This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
File:                     bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json)
Hash identifier:          QwJCOUmmPd18YIDhJY1MG+ZvnaGCSBfRwIAmehC3SBY=
Subject key identifier:   2D:A2:25:DB:CA:40:ED:B0:BE:14:2C:7D:96:86:9F:31:24:9C:3E:35
Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61
Certificate issuer:       /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
Certificate serial:       1103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
Manifest number:          10FB
Signing time:             Sat 06 Dec 2025 16:47:04 +0000
Manifest this update:     Sat 06 Dec 2025 16:47:03 +0000
Manifest next update:     Sat 13 Dec 2025 16:47:03 +0000
Files and hashes:         1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: h6o7l2Hfqf09FXaNZJhQaLmA1J/a1J/zgBDmPmBApm8=)
                          2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: NcGX1+0f22h9EnvK4Hf3V559zCSmDIlERyuyLCtuDE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl
                          rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4355 (0x1103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
        Validity
            Not Before: Dec  6 16:47:03 2025 GMT
            Not After : Dec 13 16:47:03 2025 GMT
        Subject: CN=69345e07-415e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:d5:91:97:63:ad:0b:32:38:0e:61:86:cd:
                    a8:77:af:d4:3d:cd:56:c7:9d:7d:b5:54:1e:49:4d:
                    b9:03:85:59:72:51:81:2f:33:b3:e7:67:b7:01:f2:
                    d5:1f:5d:b7:11:21:a8:a7:0b:10:27:72:9f:0b:e8:
                    da:32:5f:8a:4c:8f:4e:d6:20:63:e3:6a:c4:ef:76:
                    16:9b:e3:70:53:43:cc:ac:83:59:81:44:5e:8f:91:
                    11:59:c8:f6:1f:fa:4b:e7:f7:e8:b0:8e:7c:3a:f0:
                    ab:33:2a:f8:96:c3:3f:c3:6b:2e:21:a3:63:1a:29:
                    ed:9e:8f:9c:f8:54:b3:23:61:d0:51:10:f7:b2:81:
                    69:9d:86:13:31:cd:9f:bb:8d:cc:da:df:e2:14:c3:
                    be:65:14:93:df:8f:4d:35:43:f7:3d:23:93:e2:3d:
                    bf:1c:a8:d9:c6:8b:4a:b2:cb:1e:1e:a7:d9:4c:3d:
                    42:95:b3:37:4f:b5:c4:f1:ff:36:bb:e2:43:d1:9e:
                    5a:cc:83:73:20:c8:b9:3e:d0:57:68:2f:e5:1f:a6:
                    64:1a:47:36:d6:fe:0c:f5:13:f6:af:14:be:f1:1f:
                    1c:fe:cd:b5:cd:67:fe:7a:3a:aa:af:db:30:61:13:
                    da:b6:fc:15:75:33:ab:4c:8b:f7:02:57:21:d3:5e:
                    9d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A2:25:DB:CA:40:ED:B0:BE:14:2C:7D:96:86:9F:31:24:9C:3E:35
            X509v3 Authority Key Identifier:
                keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:05:25:50:dd:a6:03:2a:e2:af:8b:db:59:b6:d8:a5:df:
         0c:e4:63:0f:2f:9d:80:e8:42:a0:a0:9a:03:47:13:1e:ac:d8:
         ae:88:87:ad:9d:db:12:9e:d6:65:ab:c0:8a:8f:96:f2:60:ee:
         6a:f8:d0:4a:1b:fc:7d:53:0c:59:4b:c8:0f:b5:bc:b5:54:63:
         50:0c:0e:e9:5c:84:92:5b:ab:73:89:3f:68:2a:18:ed:c1:ac:
         f7:42:d6:48:39:8a:db:e6:42:87:f4:76:ae:b8:2b:9f:f3:3d:
         c8:4e:4d:e0:54:40:25:cc:f4:c4:16:00:a8:54:44:3c:c4:da:
         44:05:7e:3a:58:94:21:90:ba:30:1b:12:dc:a2:b4:0e:b3:3f:
         d2:ec:0c:99:72:04:52:c1:ef:48:df:b2:0e:9a:c2:2a:bf:c1:
         e7:12:a2:28:61:52:86:6a:96:02:2d:cc:f2:a5:ff:17:f2:c8:
         0a:bf:cf:9d:b2:c2:36:bc:6b:08:02:1e:59:b4:63:ab:58:a0:
         77:10:f7:51:55:5a:fa:03:b1:a8:ce:f2:e0:33:d2:6b:85:51:
         7c:ea:5f:91:71:5c:10:41:9d:b6:16:1f:66:3b:b6:61:63:20:
         15:1e:e2:61:fb:cc:a8:fd:ee:35:95:cd:42:fc:50:74:0f:7e:
         e5:dd:06:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:11 2025 by rpki-client