This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
File:                     bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json)
Hash identifier:          BNepKJWePzD/tqXS+3bGK42eERQnXUkv4d7FCX20PQw=
Subject key identifier:   1C:3A:F2:D0:66:F0:BA:3C:E0:B3:23:C0:56:03:9C:2A:3E:C5:44:D0
Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80
Certificate issuer:       /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
Manifest number:          0118
Signing time:             Fri 19 Dec 2025 03:56:05 +0000
Manifest this update:     Fri 19 Dec 2025 03:56:04 +0000
Manifest next update:     Fri 26 Dec 2025 03:56:04 +0000
Files and hashes:         1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: kP4rMJmA6xeZjvzV0g3UPD5AGk6R3BrO2jRrUMAb5UI=)
                          2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: /1PjZ5NNRMUhyhR9YlRWIkmEIJE+BmHYk2vv+gNzyk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl
                          rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
        Validity
            Not Before: Dec 19 03:56:04 2025 GMT
            Not After : Dec 26 03:56:04 2025 GMT
        Subject: CN=6944ccd5-cd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e8:83:67:aa:76:f8:79:44:9f:76:58:02:e0:
                    38:32:92:50:cb:6f:6e:c7:2c:d5:3e:69:f6:e0:8c:
                    6b:43:9d:ab:91:b4:ac:f5:a1:b3:de:7c:85:9b:df:
                    36:21:fa:f9:0b:40:5e:e5:80:31:a8:f4:62:af:dc:
                    23:bf:ed:0d:c2:e6:51:a8:26:1b:21:3f:b1:74:12:
                    df:ac:83:26:3a:fb:47:cf:9b:74:1e:29:da:92:32:
                    8c:c9:6f:3a:2e:87:88:24:ee:9b:04:7f:41:3b:11:
                    12:d0:43:1b:ad:90:f7:ac:9d:18:01:fc:58:ef:13:
                    a9:3f:40:f2:7c:fb:93:5c:7d:c6:60:d7:b0:e2:9c:
                    cf:03:4c:b8:30:38:3b:ae:b1:47:3a:68:8b:af:da:
                    0e:d0:02:67:83:75:98:67:12:c8:aa:ea:aa:6e:0c:
                    81:db:59:c7:c8:fe:71:dc:7a:6e:1e:85:67:dd:23:
                    62:ef:53:83:9d:f2:55:47:f0:e7:0c:c5:63:83:a8:
                    0f:be:40:14:35:56:e0:e4:16:0c:27:94:34:81:c1:
                    2c:9f:67:82:44:b4:9d:30:ec:40:ce:4d:6e:d0:d6:
                    09:57:61:44:de:c0:89:6c:b0:e8:64:92:e9:b2:40:
                    03:2d:58:55:d8:ac:ef:56:ce:36:33:e8:be:ec:b8:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3A:F2:D0:66:F0:BA:3C:E0:B3:23:C0:56:03:9C:2A:3E:C5:44:D0
            X509v3 Authority Key Identifier:
                keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:11:43:9d:b5:cc:21:8b:12:0c:91:6d:52:b8:e2:cd:62:a9:
         77:0a:6c:af:f5:f4:d4:3e:01:fb:9d:7c:61:c5:5a:e3:92:48:
         ea:9b:fa:bb:54:de:d4:5b:6a:a1:e0:69:4c:ad:f1:12:a2:c5:
         99:c9:8f:1b:14:9b:ff:70:07:4d:c7:8f:44:fa:7f:c5:97:30:
         b2:cb:1b:a4:ec:6f:ea:68:c9:63:50:d1:5e:57:46:58:8b:47:
         a0:61:15:22:da:31:7d:4e:cc:28:41:c4:2e:c1:1b:1d:64:77:
         cc:1b:c1:de:f9:98:5e:c8:45:83:99:77:d6:13:cf:57:b9:ec:
         25:c6:2d:da:b0:5c:d3:e6:01:a4:0f:f5:99:45:b6:74:0b:c0:
         de:b9:71:34:49:17:d5:2c:5f:16:de:a5:3e:75:0a:46:96:b5:
         82:bb:7f:c9:bc:b4:35:7f:61:ab:f7:4d:6a:56:f9:b8:bc:72:
         09:74:50:29:49:a8:60:3e:cb:5f:f8:f9:6f:61:27:b1:c7:16:
         6c:15:68:e4:44:50:95:0f:b2:29:b2:03:d6:99:f7:27:22:5a:
         2f:f1:75:8f:d0:80:6d:82:7c:79:e6:70:4c:6f:c5:bd:b9:d2:
         32:98:6c:ea:e0:d5:a4:14:0d:22:b0:13:af:10:f2:5f:78:29:
         d7:db:cb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:50:55 2025 by rpki-client