This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
File:                     bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json)
Hash identifier:          Jq80sFuYup+W4lBguNSYvvR/5S1Pa2aGHfkTaA5yg70=
Subject key identifier:   3C:1C:6E:CC:6D:25:FF:17:27:CF:45:58:B7:A0:FF:0E:98:D9:88:B7
Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
Certificate issuer:       /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Certificate serial:       054B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
Manifest number:          0546
Signing time:             Mon 22 Dec 2025 22:33:39 +0000
Manifest this update:     Mon 22 Dec 2025 22:33:38 +0000
Manifest next update:     Mon 29 Dec 2025 22:33:38 +0000
Files and hashes:         1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: jOeMY7run9Do4vFJEwAKOdsdRXdaU+ECD3C3nDJL/vk=)
                          2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: VqWOdJpzHU4g7FfrJlbFpwfob9hyB+C2diH5Mhn8hxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
                          rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355 (0x54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
        Validity
            Not Before: Dec 22 22:33:38 2025 GMT
            Not After : Dec 29 22:33:38 2025 GMT
        Subject: CN=6949c743-e57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:c4:9d:b2:5c:c2:4d:15:0d:12:95:23:c7:
                    49:23:0c:db:89:a0:d3:cc:4e:b8:3e:63:7b:c7:6f:
                    3f:c0:d5:a0:98:b0:d3:e8:75:0a:a3:86:e0:6d:04:
                    b9:52:36:b2:08:67:07:b7:50:1d:f2:f3:b5:76:68:
                    a3:df:70:be:1d:22:d8:e3:38:42:69:5f:06:10:3f:
                    15:4b:27:98:af:30:d8:45:dd:16:39:16:f1:66:e1:
                    c8:fa:d7:53:bf:ac:08:45:b3:47:a4:70:92:ea:f0:
                    11:bd:b6:a3:c5:28:79:54:05:cd:63:32:b4:89:5c:
                    d3:a5:53:ee:51:3c:d5:c4:2b:39:86:93:fd:ef:8f:
                    a2:59:47:97:d7:ed:c5:2a:85:7b:f9:50:85:5e:3f:
                    47:e7:47:0e:e8:2e:ec:dc:a7:0e:3e:7a:e8:15:f5:
                    bf:db:15:c6:3c:0d:c3:a7:5f:f0:62:9c:51:6f:e1:
                    ea:3b:e5:1a:d5:7f:f1:d2:f1:50:00:af:a4:4a:44:
                    21:d9:2d:5c:b9:0c:e7:69:bf:e3:0b:d2:09:ef:ad:
                    e6:d3:de:6a:16:9b:bd:bc:73:49:a0:44:2d:b0:19:
                    f9:34:7a:04:75:6d:15:74:5f:0e:a4:45:ef:16:f6:
                    f4:6a:1d:f9:63:5a:7c:06:0c:d3:87:9f:71:b9:58:
                    c9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1C:6E:CC:6D:25:FF:17:27:CF:45:58:B7:A0:FF:0E:98:D9:88:B7
            X509v3 Authority Key Identifier:
                keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:32:c5:95:09:45:59:15:4f:ec:7a:e5:e6:43:01:30:50:e8:
         53:5e:2e:e7:8e:b4:d0:a8:46:98:a7:9b:8a:82:4b:68:d5:18:
         71:ff:a4:1d:48:09:2b:ba:84:98:db:79:1c:39:bb:77:86:24:
         5d:a9:47:26:96:ec:e1:a4:4b:3c:dc:c4:ec:30:7b:99:73:b6:
         83:a1:d7:e2:dd:fb:f6:5f:9b:a4:2c:6b:30:45:97:6c:7e:b1:
         97:a2:3f:97:18:e8:f4:1d:d4:d7:81:df:cc:13:ee:92:7f:62:
         f6:2f:0d:cd:25:ea:e1:5a:63:2b:9f:db:f9:f7:17:3b:70:bd:
         3f:8f:dc:a0:37:09:1b:3e:1e:f7:0f:e3:12:e6:11:e7:26:03:
         e5:c8:77:6d:95:7e:4b:e1:11:15:d5:ce:c8:4e:36:19:de:03:
         24:11:e0:b5:48:b0:b3:7e:25:9f:f1:59:ec:8e:07:43:dc:a8:
         21:20:e0:17:04:4c:30:09:6f:30:bb:27:fb:75:f4:f8:b9:ed:
         b4:96:1f:14:e2:0d:88:90:33:03:41:52:7e:a7:f1:80:d8:ba:
         92:de:10:6d:80:27:7a:d8:54:65:b2:e6:14:98:a8:54:47:f0:
         58:7f:4c:5c:d9:ae:93:6e:9a:27:f9:77:a1:92:95:25:ad:d8:
         0d:f1:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:39:27 2025 by rpki-client