This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
File:                     bUGUPlFfU_mSYZyH8COTgRJT3mc.mft (raw, json)
Hash identifier:          ZE+r9FYRIBuZyt8ZjzaBoSR7XrLzkzJYmZcYkRJNPN4=
Subject key identifier:   37:9D:08:BA:D6:0A:25:2A:89:1E:A9:49:8C:86:2F:66:E4:04:7D:12
Authority key identifier: 6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67
Certificate issuer:       /CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
Manifest number:          0171
Signing time:             Fri 05 Dec 2025 02:04:35 +0000
Manifest this update:     Fri 05 Dec 2025 02:04:35 +0000
Manifest next update:     Fri 12 Dec 2025 02:04:35 +0000
Files and hashes:         1: bUGUPlFfU_mSYZyH8COTgRJT3mc.crl (hash: 4TQzDy2FgITmFO3RB6uFnOQkqXF8K2TdxChxpJYN+hQ=)
                          2: 038457CEA3A011EEBE44947FC4F9AE02.roa (hash: PgCUtYUopFfJUcc6oCyLffXra/44Q+4sS+exi8w3QBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl
                          rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915216F, serialNumber=6D41943E515F53F992619C87F02393811253DE67
        Validity
            Not Before: Dec  5 02:04:35 2025 GMT
            Not After : Dec 12 02:04:35 2025 GMT
        Subject: CN=69323db3-7c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:3c:4f:49:c2:33:4d:cb:26:72:d0:59:0d:
                    10:3c:ed:72:ca:6d:b4:76:bb:01:af:7e:7b:cc:4d:
                    98:72:86:df:cb:1a:7f:f7:8a:2b:b0:e1:c5:f8:e2:
                    e7:f2:39:a3:92:53:ea:0f:4c:89:a4:ab:f7:e2:c8:
                    47:76:55:94:ed:1b:aa:8e:e0:86:7c:29:ca:20:10:
                    aa:6f:f3:42:f1:a0:36:6e:b8:2c:f2:cf:13:7b:ab:
                    03:98:f4:c3:a9:94:49:76:f6:f5:e1:84:41:81:38:
                    fc:93:e4:b3:b8:5b:6a:52:03:3f:59:16:45:1f:1e:
                    f0:54:be:54:62:7f:da:e4:b4:d8:cf:1b:9c:42:26:
                    44:a5:ea:2a:7f:88:16:4e:cc:51:4a:46:c2:dd:84:
                    51:cb:a4:9a:86:02:2d:a3:27:e4:c6:87:4e:7f:ca:
                    de:08:0e:17:2e:a4:9d:52:13:29:15:a6:3e:fe:8c:
                    dc:a9:0d:38:0e:9c:a5:66:44:27:ef:7c:e5:b1:9c:
                    41:60:71:69:1b:9a:06:b6:7f:af:82:d9:15:53:42:
                    f2:23:1e:47:88:66:cf:06:6e:c0:26:15:4c:d7:f8:
                    f4:5a:9b:31:59:84:e9:4c:ff:e4:e5:ac:22:a4:a7:
                    ec:51:a1:33:67:e2:be:fe:27:7b:ac:90:ff:69:f8:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9D:08:BA:D6:0A:25:2A:89:1E:A9:49:8C:86:2F:66:E4:04:7D:12
            X509v3 Authority Key Identifier:
                keyid:6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:64:c4:36:49:93:20:7c:96:e0:03:5d:e0:4b:20:68:44:26:
         35:d3:9b:71:55:0c:a2:09:19:98:29:13:a1:33:e3:81:3e:05:
         fa:fd:17:c8:4c:79:9a:b2:b8:f6:09:4b:2c:2b:e8:a7:9f:47:
         61:71:c9:cd:8e:c3:93:44:ab:b9:bb:0b:67:53:fe:fa:11:5a:
         f8:26:aa:8b:38:6e:43:3f:7a:e5:dc:c4:59:bc:3d:6c:c8:8f:
         20:1b:84:25:f5:1e:11:79:49:a3:a6:8a:a9:92:07:48:8b:ff:
         84:53:c2:d8:23:96:d4:52:99:3a:a5:b3:f6:9d:36:2e:64:92:
         2e:76:a4:41:71:af:f2:57:16:fa:bf:6c:70:26:63:32:4b:cc:
         69:fc:80:a5:47:a5:60:e5:9c:65:b8:80:c0:2d:6a:8f:0d:42:
         ff:03:ba:fc:f6:fe:75:88:df:11:87:6a:77:df:be:5e:09:63:
         91:85:c2:a9:77:18:d9:4d:b8:d6:82:2c:2f:fc:5d:99:95:70:
         6b:16:ee:60:95:08:41:2f:cd:1f:c8:e0:09:d8:fc:b4:55:d9:
         89:db:9f:62:61:90:46:8a:10:be:b4:f4:28:b5:f1:de:21:56:
         2c:74:3f:9c:0e:51:85:ca:7d:dd:34:11:48:be:e9:cb:1f:86:
         98:80:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:22:19 2025 by rpki-client