMWYg5EI5sNM6Q5za47EQFIY=)
                          2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: SZ9uoMEMlq4iFEPfCrqpoW/pO5RpEBqkp89YOfJH9e0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl
                          rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916002E, serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
        Validity
            Not Before: Jan 23 02:54:42 2026 GMT
            Not After : Jan 30 02:54:42 2026 GMT
        Subject: CN=6972e2f2-3ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:8d:67:6f:be:49:45:aa:14:11:c0:ad:d6:
                    2a:22:d9:57:62:81:bb:11:3a:81:10:c4:9f:4c:3f:
                    a9:0b:91:db:57:45:89:f6:7f:5e:ee:65:dc:ea:00:
                    8f:ca:9e:26:1d:6c:ca:63:ce:73:95:29:e4:f7:28:
                    60:15:9e:13:a9:bc:0d:2f:c2:a9:f1:ed:e6:98:5f:
                    b9:8c:64:3c:ca:e0:f0:c4:57:bd:ca:fc:73:0e:76:
                    c8:9f:98:e8:b4:db:40:39:53:d5:e6:32:d4:66:ca:
                    01:50:67:e9:e7:a5:f5:0f:6a:66:2a:a8:2a:99:d3:
                    ac:12:b8:0e:ad:d1:1f:7c:82:ef:b3:1e:55:bb:53:
                    87:90:27:4d:6c:53:58:de:77:70:b7:a7:34:9f:e5:
                    8e:f3:98:f3:c9:e2:c5:e3:a0:df:8a:f3:48:a4:50:
                    61:8f:3f:91:aa:a0:3b:88:c8:c9:4e:0f:b3:2e:27:
                    87:03:0b:fc:84:6a:9e:91:5d:77:41:cb:be:c0:bf:
                    5a:a6:55:d0:07:3f:8a:46:91:b1:5f:ca:8c:e9:d4:
                    20:ad:23:54:bb:f7:fe:a9:01:d6:fd:9d:60:08:a6:
                    30:94:35:15:e8:6c:ef:37:9f:d1:ec:14:f9:d4:07:
                    53:bb:f9:71:a4:9b:bc:c6:83:67:5f:94:fd:13:e2:
                    d6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:77:F1:92:50:F9:46:36:D0:96:DF:3D:B5:D5:C1:3D:49:0D:0B:CD
            X509v3 Authority Key Identifier:
                keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e6:41:04:00:f8:a7:27:38:93:d9:4c:1b:1d:01:06:ac:90:
         4d:1a:34:f4:8c:ea:bd:18:a4:28:85:7d:69:98:87:f9:4b:46:
         58:eb:ff:24:38:86:e1:8f:3f:04:29:9b:52:00:f0:0e:b2:bb:
         97:75:04:f2:ec:ca:92:94:db:52:f7:b5:f5:00:f3:17:f4:f1:
         70:c2:e1:94:92:f7:8c:a4:95:ce:d7:30:f2:b4:13:bb:cb:2a:
         bf:c4:aa:c3:a9:aa:a3:02:32:4a:fa:39:ed:4c:19:a7:a2:66:
         23:4d:00:af:17:cb:2f:fd:c7:d5:b0:74:95:f6:3b:e1:16:64:
         fd:b8:c4:f0:cd:89:2e:4f:56:ef:55:04:83:8d:23:f3:14:05:
         ad:ea:7c:ba:0c:d5:29:e2:40:85:08:36:41:36:35:a5:dd:2b:
         29:9d:37:53:b7:d1:ec:39:10:b8:68:1e:96:f2:86:68:fc:9f:
         25:3c:92:9c:c7:66:98:31:45:a6:03:33:85:f0:d6:af:8e:63:
         fe:24:a0:0f:4e:05:15:7a:44:13:57:c4:1c:fb:d8:98:69:a3:
         76:d9:2d:cd:a6:c7:ca:6a:13:f7:64:95:43:7c:c0:02:a9:db:
         5e:e4:dc:30:8a:ee:4a:d7:6c:e1:63:50:b5:67:3e:20:d8:ef:
         5a:8e:fa:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjAwMkUxMTAvBgNVBAUTKDA0QTU1RjdBQjNBRTM5OUQ0RjI1N0Q0RkQyODlCMTA1
ODA4RTVDM0MwHhcNMjYwMTIzMDI1NDQyWhcNMjYwMTMwMDI1NDQyWjAYMRYwFAYD
VQQDDA02OTcyZTJmMi0zZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3niNZ2++SUWqFBHArdYqItlXYoG7ETqBEMSfTD+pC5HbV0WJ9n9e7mXc6gCP
yp4mHWzKY85zlSnk9yhgFZ4TqbwNL8Kp8e3mmF+5jGQ8yuDwxFe9yvxzDnbIn5jo
tNtAOVPV5jLUZsoBUGfp56X1D2pmKqgqmdOsErgOrdEffILvsx5Vu1OHkCdNbFNY
3ndwt6c0n+WO85jzyeLF46DfivNIpFBhjz+RqqA7iMjJTg+zLieHAwv8hGqekV13
Qcu+wL9aplXQBz+KRpGxX8qM6dQgrSNUu/f+qQHW/Z1gCKYwlDUV6GzvN5/R7BT5
1AdTu/lxpJu8xoNnX5T9E+LWOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLt38ZJQ
+UY20JbfPbXVwT1JDQvNMB8GA1UdIwQYMBaAFASlX3qzrjmdTyV9T9KJsQWAjlw8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDAyRS9GMjg3RDMwQUIw
MTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9aMVBKWDFQMG9teEJZQ09Y
RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JLVmZlck91T1oxUEpYMVAwb214QllDT1hEdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDAyRS9GMjg3RDMwQUIwMTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9a
MVBKWDFQMG9teEJZQ09YRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBe5kEEAPinJziT2UwbHQEGrJBNGjT0jOq9GKQohX1pmIf5S0ZY6/8k
OIbhjz8EKZtSAPAOsruXdQTy7MqSlNtS97X1APMX9PFwwuGUkveMpJXO1zDytBO7
yyq/xKrDqaqjAjJK+jntTBmnomYjTQCvF8sv/cfVsHSV9jvhFmT9uMTwzYkuT1bv
VQSDjSPzFAWt6ny6DNUp4kCFCDZBNjWl3SspnTdTt9HsORC4aB6W8oZo/J8lPJKc
x2aYMUWmAzOF8NavjmP+JKAPTgUVekQTV8Qc+9iYaaN22S3NpsfKahP3ZJVDfMAC
qdte5Nwwiu5K12zhY1C1Zz4g2O9ajvq8
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:29 2026 by rpki-client