This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
File:                     BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft (raw, json)
Hash identifier:          zChgwllC9nsQ0uqDP4koXCfFfJTAkMSamZGDZA7GbBU=
Subject key identifier:   69:1B:F4:C6:BE:25:C3:17:60:2B:B4:89:9A:9B:18:74:52:AB:E6:62
Authority key identifier: 06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF
Certificate issuer:       /CN=A9179F22/serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
Manifest number:          0180
Signing time:             Fri 05 Dec 2025 01:56:16 +0000
Manifest this update:     Fri 05 Dec 2025 01:56:15 +0000
Manifest next update:     Fri 12 Dec 2025 01:56:15 +0000
Files and hashes:         1: BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl (hash: uATYvo+p6yi8dKShWQpHQedKmxJODjAJ1IQkYY67P/4=)
                          2: 2CDC448608D811EF8DFDE781C4F9AE02.roa (hash: eek0QODlRhbdv/MSirxCHdu3bMd0C4B0uUYmDtuZmC8=)
                          3: 2D7A0C2A08D811EF8DFDE781C4F9AE02.roa (hash: RbuUwT6s59ftT2m1syFLwpZ78+B6i6ZcO0YDrGRtGpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl
                          rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F22, serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF
        Validity
            Not Before: Dec  5 01:56:15 2025 GMT
            Not After : Dec 12 01:56:15 2025 GMT
        Subject: CN=69323bc0-c7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:87:9f:44:f0:ad:97:00:79:89:9a:be:c6:
                    ac:6c:39:26:bd:d8:f1:dd:38:e5:f4:50:ae:97:c5:
                    9a:3f:4e:1a:1d:30:f2:9a:4e:2d:c9:c2:26:d4:91:
                    bb:11:3d:a0:b8:1a:bb:b2:11:8a:94:68:3e:10:4d:
                    98:8a:a3:50:27:9e:e0:4f:b9:f5:86:8a:9f:fe:70:
                    0e:77:b9:94:19:fb:f6:bc:3b:2d:f0:5e:da:39:e0:
                    e6:a0:7b:ff:dc:34:d2:f4:21:e1:a1:1f:89:1c:d3:
                    14:b9:04:a4:25:a2:bc:70:75:2b:00:c1:08:3f:4f:
                    0b:32:f7:b8:0c:47:e3:ca:fa:6b:6e:f2:15:03:0b:
                    2d:32:55:70:f8:09:b0:2e:f7:c3:90:de:d6:a8:21:
                    14:9d:c3:c3:50:36:b4:dc:f1:83:71:2f:78:c2:65:
                    37:e1:71:de:49:63:3e:0a:8d:a8:32:2b:6a:3d:e0:
                    f4:c8:97:8c:f7:ae:63:3a:63:e2:f5:f2:81:95:f8:
                    51:10:8e:a6:08:9e:39:af:75:67:de:37:79:aa:2b:
                    e0:87:30:ee:85:bd:cd:3e:46:db:ad:ed:f7:11:15:
                    49:5b:56:22:2a:53:95:60:6a:b2:ff:c3:2e:eb:47:
                    95:a7:b8:0a:ac:83:af:9e:ee:60:d2:e3:96:a0:dd:
                    a0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1B:F4:C6:BE:25:C3:17:60:2B:B4:89:9A:9B:18:74:52:AB:E6:62
            X509v3 Authority Key Identifier:
                keyid:06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9d:a2:cf:1c:62:67:1d:60:0a:9d:e9:94:5b:f4:19:82:f3:
         2f:d3:99:b9:dd:8b:70:34:bb:28:be:85:df:e6:2c:d2:af:6f:
         9e:7d:ab:5f:39:15:3b:5c:c2:4f:64:b9:8b:1e:25:14:8f:e4:
         84:8c:83:8f:62:6f:46:1c:27:f6:cd:d0:bf:8f:13:b4:dd:ac:
         e3:c0:9e:99:d2:0d:ac:48:4a:01:ee:ec:6b:8a:2e:c3:0c:cb:
         34:c3:d7:9f:fd:c5:f6:d0:14:ec:00:9d:00:ce:13:7c:23:2a:
         06:50:26:e4:21:61:80:b2:34:b5:d9:5d:f3:94:5b:9d:e8:38:
         f6:34:1f:b2:43:7c:88:02:95:6d:1f:87:61:01:bf:2f:3c:30:
         bc:31:c5:56:f2:80:34:00:df:6c:e9:0e:6a:b1:c3:cb:e5:11:
         39:35:f9:9d:0e:a3:08:41:28:7b:30:c6:44:95:08:b7:ec:09:
         ad:42:27:5d:69:98:6a:cb:a0:89:f6:e2:4a:3b:1d:76:e2:c3:
         f8:40:31:25:7b:af:a4:b9:79:6c:df:4c:0a:1b:85:f7:58:b2:
         a2:9d:8e:80:2e:7a:7f:fc:50:47:68:8c:eb:33:a6:a6:5e:10:
         b6:dc:0f:35:58:4c:0e:91:7b:d2:a8:45:3d:0e:2b:e3:1d:cf:
         af:cd:ee:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlGMjIxMTAvBgNVBAUTKDA2M0JBRjNFRDdCNDEwNzFBOTBEOUZBRTQxMEZGNDc4
ODhGMEJFREYwHhcNMjUxMjA1MDE1NjE1WhcNMjUxMjEyMDE1NjE1WjAYMRYwFAYD
VQQDEw02OTMyM2JjMC1jN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTaHn0TwrZcAeYmavsasbDkmvdjx3Tjl9FCul8WaP04aHTDymk4tycIm1JG7
ET2guBq7shGKlGg+EE2YiqNQJ57gT7n1hoqf/nAOd7mUGfv2vDst8F7aOeDmoHv/
3DTS9CHhoR+JHNMUuQSkJaK8cHUrAMEIP08LMve4DEfjyvprbvIVAwstMlVw+Amw
LvfDkN7WqCEUncPDUDa03PGDcS94wmU34XHeSWM+Co2oMitqPeD0yJeM965jOmPi
9fKBlfhREI6mCJ45r3Vn3jd5qivghzDuhb3NPkbbre33ERVJW1YiKlOVYGqy/8Mu
60eVp7gKrIOvnu5g0uOWoN2gNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkb9Ma+
JcMXYCu0iZqbGHRSq+ZiMB8GA1UdIwQYMBaAFAY7rz7XtBBxqQ2frkEP9HiI8L7f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DNkY1NUZBODhG
MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVIR3BEWi11UVFfMGVJand2
dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JqdXZQdGUwRUhHcERaLXVRUV8wZUlqd3Z0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUYyMi9DNkY1NUZBODhGMkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVI
R3BEWi11UVFfMGVJand2dDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0naLPHGJnHWAKnemUW/QZgvMv05m53YtwNLsovoXf5izSr2+efatf
ORU7XMJPZLmLHiUUj+SEjIOPYm9GHCf2zdC/jxO03azjwJ6Z0g2sSEoB7uxrii7D
DMs0w9ef/cX20BTsAJ0AzhN8IyoGUCbkIWGAsjS12V3zlFud6Dj2NB+yQ3yIApVt
H4dhAb8vPDC8McVW8oA0AN9s6Q5qscPL5RE5NfmdDqMIQSh7MMZElQi37AmtQidd
aZhqy6CJ9uJKOx124sP4QDEle6+kuXls30wKG4X3WLKinY6ALnp//FBHaIzrM6am
XhC23A81WEwOkXvSqEU9DivjHc+vze7N
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:24:01 2025 by rpki-client