This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
File:                     bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft (raw, json)
Hash identifier:          MZVXC6q2eqECq1+uMf6srKoW3FSjejewjeFFypqrVFg=
Subject key identifier:   0B:0D:C2:80:9A:C0:98:9F:1C:0B:9A:21:C3:C1:71:1A:FC:C4:40:BD
Authority key identifier: 6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74
Certificate issuer:       /CN=A916B232/serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
Certificate serial:       0790
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
Manifest number:          0788
Signing time:             Sat 24 Jan 2026 20:54:07 +0000
Manifest this update:     Sat 24 Jan 2026 20:54:07 +0000
Manifest next update:     Sat 31 Jan 2026 20:54:07 +0000
Files and hashes:         1: bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl (hash: zroqXrCfONZpQmAODf+Sl4DkdsomtTpmf7KEx/J3Ub4=)
                          2: A2C94D9C3F0F11EB80256B25C4F9AE02.roa (hash: VsARmmeViDsi1FVlV4Qtd1FMCrKISqOnhPnZTXsK7F8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936 (0x790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B232, serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
        Validity
            Not Before: Jan 24 20:54:07 2026 GMT
            Not After : Jan 31 20:54:07 2026 GMT
        Subject: CN=6975316f-c8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:43:87:c7:a5:f8:66:b6:49:58:d6:d0:f3:b7:
                    4e:2e:ca:9d:17:14:08:8a:ad:28:f7:55:72:91:0d:
                    57:4e:68:0e:c1:c2:f2:4d:8a:c0:6a:10:3f:f4:99:
                    8c:31:8c:39:96:1a:b4:a3:82:25:56:92:48:64:fb:
                    9f:76:b4:ef:fb:3e:0d:be:47:4e:f0:36:ec:82:63:
                    93:86:8a:38:a0:8e:4f:79:7a:e7:9f:35:01:84:c8:
                    10:13:95:6c:e5:59:96:3f:10:57:cf:11:57:6f:73:
                    53:54:b5:85:8b:6e:8c:b0:3a:ad:3c:42:0d:02:14:
                    45:a6:49:9a:2f:1d:6f:3c:5b:56:7b:c7:ed:5d:3b:
                    ee:99:47:6d:0a:82:35:d8:1f:5a:ad:27:f9:c3:12:
                    8a:9c:4d:e4:30:8b:cc:6e:4e:1e:63:41:93:df:54:
                    b8:c1:f5:51:33:d8:a5:70:a1:59:c7:55:4f:4a:96:
                    bd:b2:a3:08:39:2b:ff:23:84:22:ec:6a:aa:8b:be:
                    62:16:b9:ac:4f:26:ae:15:2b:d3:bf:80:97:e4:1b:
                    ff:19:a9:2d:2f:e5:21:f9:d3:40:e5:6e:53:79:ff:
                    8b:a1:09:5c:6b:c6:df:df:b7:7a:87:23:bf:6f:0f:
                    7e:89:ff:09:dc:d2:32:63:41:fc:16:a1:c4:fc:b4:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0D:C2:80:9A:C0:98:9F:1C:0B:9A:21:C3:C1:71:1A:FC:C4:40:BD
            X509v3 Authority Key Identifier:
                keyid:6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b5:3c:40:3c:98:aa:e0:7d:39:e1:63:3a:f4:63:fa:65:b1:
         bf:1e:af:0f:a5:63:48:72:44:41:aa:68:86:67:39:0c:67:06:
         93:1f:9c:93:e5:ce:a2:c5:cb:27:b7:e2:0f:b2:18:02:d5:92:
         b5:a2:78:72:d2:92:c7:ed:68:99:f4:74:49:65:19:cf:f7:fa:
         73:d4:f0:de:9d:34:23:98:e6:0e:92:6f:83:14:09:75:62:e0:
         5a:a2:b9:07:44:8d:49:3e:8f:c1:a5:e2:97:d7:ad:7e:52:53:
         08:8c:8a:6b:73:6a:6e:77:ca:05:73:16:e0:22:34:c6:2a:35:
         7c:15:b0:38:50:97:b1:90:2a:0d:37:6e:9d:87:26:a6:1f:f9:
         f5:23:77:f4:18:ff:1e:8e:08:ab:dd:c4:d3:a7:88:cb:6b:77:
         8a:d5:61:70:c3:54:51:aa:03:68:89:2f:8d:0c:5b:4f:08:cd:
         66:3f:32:45:2a:15:51:0e:2c:a2:0c:2f:e3:a4:c4:83:28:58:
         15:85:36:47:4d:e8:8e:76:23:84:21:70:6c:1a:fc:2f:d6:80:
         cf:73:d1:c9:50:bc:e1:43:f3:2f:f2:b8:7b:c2:b2:83:bd:da:
         91:78:9f:45:83:73:d9:53:db:be:48:98:c9:a4:aa:03:64:d4:
         6d:32:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:07 2026 by rpki-client