This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
File:                     bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json)
Hash identifier:          rhLrwLqF/aX6+YQz6FyBj0Se7e5tNp4b7miuo9kqFOM=
Subject key identifier:   D0:95:D8:C1:39:F8:CE:B4:84:21:E1:E0:D8:32:3C:09:B7:AE:65:2C
Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
Certificate issuer:       /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
Manifest number:          0157
Signing time:             Fri 05 Dec 2025 02:17:59 +0000
Manifest this update:     Fri 05 Dec 2025 02:17:59 +0000
Manifest next update:     Fri 12 Dec 2025 02:17:59 +0000
Files and hashes:         1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: PexF8gRtFUDGdXjSdOMOJuxlygNKVN+psxcOCu852IY=)
                          2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: pARn59mvC3EFmnc54zsYhH0vh0pFsHJXtSQmvirMetQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
        Validity
            Not Before: Dec  5 02:17:59 2025 GMT
            Not After : Dec 12 02:17:59 2025 GMT
        Subject: CN=693240d7-fcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:da:ae:f0:27:d2:ab:e5:58:d1:44:e7:46:
                    62:b8:c8:9a:81:e7:c5:9a:84:a5:16:31:c7:51:00:
                    97:9c:39:44:ed:5b:f2:49:47:1c:26:f9:1d:82:68:
                    76:c3:46:2b:08:92:ef:3f:5d:7f:3a:d1:36:ed:1e:
                    4c:a2:dc:63:78:82:4a:6c:9f:83:5a:9b:f0:d0:29:
                    63:f7:df:61:b3:d5:07:e8:71:66:4f:93:2e:92:05:
                    46:21:79:b8:76:f1:c6:c9:43:e1:d1:8a:35:f0:00:
                    79:14:78:08:d4:03:e0:dd:d8:31:81:ed:e2:21:a6:
                    5a:a4:1c:58:93:86:70:1a:6d:3f:c0:29:13:b2:90:
                    53:41:62:08:d6:01:59:a7:b2:1d:a1:80:48:31:62:
                    c2:6d:fe:eb:3e:e5:71:f2:22:37:87:58:92:e3:28:
                    5e:1c:87:61:f6:6a:3f:11:58:99:df:e2:8c:c9:96:
                    38:77:19:03:d9:8d:f6:40:7e:0e:a9:22:39:21:18:
                    cf:83:77:1a:64:e7:0a:f7:12:ca:fe:c8:92:f4:70:
                    6f:29:22:63:52:71:2c:dc:32:79:b4:66:b9:40:54:
                    0f:0e:73:6b:c5:75:7c:43:21:c1:cd:ff:ab:e0:ce:
                    76:29:fd:d2:9b:c7:48:55:d1:e2:84:70:5e:04:f5:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:95:D8:C1:39:F8:CE:B4:84:21:E1:E0:D8:32:3C:09:B7:AE:65:2C
            X509v3 Authority Key Identifier:
                keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0f:23:d4:0d:b3:9a:a8:49:1e:4c:81:4b:cf:48:c0:64:9e:
         5a:3b:99:3f:b4:d4:3a:01:60:1e:c2:b4:92:e4:04:dc:46:3e:
         6e:3a:bf:6e:71:96:8a:cf:25:e0:0f:c9:d4:93:11:0b:2d:af:
         04:02:34:73:5e:97:61:c6:e9:6a:bf:31:91:17:9a:d2:1f:b9:
         5a:3c:32:e1:0e:ae:26:52:03:4d:92:d9:ab:dd:b9:00:bc:e8:
         e7:30:dc:cd:00:7d:d4:cf:61:e0:18:7b:e1:d4:4a:e3:b3:be:
         53:47:4c:32:f0:35:33:23:60:90:01:d8:f2:70:c0:2f:b6:92:
         f9:a1:d4:4a:84:9d:86:77:b5:e9:6f:c0:00:a1:e5:87:67:fb:
         07:48:c7:48:62:f9:6e:15:41:25:44:54:70:3e:db:82:db:2b:
         de:53:27:ea:fa:b2:9d:f4:35:cb:4a:3f:a9:78:28:3c:eb:83:
         69:3e:62:28:e9:87:02:5b:fa:ea:06:8e:c3:47:51:8c:00:cc:
         1b:56:75:2d:2f:34:d6:45:c4:2b:b4:82:78:40:88:dd:da:13:
         f8:25:7e:f2:a7:54:38:4d:3f:95:d0:df:cf:e1:cb:06:b4:4b:
         86:28:99:b6:27:70:2b:6a:ad:b9:f6:39:4d:02:f3:46:7a:b0:
         5e:6d:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:09 2025 by rpki-client