This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          fwh6anUwIP+gr+8nMeION6wiPZM/dxkjKdMtdFh5QeE=
Subject key identifier:   6B:9D:91:DB:A2:13:57:2D:4D:D1:9E:D5:DE:DC:F8:0E:85:5E:16:7F
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       0954
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          092C
Signing time:             Sat 06 Dec 2025 19:29:27 +0000
Manifest this update:     Sat 06 Dec 2025 19:29:26 +0000
Manifest next update:     Sat 13 Dec 2025 19:29:26 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: takAjIlCWEx4hhf/+RL5tti8ZoK4ieLbXp1gDywGOMU=)
                          2: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: rHm1B/MSNJeVi9UgfBbJLqo7QtD6an1CT3aEkcYwbOk=)
                          3: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: jqFz3U7Y3jCz0qKu2eSK+/FBQRd4npoRB1g4Atfczgs=)
                          4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: Z8zcoQtFS3z9ZE1TqMKGoB34rHpti60MXfkV1lqD5Ws=)
                          5: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: LK9G1J83bi3BUz0/qqWD4cotPJRvK4iVMh7A+P/u8DA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388 (0x954)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Dec  6 19:29:26 2025 GMT
            Not After : Dec 13 19:29:26 2025 GMT
        Subject: CN=69348417-f77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d4:37:ee:8b:8d:c5:3d:b4:a1:07:9e:bf:65:
                    65:44:f9:20:a6:6b:3a:dd:6a:c3:b0:2a:6e:6f:b6:
                    59:a5:aa:59:b4:22:79:7d:e6:f9:ad:1b:39:27:fa:
                    85:5c:a6:07:95:4d:c2:89:67:3a:04:25:ae:02:6b:
                    41:bc:42:c3:e5:85:5a:94:f3:64:f8:ff:01:af:a9:
                    52:54:5f:23:b1:16:e7:f3:62:6b:40:f5:40:15:ce:
                    b7:e0:88:ad:03:db:88:49:cf:14:5f:10:48:bf:1f:
                    3a:57:a8:38:91:6e:30:f9:f9:cd:e9:1d:81:bc:a0:
                    0c:6f:3a:8d:eb:c5:0a:83:50:8f:2c:0e:df:59:89:
                    ad:1a:21:4c:10:97:e6:54:d9:51:de:89:0d:4a:0b:
                    ce:dc:ed:fc:e9:9b:3b:55:cf:f2:3f:b1:0b:8e:3a:
                    94:84:10:db:ac:91:42:a0:22:42:ef:ae:cb:95:f7:
                    cb:2f:d9:6b:9a:03:fc:76:42:6d:14:87:d4:be:0f:
                    30:53:53:cd:8b:82:04:37:cb:a0:81:de:70:a8:fb:
                    46:4c:89:f7:e3:b9:bb:be:d7:2d:11:76:89:2f:2c:
                    cd:0e:6c:06:59:af:d5:49:f5:9c:4b:a9:52:9f:48:
                    b9:ca:3a:52:82:c6:07:a2:b2:4c:2a:9d:1b:a4:db:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9D:91:DB:A2:13:57:2D:4D:D1:9E:D5:DE:DC:F8:0E:85:5E:16:7F
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:80:15:27:65:4a:23:0e:3d:1d:b1:d0:af:c2:ec:78:d2:c0:
         38:ea:54:6c:9a:23:6e:19:f5:41:90:98:dd:f5:4e:66:b3:fa:
         40:51:8e:ca:fe:69:cf:e3:51:e2:a5:7c:8b:bc:2f:53:91:2f:
         ee:64:71:db:fc:ee:50:7e:27:cd:44:d0:4f:43:f8:3f:6d:5e:
         c3:7b:75:c2:8c:27:1c:7b:3f:ae:17:6b:24:e2:03:5b:ac:86:
         84:b9:ff:0f:4b:8f:47:e4:34:aa:7d:ab:32:d7:f9:99:eb:2a:
         37:c1:a7:49:f7:73:73:f6:61:e9:07:61:84:0f:42:9c:ad:1a:
         7c:ac:f9:1c:c0:47:15:b2:b6:93:bd:52:70:71:8f:b3:d3:91:
         4d:7f:01:af:a0:4d:ce:9a:22:0a:de:9d:55:aa:d2:86:d2:fd:
         2e:5f:bc:c6:4c:10:e7:f4:b6:d8:86:a1:11:a9:7d:3c:f3:94:
         cf:bc:1a:22:dd:c6:41:8e:7b:13:5b:fc:2a:fd:f6:27:44:e7:
         b5:49:ca:d8:d8:12:87:4e:48:f0:a9:47:63:d0:b8:3b:f6:69:
         b2:9c:59:21:d4:6d:68:66:6e:ab:8c:58:4d:77:f9:af:43:89:
         bc:b1:72:44:50:de:58:60:2e:b0:97:7e:16:17:76:ad:1a:5c:
         65:eb:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:02:34 2025 by rpki-client