This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
File:                     BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json)
Hash identifier:          Md1ex84y4riz1n+4QghYt0W8yW+LL7AkYXgBK6rauOo=
Subject key identifier:   34:8C:B6:04:8C:2C:79:2C:0E:F5:E9:BA:37:B0:4C:45:D0:D9:91:CC
Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
Certificate issuer:       /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Certificate serial:       0401
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
Manifest number:          03FC
Signing time:             Thu 04 Dec 2025 22:55:35 +0000
Manifest this update:     Thu 04 Dec 2025 22:55:35 +0000
Manifest next update:     Thu 11 Dec 2025 22:55:35 +0000
Files and hashes:         1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: Svhw6UoNhvTw2vIWBbBw+oclsAiSTWosMDTkutsX9uU=)
                          2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: IDcKfjrcD970kwyhuo4LacbpxchYwfNjnBXBdXrdXbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
                          rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
        Validity
            Not Before: Dec  4 22:55:35 2025 GMT
            Not After : Dec 11 22:55:35 2025 GMT
        Subject: CN=69321167-38d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:97:bd:00:6d:67:5a:c1:c2:6f:c5:52:aa:
                    79:e6:b1:e1:c7:0a:ef:81:13:f8:5a:e7:6a:57:f4:
                    df:54:8e:98:8b:77:b1:d7:9e:a5:f8:4b:db:a5:10:
                    84:c2:9f:69:12:49:46:96:52:a5:22:57:63:f9:8e:
                    8f:27:20:67:78:62:32:51:9e:2e:f7:0f:cb:08:2b:
                    bb:28:4c:87:82:50:f4:b5:1a:ca:3c:6f:ea:c9:f4:
                    ec:a9:5c:f6:9c:cb:6a:0f:40:84:a0:5a:36:e4:5b:
                    84:d2:1a:bc:36:ba:b8:a8:ba:11:22:be:28:97:76:
                    d8:02:cd:30:d0:e7:0b:51:d4:d5:de:75:d3:14:12:
                    1d:8e:b4:93:8c:4c:9f:d0:15:66:f0:64:26:58:48:
                    37:44:2d:58:ca:91:05:18:eb:f7:ff:76:80:d7:06:
                    85:73:a1:83:43:ea:81:83:e6:d6:4e:c2:37:47:88:
                    29:d7:8c:97:5b:df:50:1b:ea:79:9d:7a:ca:2d:ca:
                    27:04:bf:4e:de:d2:42:f3:4d:e1:52:c5:33:dc:95:
                    9e:02:3a:6f:15:63:09:0b:5c:8b:d9:c3:8e:36:89:
                    31:d7:68:6b:69:68:71:12:0b:65:bc:af:fe:59:b4:
                    85:3e:f8:9d:2e:ba:bb:17:3a:60:fc:0b:00:02:f2:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8C:B6:04:8C:2C:79:2C:0E:F5:E9:BA:37:B0:4C:45:D0:D9:91:CC
            X509v3 Authority Key Identifier:
                keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:77:d0:de:c6:54:90:3f:c3:f5:fd:9c:dd:da:2d:2d:90:0a:
         30:46:12:6a:38:8a:da:df:c8:61:cb:0f:cf:ce:05:a2:64:92:
         e5:18:51:3a:c7:4e:12:5c:f5:72:78:8f:40:13:3d:cd:3e:85:
         ca:5b:d1:f0:42:d1:8d:83:1d:37:dc:f2:43:42:31:ae:a7:10:
         d8:0b:3c:a3:6a:e7:b8:01:67:21:b1:55:25:24:ad:e4:1f:60:
         f4:48:a5:5c:e9:17:11:c2:00:6f:de:24:a0:3f:47:d3:37:70:
         e9:3a:13:f8:d5:c8:7b:5b:50:7d:a5:d9:5e:9a:35:90:b5:d5:
         66:e6:78:40:85:f8:84:b6:8d:45:27:a5:15:92:7e:97:7b:6b:
         c2:ad:cf:d6:5b:c7:6f:5d:9e:8f:74:45:20:41:25:82:ef:81:
         00:2c:e9:1b:cf:f4:f1:8c:82:c0:c0:22:f6:78:ce:46:cd:38:
         45:f5:d9:fd:aa:35:51:cd:cb:66:ad:e0:5d:8c:13:9e:f7:3f:
         8c:97:fd:af:b0:53:80:a9:7a:93:01:c4:e2:fa:3e:9e:af:5f:
         5c:56:ac:db:e4:4b:77:d2:f7:09:4c:cb:81:b2:00:40:db:b2:
         85:61:16:9c:75:c0:d1:73:cd:bd:72:0b:6a:b7:ee:18:38:c9:
         37:29:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:28 2025 by rpki-client