This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
File:                     bjdXKUWj6XupZFmfpVXE20JjwOQ.mft (raw, json)
Hash identifier:          c1lDUifI//7V4dUpnvPzwRR8QXhUAeF5bu9nT4LGz/k=
Subject key identifier:   B9:18:19:B5:6A:B9:48:7A:0A:72:D2:59:9D:97:85:08:59:4B:59:1E
Authority key identifier: 6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4
Certificate issuer:       /CN=A9176302/serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
Manifest number:          6B
Signing time:             Fri 05 Dec 2025 03:00:10 +0000
Manifest this update:     Fri 05 Dec 2025 03:00:09 +0000
Manifest next update:     Fri 12 Dec 2025 03:00:09 +0000
Files and hashes:         1: bjdXKUWj6XupZFmfpVXE20JjwOQ.crl (hash: UVMyroyGcq4XNxnkMlPFY2CR0ea94MbzGJEKCZDHAFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl
                          rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176302, serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4
        Validity
            Not Before: Dec  5 03:00:09 2025 GMT
            Not After : Dec 12 03:00:09 2025 GMT
        Subject: CN=69324aba-107d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:d2:45:ee:09:cc:71:e4:e8:c1:8b:4f:08:
                    38:57:f2:c4:61:9f:03:dc:8f:ed:9b:bd:33:25:fe:
                    47:65:17:e4:a8:83:ed:1c:4e:e6:8a:98:11:ac:27:
                    1a:81:c2:83:4f:8e:a4:31:65:d1:3b:bc:ef:a3:ce:
                    65:98:7b:f2:8d:40:f7:8e:0d:29:d6:7e:07:42:9c:
                    5a:c4:8a:47:04:8b:31:86:4d:8f:45:f3:80:6c:b2:
                    92:e2:07:32:f8:43:35:51:46:63:91:35:a6:42:fc:
                    4e:d7:f9:c0:49:ae:4c:d5:e1:df:69:7d:d5:32:0f:
                    a2:d2:87:f3:86:cc:f3:56:c0:fb:8a:15:f3:e7:9b:
                    e1:11:4b:00:fc:3a:4c:fa:5c:d2:26:65:56:d4:01:
                    84:c5:60:47:35:cb:37:77:9c:34:60:d2:0a:02:d0:
                    f9:d1:af:e8:63:91:cd:5b:d2:53:24:53:50:30:87:
                    7d:16:c5:d0:37:d6:f9:38:37:ea:73:31:da:85:01:
                    44:db:0a:b7:2b:10:b2:45:6d:0d:e5:1b:ef:fc:82:
                    e5:be:81:f7:e3:ec:f5:15:62:47:64:98:0e:69:fb:
                    47:32:9e:2f:fe:c9:a8:56:eb:f4:a9:84:82:ec:d3:
                    37:d0:13:10:aa:42:ce:59:d2:81:2f:6c:7c:c7:48:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:18:19:B5:6A:B9:48:7A:0A:72:D2:59:9D:97:85:08:59:4B:59:1E
            X509v3 Authority Key Identifier:
                keyid:6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:03:f0:09:e4:42:b6:cb:42:bb:97:57:72:ba:63:7a:4b:40:
         2d:81:33:1c:ae:fb:8a:6e:0f:00:37:f4:36:98:9d:82:64:b6:
         a2:84:2e:f6:8b:fc:b0:9d:1f:3a:93:42:5f:b1:59:96:1f:61:
         05:60:f1:9e:dc:d9:50:24:ac:70:33:f7:4e:33:1d:61:ad:95:
         7e:55:a1:c7:ef:e7:65:65:c2:f1:c4:0b:8f:94:6a:6c:e7:1c:
         01:d0:31:33:bc:e1:a4:a2:a3:3e:5e:e3:f7:bf:29:6d:f3:79:
         41:f2:49:f5:8b:64:ea:ea:16:ca:12:7d:4c:a5:56:10:b3:b0:
         60:1b:04:f7:3e:ea:86:24:43:91:b0:e1:25:6c:fb:7e:22:58:
         d3:48:8c:1f:eb:25:1d:ba:4b:2c:91:1d:2e:01:14:10:18:b3:
         75:52:68:71:be:2e:23:eb:6d:0e:30:48:db:ef:57:7c:9d:d5:
         14:46:93:c0:df:db:fd:88:f7:26:28:23:cc:c9:cc:63:f4:88:
         19:a1:7b:da:d2:ef:48:81:ec:11:28:b7:33:50:eb:74:d7:2e:
         b0:ea:ec:95:a2:2a:dc:1b:5f:3f:de:1a:81:1f:be:38:e3:0a:
         54:b8:77:ce:42:30:8a:6b:ca:76:bc:b8:fd:4c:c2:06:9a:7c:
         50:2b:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:21 2025 by rpki-client