This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
File:                     BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft (raw, json)
Hash identifier:          81r6XDnv9wV/UhoAJ7lt2BnW1d7yA+JPWBsdTUmpN1I=
Subject key identifier:   52:7E:B1:7C:24:05:A0:9E:1C:C0:7A:4E:AB:D5:50:5A:8D:D6:E1:60
Authority key identifier: 06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF
Certificate issuer:       /CN=A9179F22/serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
Manifest number:          018E
Signing time:             Thu 01 Jan 2026 03:13:17 +0000
Manifest this update:     Thu 01 Jan 2026 03:13:16 +0000
Manifest next update:     Thu 08 Jan 2026 03:13:16 +0000
Files and hashes:         1: BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl (hash: WsVAr9TEwxEyKUGw7rBXh3aKCA6YRLm189pBGAA/bBs=)
                          2: 2D7A0C2A08D811EF8DFDE781C4F9AE02.roa (hash: RbuUwT6s59ftT2m1syFLwpZ78+B6i6ZcO0YDrGRtGpo=)
                          3: 2CDC448608D811EF8DFDE781C4F9AE02.roa (hash: eek0QODlRhbdv/MSirxCHdu3bMd0C4B0uUYmDtuZmC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl
                          rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 03:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F22, serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF
        Validity
            Not Before: Jan  1 03:13:16 2026 GMT
            Not After : Jan  8 03:13:16 2026 GMT
        Subject: CN=6955e64c-91bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:24:31:2d:49:31:1b:09:db:a2:e1:a6:fa:
                    fb:18:6a:f2:2e:e2:fd:8b:e7:56:3c:24:39:6e:37:
                    8c:94:1f:a2:6e:d3:e9:7c:46:5c:c1:5b:7b:a2:20:
                    d6:3b:36:7a:1b:66:3b:2a:1b:67:ee:61:0e:39:9c:
                    da:83:fd:5e:6f:51:cc:54:b3:49:c5:50:47:f0:6a:
                    b0:02:38:01:57:2a:20:21:80:8f:6b:d1:19:e0:21:
                    66:8b:62:af:38:ce:bc:89:1f:0e:cf:d1:f0:85:ca:
                    5d:49:dc:4f:d6:c2:2a:c6:b5:bb:17:19:24:34:8d:
                    7f:c1:34:f5:62:67:75:82:d6:6d:f7:06:1b:a7:f7:
                    8c:f4:55:90:1a:d4:32:89:9c:05:77:bc:20:83:6a:
                    6e:1e:19:91:51:96:02:dd:dc:1f:3d:c6:7e:f8:e4:
                    c5:c1:91:92:f8:f3:30:48:e7:da:0e:a0:38:91:08:
                    c3:36:c7:bb:1d:15:1a:c6:63:ac:32:f3:a9:05:7d:
                    f0:31:83:04:d0:ac:dd:3e:db:9c:7c:46:e6:71:ad:
                    cc:04:8e:5f:80:c1:73:c6:86:30:fe:75:44:06:07:
                    84:6a:6b:08:6e:57:62:44:8d:cf:79:e5:52:72:a9:
                    e4:f2:ce:d5:76:64:f9:42:ab:30:9d:2b:d4:a0:fc:
