This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
File:                     bWlDJ6eLD158LQx0Y3dIHe3doAI.mft (raw, json)
Hash identifier:          /iQ2Z3tCPR9e5OmVlVa8w6Pd17NZadEcoKrkvc/eWWU=
Subject key identifier:   0C:BF:2F:7E:A1:A6:B5:0A:7F:49:47:81:B2:8E:D9:96:31:13:B5:44
Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
Certificate issuer:       /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
Manifest number:          01FB
Signing time:             Wed 17 Dec 2025 02:00:40 +0000
Manifest this update:     Wed 17 Dec 2025 02:00:39 +0000
Manifest next update:     Wed 24 Dec 2025 02:00:39 +0000
Files and hashes:         1: bWlDJ6eLD158LQx0Y3dIHe3doAI.crl (hash: Wz0RuLgSmSOKcE4w1BLLbRKHfjf1kE7y+rF0bH3ITjE=)
                          2: 3CF4087AD90611ED890F5D5FC4F9AE02.roa (hash: c52+qULtQI4nUSwyiYqI9B7pVL/XEZ9W/nL53Dz6dtI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
                          rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186392, serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
        Validity
            Not Before: Dec 17 02:00:39 2025 GMT
            Not After : Dec 24 02:00:39 2025 GMT
        Subject: CN=69420ec8-02e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:c8:c3:8d:2e:bb:f7:9b:93:2a:e1:e2:27:
                    c2:6e:06:fc:49:56:ea:b0:6e:39:52:46:46:7e:0e:
                    46:6a:03:da:a9:53:0d:ac:91:77:76:ab:92:4d:9d:
                    82:4a:4f:e4:d7:29:12:9c:d4:b5:2b:4d:b4:d0:a9:
                    9c:98:17:0c:82:31:38:ff:c4:6c:4b:5b:eb:c5:8f:
                    0f:d9:5d:9c:d3:bd:88:9d:d2:10:39:fc:1a:c7:16:
                    f8:1e:62:cb:d7:1f:1e:ad:ec:be:fe:7d:47:9c:df:
                    ae:05:3b:57:01:05:af:85:90:14:8a:9b:46:9f:b1:
                    d5:55:7a:13:f1:3e:a9:f7:59:94:05:b8:66:a3:57:
                    c0:43:a9:42:3b:83:f5:3b:1b:9c:a1:4c:0e:16:65:
                    c2:e0:d9:16:13:6c:6f:b3:a7:2d:e0:3d:c2:2a:6f:
                    9a:da:b4:62:38:e1:92:61:65:56:12:a2:52:3e:fb:
                    54:46:01:04:61:6e:7a:6d:83:b5:78:33:cc:ee:39:
                    d5:c7:e0:5d:c3:1b:1c:5b:a0:42:fc:c9:d3:e7:99:
                    fc:c6:8e:89:2f:d4:c5:84:54:b2:c0:9e:e9:42:fc:
                    22:1b:66:b3:22:f9:ef:e8:3e:32:a2:95:00:c5:a4:
                    36:14:d4:52:93:22:af:b3:1a:26:6a:ff:b4:fe:42:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BF:2F:7E:A1:A6:B5:0A:7F:49:47:81:B2:8E:D9:96:31:13:B5:44
            X509v3 Authority Key Identifier:
                keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:9a:b0:15:53:73:f1:bc:6d:b3:c5:1f:8d:9e:39:5e:e2:aa:
         fc:6b:3d:e9:a5:09:9e:3f:06:80:0c:27:b0:a7:1a:0e:e2:cd:
         e0:dc:f4:a8:90:46:ae:9a:19:74:6c:7b:e8:0f:7e:bd:80:18:
         d4:e4:9c:a1:ab:3d:49:b1:87:ea:46:54:5f:81:6c:72:fa:31:
         b7:e9:cf:b8:4b:8e:50:34:ac:3f:04:88:d5:28:5a:43:00:c0:
         7d:04:86:75:3a:6e:29:37:c7:b9:57:3d:f4:dd:ed:c8:4b:2e:
         de:3e:ef:78:00:9b:75:0e:6d:43:29:e4:ba:04:cf:70:03:cf:
         f3:7f:bd:37:f2:83:fd:cd:d0:c1:89:09:d9:53:c5:95:6e:6f:
         65:55:86:47:3f:d4:87:b1:b9:fa:74:bc:03:41:ca:a4:ce:8f:
         91:ab:03:2a:86:d5:a1:dc:84:a8:e2:0a:2f:29:21:d9:4b:1f:
         45:d9:86:07:60:d3:0e:0d:db:89:0a:cd:13:34:17:3c:e8:b9:
         46:50:b2:ce:38:1d:8e:36:28:96:e4:78:1b:0c:4f:02:8b:d4:
         31:25:6c:68:12:b6:c8:52:8e:d6:ae:c8:66:0a:94:9e:54:c8:
         2a:8b:cc:d2:33:b5:93:74:cd:cc:6e:6e:9a:d3:d9:5f:ce:78:
         b9:9a:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:44:03 2025 by rpki-client