This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
File:                     bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json)
Hash identifier:          8dponpW+7lmtoxv7w8I3/OImQcMtDebDi8b4UZwDlfc=
Subject key identifier:   17:9E:FF:F7:19:CC:0A:35:98:A0:4D:58:8A:02:A0:14:87:05:18:D4
Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81
Certificate issuer:       /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
Certificate serial:       0862
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
Manifest number:          085C
Signing time:             Sat 06 Dec 2025 19:48:02 +0000
Manifest this update:     Sat 06 Dec 2025 19:48:02 +0000
Manifest next update:     Sat 13 Dec 2025 19:48:02 +0000
Files and hashes:         1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: 2HyQ6hSVQ9/JMnrMt76TEFWUpq1SGL4+Q5SQPodD+PQ=)
                          2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: 2kaLA3OXyUts1hifmBFAJDN2z6cyzPCnOT2p5MOkteQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl
                          rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2146 (0x862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
        Validity
            Not Before: Dec  6 19:48:02 2025 GMT
            Not After : Dec 13 19:48:02 2025 GMT
        Subject: CN=69348872-8c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:8e:ed:be:5e:7a:4a:f1:86:9f:9a:18:c6:
                    ce:00:32:97:da:31:45:8d:e5:0e:4d:d5:15:0a:8a:
                    19:22:3b:01:b7:f0:cf:65:8a:ba:79:11:f6:6d:2d:
                    74:a1:fb:7a:4b:81:7c:fb:59:e2:70:25:55:6e:ae:
                    3a:20:07:48:80:17:19:48:17:a3:be:69:36:43:38:
                    9e:3a:d5:54:a7:4a:82:a5:38:6b:a1:c6:ed:0e:e1:
                    9e:12:86:ba:c4:ee:fa:b9:19:6e:d5:db:42:09:48:
                    c1:18:7f:1a:b1:d2:b3:61:98:c9:00:7c:83:c3:b6:
                    3a:a9:74:3a:da:75:fc:8a:ce:c5:a3:27:3b:51:42:
                    45:46:22:ba:d1:1f:cb:d8:94:dc:af:50:7c:03:67:
                    8e:f5:28:08:1d:67:e6:bd:5e:e8:89:33:d7:e3:b8:
                    0b:ec:cb:70:d1:54:c1:3a:0d:e6:63:c6:c1:82:b5:
                    2d:b4:8c:fe:5d:e1:3a:c0:d1:cc:ae:57:d9:06:05:
                    60:db:33:4b:c4:be:b5:d1:a7:02:92:39:f1:63:ea:
                    5f:28:d8:be:dc:4b:2e:5b:59:08:a6:d5:6d:4a:76:
                    c8:e1:67:6a:45:07:a8:ba:8b:c7:6a:80:30:c8:d3:
                    65:9b:c7:ab:ea:3d:64:c0:62:2a:61:84:4d:89:4e:
                    16:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9E:FF:F7:19:CC:0A:35:98:A0:4D:58:8A:02:A0:14:87:05:18:D4
            X509v3 Authority Key Identifier:
                keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:58:e2:fe:bf:47:84:e2:89:ff:43:a2:e7:ba:e3:f0:64:06:
         28:1c:e2:a2:5e:01:a0:ed:31:ac:49:25:0d:e1:17:54:71:f2:
         99:ae:b4:f9:da:2f:7b:c2:f0:10:ad:f4:b8:02:95:a5:3a:fa:
         fb:4d:77:28:55:6c:92:75:74:38:ff:5b:dc:5c:ee:2d:95:9e:
         9c:d9:e6:04:1c:ad:8f:b9:00:6d:9a:40:31:e2:f7:87:71:48:
         cb:32:c7:d5:41:7e:a3:ad:61:2f:21:60:b2:b7:e6:db:ef:46:
         2d:61:a6:a2:4e:8f:d0:e8:34:35:96:7c:41:dd:98:b2:8b:32:
         49:68:83:2a:0b:b4:c9:d5:b9:29:36:05:3d:5c:65:df:9a:d7:
         9d:95:51:a9:8a:80:44:07:8a:05:2e:fb:f8:5a:68:92:65:b7:
         19:fc:c4:9b:4b:95:27:07:7f:8f:e5:58:f3:3e:1d:6e:dc:2b:
         d4:b5:98:75:4b:dc:a4:f0:3c:b5:62:45:43:06:b8:ae:fd:cf:
         a3:6e:ec:af:c9:35:4f:cc:d7:79:13:17:2a:6d:ef:79:54:26:
         90:13:d9:5d:cf:8b:1b:47:cc:5f:83:b1:06:7e:b7:d7:17:81:
         99:77:e3:10:7b:f9:1d:1c:db:43:a1:13:46:ee:3a:e3:71:ac:
         83:3a:bd:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5
MjQxMzY5ODEwHhcNMjUxMjA2MTk0ODAyWhcNMjUxMjEzMTk0ODAyWjAYMRYwFAYD
VQQDEw02OTM0ODg3Mi04YzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnCKO7b5eekrxhp+aGMbOADKX2jFFjeUOTdUVCooZIjsBt/DPZYq6eRH2bS10
oft6S4F8+1nicCVVbq46IAdIgBcZSBejvmk2QzieOtVUp0qCpThrocbtDuGeEoa6
xO76uRlu1dtCCUjBGH8asdKzYZjJAHyDw7Y6qXQ62nX8is7Foyc7UUJFRiK60R/L
2JTcr1B8A2eO9SgIHWfmvV7oiTPX47gL7Mtw0VTBOg3mY8bBgrUttIz+XeE6wNHM
rlfZBgVg2zNLxL610acCkjnxY+pfKNi+3EsuW1kIptVtSnbI4WdqRQeouovHaoAw
yNNlm8er6j1kwGIqYYRNiU4WrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBee//cZ
zAo1mKBNWIoCoBSHBRjUMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy
MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh
WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL
RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuWOL+v0eE4on/Q6LnuuPwZAYoHOKiXgGg7TGsSSUN4RdUcfKZrrT5
2i97wvAQrfS4ApWlOvr7TXcoVWySdXQ4/1vcXO4tlZ6c2eYEHK2PuQBtmkAx4veH
cUjLMsfVQX6jrWEvIWCyt+bb70YtYaaiTo/Q6DQ1lnxB3ZiyizJJaIMqC7TJ1bkp
NgU9XGXfmtedlVGpioBEB4oFLvv4WmiSZbcZ/MSbS5UnB3+P5VjzPh1u3CvUtZh1
S9yk8Dy1YkVDBriu/c+jbuyvyTVPzNd5Excqbe95VCaQE9ldz4sbR8xfg7EGfrfX
F4GZd+MQe/kdHNtDoRNG7jrjcayDOr0L
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:09 2025 by rpki-client