This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File:                     bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier:          KK0ud0s7ujCOcykLwcmCB/zyloR6S2aZ5scJ5UEh7W4=
Subject key identifier:   AD:CE:62:EF:FE:6E:4B:5F:FB:42:E1:A9:D7:F4:15:C5:8C:8D:56:E1
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer:       /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial:       06E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number:          06DF
Signing time:             Sat 06 Dec 2025 21:01:28 +0000
Manifest this update:     Sat 06 Dec 2025 21:01:27 +0000
Manifest next update:     Sat 13 Dec 2025 21:01:27 +0000
Files and hashes:         1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: IXiYi7NiRny/5w08KmmSHq1QPEfLAgpDtAhNS8Q5cH4=)
                          2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: vUduh0w3eSZesFepaO929FwqL1Ap+OkfqL7IQgJ/yu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
                          rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766 (0x6e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
        Validity
            Not Before: Dec  6 21:01:27 2025 GMT
            Not After : Dec 13 21:01:27 2025 GMT
        Subject: CN=693499a8-e558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:7a:b9:8b:1e:2d:6d:c6:e3:25:c9:1b:2b:
                    e3:c1:8a:d3:31:ff:0f:8c:62:40:c7:e4:f4:04:36:
                    d2:68:6c:40:91:33:49:bd:df:fb:a6:dd:c5:c0:c2:
                    89:ba:08:d9:07:3f:fa:41:d1:de:70:5e:2c:64:fe:
                    d6:cc:cb:af:e3:0b:dc:10:de:69:b4:bf:0e:3c:27:
                    b0:98:f2:89:f2:41:f2:6e:9c:8a:d7:88:15:78:69:
                    9d:f9:51:b5:93:f3:cb:2c:92:9c:1f:b3:a8:29:cd:
                    b1:43:90:ca:d3:2c:ba:0a:d6:65:8e:fe:03:10:88:
                    9d:7c:4e:e0:35:f4:87:75:9d:cf:ad:0e:39:91:0a:
                    58:71:53:5e:42:1e:f2:6b:76:84:f7:66:8b:48:36:
                    27:d0:1c:db:18:4a:89:f8:15:f5:ef:05:19:6d:83:
                    e8:1b:4e:3c:5f:16:6f:f6:37:ac:f3:7b:f0:35:ef:
                    3a:4f:26:49:3b:c5:5c:5b:4b:e0:9b:df:28:70:92:
                    ed:76:6a:29:14:4c:5d:2b:e4:b5:18:1d:96:f1:c5:
                    50:cc:2e:f0:94:c8:b0:f3:fd:3e:2a:c6:ae:80:dc:
                    78:cb:1b:da:10:07:2a:5c:ce:4a:45:ac:c1:af:3f:
                    32:e6:98:31:dd:d8:a5:63:fc:6b:70:06:2e:83:54:
                    7c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CE:62:EF:FE:6E:4B:5F:FB:42:E1:A9:D7:F4:15:C5:8C:8D:56:E1
            X509v3 Authority Key Identifier:
                keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:71:3d:a4:82:da:3b:bf:26:6b:30:db:55:fd:d5:0c:5f:2c:
         d1:4d:32:2d:a4:1d:a6:e9:d8:9d:7f:e1:b6:9e:c6:df:78:a1:
         99:37:5b:dd:64:c7:09:5b:cb:aa:6a:38:5b:08:d4:5e:c6:1b:
         a3:c4:1c:e9:ba:62:43:f5:9a:96:ef:5a:0c:e1:34:57:6d:d9:
         8d:84:0b:ce:bc:3d:28:8d:1a:ea:44:7d:83:b6:f4:4e:73:41:
         24:5d:50:2e:31:2d:e5:9e:58:f0:5e:ee:45:3d:5c:d2:4d:fe:
         83:d7:5b:37:0d:78:85:cd:57:27:07:ad:7b:ab:50:76:ab:87:
         03:8e:78:89:6b:0c:73:f4:a8:5a:70:3c:c6:57:77:0b:44:a2:
         eb:31:80:43:55:85:b4:ae:64:48:52:87:4a:dd:6a:1e:66:87:
         1e:df:e2:36:f2:75:e0:2c:50:8a:78:2d:91:4f:4d:bd:5b:80:
         66:13:58:49:52:75:79:bb:48:0c:7e:00:65:16:7b:b1:e0:44:
         44:8d:fd:25:ac:80:56:e1:73:bd:51:03:61:ca:e2:d9:4b:c8:
         a3:1d:82:80:9a:4c:d3:08:e6:91:e3:c0:eb:fb:0e:4a:f5:78:
         79:8f:5e:99:b7:0e:6d:e0:c2:8b:45:8f:d3:5d:0d:2a:3f:d2:
         47:f6:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:39:13 2025 by rpki-client