This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
File:                     BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json)
Hash identifier:          7Bhc3CEsgZKL8hb9HiOBLq+Ek+Wb5rLQRkVi+JKqUmA=
Subject key identifier:   62:F3:8A:CA:06:A0:B1:00:89:41:94:ED:12:7D:1E:E7:B3:A1:8E:85
Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21
Certificate issuer:       /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
Certificate serial:       0538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
Manifest number:          0532
Signing time:             Thu 04 Dec 2025 22:05:48 +0000
Manifest this update:     Thu 04 Dec 2025 22:05:47 +0000
Manifest next update:     Thu 11 Dec 2025 22:05:47 +0000
Files and hashes:         1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: 9z6/XzAI1zb+cAiAzEKJ2G7IRh70VpGNS095FQV/kaQ=)
                          2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: Bfjs/rTdpDPTDnJIoWaxeafLKa6QSKWFHwoAGDnn1AU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl
                          rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B2C1, serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
        Validity
            Not Before: Dec  4 22:05:47 2025 GMT
            Not After : Dec 11 22:05:47 2025 GMT
        Subject: CN=693205bb-5a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:38:5b:d7:41:4d:35:7c:0f:72:d3:fb:a7:
                    a9:0f:38:a0:45:d5:c0:f4:77:14:1e:31:1f:6a:c0:
                    0a:80:cf:24:20:97:5d:6a:3e:4b:19:25:4e:47:f0:
                    5f:cf:74:ba:74:da:58:7d:62:fe:aa:ac:50:86:cb:
                    65:f2:28:39:e9:68:18:4d:da:e3:eb:0a:d9:b0:b7:
                    60:46:31:9e:bf:ef:29:fb:01:a8:9f:c6:52:79:2e:
                    8c:1e:a7:a9:3f:36:80:3f:5f:68:73:67:c7:a6:8c:
                    2e:4d:dd:c4:72:2a:80:ea:4c:2f:94:ca:50:f5:8c:
                    33:c9:14:f1:42:04:4b:64:7d:3c:00:8e:c3:48:73:
                    47:ab:56:d6:02:75:e4:b7:79:90:f8:9e:d3:56:b0:
                    44:ab:91:04:c6:48:f3:2a:eb:d6:56:d7:bb:05:1d:
                    78:b4:a9:0d:dc:50:5d:75:63:6e:60:2f:72:4e:9d:
                    9f:38:c7:2d:64:e6:91:25:2a:91:6b:70:de:12:bd:
                    da:9b:3f:77:d4:d2:e9:ec:e0:d6:96:5f:46:01:84:
                    88:90:cf:0a:a0:cf:fe:5e:43:c6:eb:2f:0b:24:f0:
                    3b:c5:51:ed:61:fb:f4:03:bb:f7:d0:df:9e:f7:87:
                    8a:f7:7d:a2:1a:78:23:b7:43:1c:77:eb:4b:e6:e7:
                    a0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F3:8A:CA:06:A0:B1:00:89:41:94:ED:12:7D:1E:E7:B3:A1:8E:85
            X509v3 Authority Key Identifier:
                keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:65:74:f0:79:b7:7a:e2:88:3c:46:ff:ba:7a:b3:fa:4b:f3:
         30:4f:57:c6:85:1c:06:1a:db:74:1a:42:51:6c:04:d9:30:a8:
         42:a4:d0:92:b0:d5:23:ef:6e:25:75:77:12:fe:1e:3d:ab:6e:
         6e:f1:c8:e9:6c:dd:53:18:68:5b:12:60:c1:8c:84:df:2d:ca:
         ba:79:7a:60:a1:7d:0b:43:92:f9:c9:fe:25:86:83:5c:c1:45:
         8f:66:f4:8d:9c:39:3c:28:ac:b3:ba:89:0f:11:84:ef:a1:5f:
         46:f4:0c:51:61:24:29:9f:94:27:ac:8a:67:2e:bd:9f:2c:dd:
         6b:e0:b5:4e:1d:4b:07:63:b8:24:51:62:19:d7:66:ea:7c:17:
         af:07:c3:64:98:c4:ca:e1:5d:ae:77:58:5b:d4:3e:3b:82:2e:
         93:2f:ba:43:d7:fa:7e:61:f5:ce:dd:cf:a1:b7:3c:c6:68:3f:
         80:23:ad:ae:d8:2c:17:79:66:b6:98:03:62:fb:0e:6a:d1:27:
         c3:3f:9d:ab:25:67:8c:e7:99:63:a6:67:cc:7f:f5:38:d6:95:
         e0:90:32:4d:e9:88:90:a0:b1:fb:48:42:08:ca:37:79:c4:10:
         54:5a:97:76:64:82:89:36:a1:c5:42:c9:46:e8:85:d1:76:25:
         68:ce:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:24:05 2025 by rpki-client