This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
File:                     b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json)
Hash identifier:          IB4nlvQbhU5IPk4d7v57NrqZlpPfKerZQ8qdZ/0UwS4=
Subject key identifier:   F6:46:01:0D:35:2B:E6:6B:19:03:8E:D4:0D:59:4C:23:BE:F8:E3:D9
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Certificate issuer:       /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
Manifest number:          AC
Signing time:             Fri 05 Dec 2025 04:09:24 +0000
Manifest this update:     Fri 05 Dec 2025 04:09:23 +0000
Manifest next update:     Fri 12 Dec 2025 04:09:23 +0000
Files and hashes:         1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: JyASIW8/KBhbeyXPGawEk8mjhOrdsxDC3p9/spHbjKQ=)
                          2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: 6dXw7Y4MWNrxoZ0iMg2dM88R43+4l/3mUETzTfwLRvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
        Validity
            Not Before: Dec  5 04:09:23 2025 GMT
            Not After : Dec 12 04:09:23 2025 GMT
        Subject: CN=69325af3-7628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cf:60:a5:48:71:c9:01:10:28:f1:ce:2f:28:
                    fb:4f:ce:6d:c8:00:67:b2:ad:5e:e7:84:e8:f1:a0:
                    dc:5d:25:a4:29:79:53:45:b9:1e:1b:3b:12:5e:e9:
                    80:84:2b:34:cc:e4:54:40:32:a1:17:0e:9d:0a:8f:
                    bb:31:26:4a:20:d2:bf:95:da:a4:a4:ae:6f:27:de:
                    a3:47:61:c8:49:de:97:3b:fa:d0:fc:8e:bc:fe:d5:
                    c4:4b:4f:3e:78:f3:e1:83:8d:93:25:a1:d7:a1:e2:
                    64:1c:f3:92:7f:91:f0:cf:5c:c9:25:32:7c:51:72:
                    b5:0c:65:72:f9:6f:06:47:2b:65:aa:90:67:d8:8f:
                    07:0e:c1:5a:f7:88:52:65:42:a7:29:12:9e:1a:03:
                    20:34:53:6b:46:81:c8:a1:d4:24:da:48:d0:7f:15:
                    37:71:dc:d2:10:c3:df:56:ee:92:d5:1d:b2:e9:50:
                    74:69:35:19:c9:27:f7:d5:38:91:2f:16:52:41:f7:
                    68:53:7d:e1:6d:98:d5:aa:39:94:f7:06:58:df:07:
                    4a:b5:5b:f9:4b:10:97:dd:b3:45:9f:ca:31:9c:59:
                    89:bf:1c:dd:e4:66:8c:67:18:a8:27:7e:16:05:0a:
                    dd:01:00:bd:5a:8e:9d:8d:64:76:41:89:32:38:e1:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:46:01:0D:35:2B:E6:6B:19:03:8E:D4:0D:59:4C:23:BE:F8:E3:D9
            X509v3 Authority Key Identifier:
                keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a8:f4:ce:ad:95:77:54:0c:d8:34:37:4b:8a:29:c6:74:86:
         e7:7d:07:9e:66:63:47:fe:1c:db:1c:2f:7b:a1:03:df:d2:c5:
         cb:df:db:50:b8:50:51:b8:72:9f:ad:91:95:c8:ea:db:be:8d:
         7f:ce:5e:0e:1c:4b:80:33:e5:67:76:00:2c:e1:04:3f:56:35:
         d7:1d:70:9d:f6:c2:b3:c7:5f:69:b5:bf:b0:c4:c9:c1:b6:10:
         6f:36:7f:f9:a4:d4:88:5e:f2:37:05:2a:5f:fb:40:3f:7b:cf:
         e8:34:31:53:3b:56:26:06:bb:44:d3:de:32:1f:7d:c0:0d:b1:
         f9:e3:02:d4:bc:cb:29:b3:91:55:10:4f:0a:d8:fe:42:95:96:
         0a:55:97:06:3f:22:04:63:d8:f3:f3:6c:23:dd:88:a0:41:fd:
         4e:de:fc:fe:17:37:55:dc:4b:14:d9:da:a7:37:91:76:8b:1f:
         e6:51:ba:53:8d:e3:56:d6:a0:fc:a0:1a:5c:59:ae:77:34:e9:
         15:22:6f:0e:b2:1e:eb:79:e4:68:08:2b:01:4d:d7:90:b3:4a:
         4c:45:1a:30:dd:82:68:a6:af:df:34:ea:62:fa:20:97:dc:48:
         36:6a:11:f9:e2:21:a5:f1:d3:6f:67:24:2d:e8:f0:4e:41:ce:
         44:02:27:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:17:01 2025 by rpki-client