                    64:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7E:B1:7C:24:05:A0:9E:1C:C0:7A:4E:AB:D5:50:5A:8D:D6:E1:60
            X509v3 Authority Key Identifier:
                keyid:06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:89:63:ef:58:ed:b2:9a:df:d8:84:47:79:e6:95:4d:75:ad:
         21:36:46:58:4d:4c:0d:2b:9e:ab:c2:52:1b:17:9a:c0:02:e5:
         df:80:db:df:ce:40:c4:99:94:a6:2d:41:3a:a2:f1:c4:95:ca:
         0f:1e:b9:e2:92:b1:13:bc:a5:76:e6:19:a9:22:f9:58:9d:1b:
         6a:de:25:7c:4e:06:57:eb:58:96:2b:00:b8:81:78:f8:37:57:
         2f:73:4c:86:c2:80:ca:4d:4f:61:b9:80:7a:ff:69:55:6e:69:
         fe:1b:e3:26:c0:af:7b:4a:d9:38:0f:5d:17:11:38:ee:38:a4:
         f3:d7:71:29:a7:4b:90:e4:22:c1:69:6c:0a:ae:5f:2a:b9:cf:
         02:b4:8f:37:16:62:18:d0:12:81:c6:aa:d9:46:38:00:f4:ba:
         b8:aa:fb:d0:61:04:0c:b0:de:11:47:17:7c:14:25:6e:f4:3e:
         5d:8f:0f:54:df:ac:9a:c5:0a:7c:aa:fe:0e:14:7a:93:f9:49:
         96:57:f5:29:0d:94:73:0f:0d:32:62:1f:01:87:79:9f:29:56:
         33:aa:e7:72:de:50:20:b0:50:72:58:df:a0:c5:bc:0f:fb:67:
         57:39:8d:41:e4:46:cf:f9:f9:22:7a:63:0e:47:fe:f3:80:4a:
         8e:be:32:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlGMjIxMTAvBgNVBAUTKDA2M0JBRjNFRDdCNDEwNzFBOTBEOUZBRTQxMEZGNDc4
ODhGMEJFREYwHhcNMjYwMTAxMDMxMzE2WhcNMjYwMTA4MDMxMzE2WjAYMRYwFAYD
VQQDDA02OTU1ZTY0Yy05MWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1oAkMS1JMRsJ26Lhpvr7GGryLuL9i+dWPCQ5bjeMlB+ibtPpfEZcwVt7oiDW
OzZ6G2Y7Khtn7mEOOZzag/1eb1HMVLNJxVBH8GqwAjgBVyogIYCPa9EZ4CFmi2Kv
OM68iR8Oz9HwhcpdSdxP1sIqxrW7FxkkNI1/wTT1Ymd1gtZt9wYbp/eM9FWQGtQy
iZwFd7wgg2puHhmRUZYC3dwfPcZ++OTFwZGS+PMwSOfaDqA4kQjDNse7HRUaxmOs
MvOpBX3wMYME0KzdPtucfEbmca3MBI5fgMFzxoYw/nVEBgeEamsIbldiRI3PeeVS
cqnk8s7VdmT5QqswnSvUoPxkfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJ+sXwk
BaCeHMB6TqvVUFqN1uFgMB8GA1UdIwQYMBaAFAY7rz7XtBBxqQ2frkEP9HiI8L7f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DNkY1NUZBODhG
MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVIR3BEWi11UVFfMGVJand2
dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JqdXZQdGUwRUhHcERaLXVRUV8wZUlqd3Z0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUYyMi9DNkY1NUZBODhGMkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVI
R3BEWi11UVFfMGVJand2dDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZiWPvWO2ymt/YhEd55pVNda0hNkZYTUwNK56rwlIbF5rAAuXfgNvf
zkDEmZSmLUE6ovHElcoPHrnikrETvKV25hmpIvlYnRtq3iV8TgZX61iWKwC4gXj4
N1cvc0yGwoDKTU9huYB6/2lVbmn+G+MmwK97Stk4D10XETjuOKTz13Epp0uQ5CLB
aWwKrl8quc8CtI83FmIY0BKBxqrZRjgA9Lq4qvvQYQQMsN4RRxd8FCVu9D5djw9U
36yaxQp8qv4OFHqT+UmWV/UpDZRzDw0yYh8Bh3mfKVYzqudy3lAgsFByWN+gxbwP
+2dXOY1B5EbP+fkiemMOR/7zgEqOvjIv
-----END CERTIFICATE-----
Generated at Fri Jan 2 14:26:21 2026 by rpki-client