This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D12C/C8F1AEEACE6D11F0B7A3A22CC4F9AE02/bsX6TBatart948lke3pqfNfmUOw.mft
File:                     bsX6TBatart948lke3pqfNfmUOw.mft (raw, json)
Hash identifier:          DSbqznnNjYfWpw9LEbEuM1EQOR1oVmxmg+k/EJK2jMs=
Subject key identifier:   C8:A5:E1:22:D8:E0:BF:00:D1:83:C0:45:55:AE:0A:AF:5F:CD:24:B3
Authority key identifier: 6E:C5:FA:4C:16:AD:6A:BB:7D:E3:C9:64:7B:7A:6A:7C:D7:E6:50:EC
Certificate issuer:       /CN=A914D12C/serialNumber=6EC5FA4C16AD6ABB7DE3C9647B7A6A7CD7E650EC
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsX6TBatart948lke3pqfNfmUOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D12C/C8F1AEEACE6D11F0B7A3A22CC4F9AE02/bsX6TBatart948lke3pqfNfmUOw.mft
Manifest number:          04
Signing time:             Fri 05 Dec 2025 05:56:19 +0000
Manifest this update:     Fri 05 Dec 2025 05:56:18 +0000
Manifest next update:     Fri 12 Dec 2025 05:56:18 +0000
Files and hashes:         1: bsX6TBatart948lke3pqfNfmUOw.crl (hash: +25s5zU4ESD3dYcMYYTbRYQ24aU+DbWB77Gph+G2rJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D12C/C8F1AEEACE6D11F0B7A3A22CC4F9AE02/bsX6TBatart948lke3pqfNfmUOw.crl
                          rsync://rpki.apnic.net/member_repository/A914D12C/C8F1AEEACE6D11F0B7A3A22CC4F9AE02/bsX6TBatart948lke3pqfNfmUOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsX6TBatart948lke3pqfNfmUOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D12C, serialNumber=6EC5FA4C16AD6ABB7DE3C9647B7A6A7CD7E650EC
        Validity
            Not Before: Dec  5 05:56:18 2025 GMT
            Not After : Dec 12 05:56:18 2025 GMT
        Subject: CN=69327403-ca38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:5f:20:fd:7d:c4:0f:07:0a:e4:a0:90:5a:
                    13:bd:62:0b:81:12:89:ce:a1:c5:fe:d3:1a:b6:ca:
                    97:43:08:18:89:6c:8f:61:20:42:01:b5:23:7d:73:
                    89:e4:12:86:60:d4:b4:c6:cb:bd:9f:a0:9b:78:b4:
                    1b:74:03:ce:f8:94:d0:60:3c:8a:0f:4e:c4:57:08:
                    ac:e6:77:cd:0a:5d:e0:f8:cb:1d:3e:2b:02:68:a3:
                    fb:99:af:a1:1e:88:98:ee:5a:eb:ea:af:80:a3:61:
                    d1:75:52:40:87:e7:b2:5f:91:b8:5b:be:14:f1:55:
                    38:d6:ac:e1:90:e1:a9:01:14:6f:f6:e1:fa:f4:75:
                    52:82:ca:ee:3c:db:ba:3a:cf:39:e7:3e:88:65:87:
                    bc:b3:97:a6:f7:da:24:ef:b4:50:30:e7:01:de:7b:
                    c4:30:71:60:8f:f2:2a:16:9b:dd:bd:7a:12:6b:9e:
                    4e:fb:d6:8d:e3:20:b8:de:7c:7a:60:fb:ac:2c:9e:
                    8f:9b:3a:f3:14:76:ff:00:ba:96:b2:24:11:2b:8a:
                    a1:aa:32:13:e0:9a:3f:c8:4f:fe:42:0e:22:d9:3a:
                    83:45:af:4e:b4:7c:57:f8:9a:d5:5e:c6:fb:7e:78:
                    06:62:ae:44:a5:dc:bd:34:25:5b:a5:49:07:ef:1b:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A5:E1:22:D8:E0:BF:00:D1:83:C0:45:55:AE:0A:AF:5F:CD:24:B3
            X509v3 Authority Key Identifier:
                keyid:6E:C5:FA:4C:16:AD:6A:BB:7D:E3:C9:64:7B:7A:6A:7C:D7:E6:50:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D12C/C8F1AEEACE6D11F0B7A3A22CC4F9AE02/bsX6TBatart948lke3pqfNfmUOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsX6TBatart948lke3pqfNfmUOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D12C/C8F1AEEACE6D11F0B7A3A22CC4F9AE02/bsX6TBatart948lke3pqfNfmUOw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:67:61:36:7f:2c:17:c4:97:da:a6:84:cb:05:2f:58:34:9a:
         c4:71:b8:66:72:35:81:b4:03:5d:40:0f:bb:38:fe:f0:9e:57:
         d0:78:41:d5:05:cb:17:ba:33:69:38:f2:62:8a:5f:dc:59:f1:
         78:12:dd:2c:33:58:4d:3d:7c:8f:31:b2:7a:40:03:53:b9:da:
         4f:60:2a:c8:32:3d:0d:7c:e4:98:41:24:69:5a:7a:c7:cf:7d:
         8f:b8:dc:d0:9d:93:60:81:66:d0:fd:56:53:18:24:1b:a7:d8:
         cf:04:fe:eb:42:3e:37:18:9c:57:2d:91:47:ac:e2:63:bf:be:
         92:45:b9:18:1e:a5:ad:dc:77:a4:25:72:fb:f0:7c:7d:39:2f:
         68:78:5c:0e:a1:a9:5e:fd:1d:7b:00:c1:3d:32:87:6f:4a:0b:
         40:6c:b6:2f:3c:34:f9:d3:ab:c6:5a:db:3e:f1:7d:72:ba:f7:
         41:f7:20:46:6e:83:d8:06:37:d1:07:33:59:59:73:bd:7f:33:
         4c:40:a6:1a:db:58:69:da:cc:bf:60:2d:eb:30:6e:02:f1:61:
         6d:fc:d5:a4:e5:b0:d1:91:cb:d4:c2:56:d7:b6:db:5b:6a:7c:
         68:37:f2:56:34:25:2e:8d:27:11:9b:81:fc:a7:fc:42:f4:21:
         b2:62:14:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:26 2025 by rpki-client