This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
File:                     BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft (raw, json)
Hash identifier:          fZiDQ5rFXw8EhxvmNnLgmt9lqcKDllLZEewpQ5EbSAs=
Subject key identifier:   58:9B:20:09:05:87:C7:CA:05:16:60:88:E8:6A:CB:2C:40:85:E7:17
Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90
Certificate issuer:       /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
Certificate serial:       0234
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
Manifest number:          0230
Signing time:             Fri 05 Dec 2025 00:22:13 +0000
Manifest this update:     Fri 05 Dec 2025 00:22:12 +0000
Manifest next update:     Fri 12 Dec 2025 00:22:12 +0000
Files and hashes:         1: BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl (hash: NElVSFMi1fElrf6PHShBx3MMTC4V6kW3JZkUpeF4HVc=)
                          2: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (hash: UfEQHpbIkG4N2xJZlQdcj3CUM9IauXhIw+vNgpLvVqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl
                          rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B0C9, serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
        Validity
            Not Before: Dec  5 00:22:12 2025 GMT
            Not After : Dec 12 00:22:12 2025 GMT
        Subject: CN=693225b4-6335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:20:35:86:5b:6e:50:f3:ad:b7:cd:af:ce:
                    1d:fe:6e:76:db:69:d2:40:46:ea:b8:27:8c:4b:a0:
                    9d:df:8e:94:88:63:1a:14:65:14:5b:29:49:a0:d2:
                    1f:b5:6c:e5:54:d1:cc:48:74:17:bf:c2:f8:49:c6:
                    49:81:27:3c:6d:ba:b6:7e:9a:b6:f8:c7:d7:c7:3b:
                    79:0f:10:e2:be:71:9c:fc:26:21:f2:e4:0b:1a:52:
                    b4:b0:0f:40:45:d8:b5:b0:73:7a:63:94:eb:a1:a2:
                    33:74:26:4d:21:1f:fd:e9:44:2e:94:60:8e:ef:47:
                    fc:ee:e1:61:2e:d7:87:5d:25:d1:8b:58:eb:26:33:
                    a3:ae:50:9e:9b:ab:3b:a7:aa:19:ab:4a:2d:34:13:
                    a4:ff:bb:77:e6:6d:3c:24:ed:56:7e:98:aa:b0:95:
                    d2:40:73:a3:df:7e:4f:44:51:21:b2:30:af:83:af:
                    6c:ff:ae:46:ff:cb:2b:05:b5:e6:9e:95:7f:44:90:
                    a9:2e:88:2f:35:e6:30:9a:e5:3d:da:8b:63:70:40:
                    a7:63:b3:37:51:82:fc:ac:5d:5f:9e:df:59:66:f3:
                    38:b3:f6:af:9d:5f:b0:de:82:92:ed:0f:2d:40:03:
                    12:6b:ad:57:7d:5a:9f:22:e1:fe:60:d1:91:bd:c8:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9B:20:09:05:87:C7:CA:05:16:60:88:E8:6A:CB:2C:40:85:E7:17
            X509v3 Authority Key Identifier:
                keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ca:be:62:ae:1e:7c:95:9b:6f:44:fd:87:4d:74:76:2f:2c:
         43:54:e9:1d:5a:69:9d:0d:ba:e9:f3:c0:56:21:a9:ee:47:c9:
         e3:19:b9:d8:e2:65:e5:17:eb:36:40:86:d8:1e:38:f3:5d:f2:
         b0:01:c5:b1:6c:b4:22:18:95:3c:dc:2e:bd:67:37:da:f9:5d:
         ba:1e:2a:54:48:d1:9f:fb:3b:94:6a:ed:2a:ff:0e:e9:e2:2d:
         75:ad:eb:10:cc:1c:e6:67:b1:ca:54:34:a8:e8:1e:8a:22:06:
         00:16:8b:a1:b7:27:9e:de:84:ea:41:ff:d7:00:c5:28:49:39:
         27:63:e6:34:96:ca:0e:98:a0:81:e7:4d:43:f2:ed:59:ed:9e:
         24:5b:13:7d:e1:ca:9d:2d:6a:29:ac:34:57:32:76:9a:c3:31:
         54:be:8c:e0:a7:2e:df:f7:74:ae:12:b1:9c:a4:3c:b6:b4:81:
         81:7e:72:2c:1e:e6:1c:6b:2f:f2:07:06:39:f5:35:a7:e5:02:
         ea:83:3b:77:8a:a4:4d:56:46:ba:25:30:76:7f:e6:b7:66:aa:
         17:aa:c1:79:aa:3f:c8:c7:75:52:90:45:07:a7:5e:b0:92:47:
         e4:7d:17:3b:9b:ed:48:47:e5:de:e7:c4:dd:a8:1e:a6:c4:77:
         df:2f:a5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:16 2025 by rpki-client