This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
File:                     Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft (raw, json)
Hash identifier:          DYbDW6Yg6kJWlZs303cqqm3TWhOPRNvzsOXnGjVdmhg=
Subject key identifier:   A3:09:98:B3:5F:EA:39:1A:20:5E:E4:E3:8D:AD:98:E6:CF:19:4F:80
Authority key identifier: 06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73
Certificate issuer:       /CN=A919AFBE/serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
Manifest number:          11
Signing time:             Fri 05 Dec 2025 05:45:03 +0000
Manifest this update:     Fri 05 Dec 2025 05:45:02 +0000
Manifest next update:     Fri 12 Dec 2025 05:45:02 +0000
Files and hashes:         1: Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl (hash: 8VITDMVllHZGDmcA+MyI3fqZ9Ay0UHj0wZ7hnuCXbe8=)
                          2: 4F172076BA1F11F08DD0CE3CC4F9AE02.roa (hash: 2SVHk8cIQzgO3XRGu4uq00WRCc3uLMHlAw81vpBUV8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl
                          rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AFBE, serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
        Validity
            Not Before: Dec  5 05:45:02 2025 GMT
            Not After : Dec 12 05:45:02 2025 GMT
        Subject: CN=6932715e-3731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6e:2d:c6:6a:56:46:8f:24:04:63:19:c8:a8:
                    36:25:c0:76:2f:d1:8f:34:6e:23:52:8f:98:68:5e:
                    fe:a8:fc:36:78:a2:64:00:a2:08:b9:30:1d:7d:6a:
                    11:7b:31:7f:58:11:a3:20:06:bf:27:0c:9b:a3:01:
                    10:12:1d:b5:44:60:96:1e:86:64:74:f1:23:39:f7:
                    59:66:97:7b:ba:5b:b7:dc:2a:39:73:63:44:0e:5e:
                    11:de:7b:65:66:e0:f9:9c:ab:01:dc:10:40:9d:a8:
                    85:12:6b:4e:25:8e:41:85:e3:a6:2c:c1:b7:f7:40:
                    4b:90:26:56:be:b9:96:56:02:15:02:fc:9d:54:0f:
                    da:cf:bf:3a:7b:2e:da:b0:ea:c8:9a:7c:3e:75:63:
                    a9:c3:7a:0f:f4:4b:fc:12:b5:6a:3e:16:12:1f:b8:
                    6e:1d:24:39:53:10:c7:28:a6:32:dd:d7:4c:ef:70:
                    06:9a:c5:c0:17:00:31:89:60:9a:8e:a8:71:14:3f:
                    70:69:1f:87:95:bf:02:aa:ba:5f:b7:ef:7b:1a:fa:
                    5e:8c:d0:c8:90:07:e8:2a:7b:b9:b4:1e:7a:5b:93:
                    31:41:4b:1a:8b:41:d6:7b:8d:55:9b:94:a6:89:ee:
                    2e:f2:27:b7:13:d5:bb:19:6c:65:6d:91:79:59:81:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:09:98:B3:5F:EA:39:1A:20:5E:E4:E3:8D:AD:98:E6:CF:19:4F:80
            X509v3 Authority Key Identifier:
                keyid:06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c5:1f:f0:96:0f:ad:c4:0f:bb:40:8f:b0:9f:7a:b7:96:6d:
         f7:82:42:3d:8b:c8:75:f0:85:6a:9a:f6:61:ec:0f:7f:27:b0:
         8d:0a:f5:e3:2a:6e:5b:1e:ca:0e:ba:a9:71:65:03:aa:b9:5b:
         69:2f:97:6c:be:4c:cd:77:bc:b0:f7:36:57:f2:27:fc:c0:3f:
         cf:15:c0:b4:b4:7a:b2:ce:9e:43:7d:2b:d3:19:a9:81:d1:93:
         ed:28:73:17:ba:13:55:88:a0:6b:03:7d:4d:91:13:d3:d7:58:
         9e:03:32:88:f3:68:41:dd:98:65:19:b5:3a:c6:6d:a0:05:7e:
         72:76:af:18:27:69:8a:11:06:e8:d0:80:cc:8f:db:32:2f:ef:
         ea:cc:d0:55:96:ec:33:d9:91:f4:72:f8:c3:60:a2:92:86:32:
         c3:1c:bc:3c:90:d8:a8:8e:d9:c6:36:af:e9:4d:35:b5:b0:6b:
         1c:7d:7d:80:26:c8:cc:83:4e:b4:46:d5:f1:98:84:1e:ca:f6:
         17:aa:62:92:b3:aa:79:6e:2a:a2:67:81:76:3e:dc:b7:90:94:
         8a:49:e6:65:de:9a:f3:0e:0b:04:e0:5e:db:2c:6e:46:e6:29:
         28:13:eb:f2:2f:a4:05:e9:74:bc:6f:6b:3e:3e:52:e0:29:9b:
         4c:f9:6f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:29:25 2025 by rpki-client