This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
File:                     b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json)
Hash identifier:          vuzknmV8Sdv4UqdR2JCiTh3JYTVnc81CdyOz6qv3ugM=
Subject key identifier:   BB:DD:AD:03:88:D7:97:6A:2B:D3:52:D6:CA:50:6B:CC:9E:D7:34:EC
Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
Certificate issuer:       /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Certificate serial:       1CDD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
Manifest number:          1CBD
Signing time:             Sat 06 Dec 2025 15:51:08 +0000
Manifest this update:     Sat 06 Dec 2025 15:51:08 +0000
Manifest next update:     Sat 13 Dec 2025 15:51:08 +0000
Files and hashes:         1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: CJaVtVcAZmfcUFSI4m3g6vgMVa7xx67suRRn3b3auxI=)
                          2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: uvELEwi27NEueao5KQlppsZW28RWPe5sg6P8nIcdY8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7389 (0x1cdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
        Validity
            Not Before: Dec  6 15:51:08 2025 GMT
            Not After : Dec 13 15:51:08 2025 GMT
        Subject: CN=693450ec-b8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:64:e3:dd:04:53:08:99:76:b2:93:4b:f3:
                    a3:e1:81:60:51:e0:25:0b:e1:9f:48:68:24:7a:74:
                    f5:a8:13:ab:5a:23:0f:13:7e:ff:52:99:14:9b:2c:
                    4c:98:87:df:47:c9:7c:96:48:16:b4:3e:bb:e1:91:
                    06:cb:f7:be:be:58:5e:6f:db:50:82:7a:40:41:51:
                    86:4d:9b:98:80:bf:73:61:1d:f7:28:0f:ec:55:9f:
                    43:c9:7a:35:11:69:b0:b7:4b:c0:85:2a:fa:c7:e5:
                    f5:a0:50:a7:32:2e:c5:25:7e:ad:65:5c:01:61:d7:
                    e4:03:2b:61:65:1d:d5:9b:60:54:bc:79:97:b3:a5:
                    2b:b1:f4:15:32:38:2c:0d:58:3e:f6:e0:e3:3a:e7:
                    2c:56:79:01:be:93:22:d4:60:07:fe:40:8d:5e:e5:
                    3c:98:4b:4d:7b:ad:e7:13:ad:51:f9:1d:4b:1e:b7:
                    3f:ee:47:4e:01:c9:d2:85:b2:02:fd:95:a7:e8:a1:
                    3b:ed:97:2f:8f:a4:50:a9:c7:3f:01:03:ce:6b:62:
                    fe:ee:66:63:66:76:58:63:fb:1f:e8:51:1f:c1:5c:
                    7e:f2:94:40:2d:a2:c3:10:e6:92:2c:0e:57:3a:cf:
                    e9:f7:e0:cf:ae:a4:5b:95:92:e0:bb:34:a7:a7:00:
                    2a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DD:AD:03:88:D7:97:6A:2B:D3:52:D6:CA:50:6B:CC:9E:D7:34:EC
            X509v3 Authority Key Identifier:
                keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e5:86:e3:b6:8d:34:b6:a6:47:3f:47:ff:50:75:bd:d8:ee:
         b7:2f:a8:5f:28:63:f3:ec:80:c8:fc:3b:97:42:f6:70:3f:58:
         96:61:d9:e3:3d:1b:b9:dd:ec:fe:8d:82:bc:e0:e9:40:f2:69:
         64:95:28:d3:91:92:f3:cc:b9:47:e2:5d:da:9c:95:02:68:e7:
         b4:60:7b:59:a0:7c:24:e9:39:98:57:56:71:a6:7b:03:19:b3:
         81:af:d1:40:a3:5d:ef:25:3d:06:ac:fa:ea:29:8b:7f:ac:36:
         db:e2:6c:ed:42:2b:4a:45:7b:66:36:fd:e9:ba:ed:8d:c9:7a:
         10:17:05:e4:04:70:33:c1:d5:86:52:f8:53:52:4d:54:1b:cd:
         df:2f:50:91:0f:66:31:e9:c4:e4:a3:5d:ed:47:92:d4:0a:3a:
         82:61:0f:6a:59:7b:78:93:88:da:e0:9d:f9:51:ce:28:92:73:
         f3:04:c8:5e:4c:d0:73:5e:fd:6d:e0:e5:47:22:8d:c6:3f:c2:
         ad:7f:0f:8f:bd:b7:c2:b5:06:56:4c:ad:10:25:07:2b:b8:1e:
         56:cd:af:56:dd:e3:41:38:61:98:3c:5a:da:b7:93:15:82:da:
         14:47:f0:1a:1b:7a:53:cd:1a:1a:1e:1b:a2:4e:5b:01:ef:d3:
         3b:e3:82:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:36:27 2025 by rpki-client