This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
File:                     BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft (raw, json)
Hash identifier:          VGjO202nG6W8PUHqv4wkAPOsdCR3Xf4/hmArbulRKDE=
Subject key identifier:   C7:37:EB:13:73:85:A2:16:EA:4D:52:FC:F9:A1:C9:02:A6:DB:99:C1
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Certificate issuer:       /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
Manifest number:          DF
Signing time:             Tue 23 Dec 2025 04:40:52 +0000
Manifest this update:     Tue 23 Dec 2025 04:40:51 +0000
Manifest next update:     Tue 30 Dec 2025 04:40:51 +0000
Files and hashes:         1: BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl (hash: CjFwtDIp1YFFO43Ud+UtH8/HOa9cVv+aL9/i5laO6+g=)
                          2: 408104A8C3E011F0A31AE55EC4F9AE02.roa (hash: mUltdiFtSdwvKJ1/UtAog12GOcFsnhuiRfLmih/4Qqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
                          rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
        Validity
            Not Before: Dec 23 04:40:51 2025 GMT
            Not After : Dec 30 04:40:51 2025 GMT
        Subject: CN=694a1d54-936a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:27:97:b9:6a:86:b6:7a:44:4e:66:e1:b9:
                    0c:41:30:12:87:55:30:a3:47:84:1f:dc:fa:b4:fb:
                    71:c4:f2:23:74:3e:65:02:71:60:2c:c4:0d:ad:cd:
                    6f:e8:37:2e:b4:5e:e9:32:81:91:91:04:9e:3a:58:
                    ab:bb:c5:40:e8:11:08:85:c6:ab:8c:f1:cc:22:34:
                    ad:f7:3b:18:75:ca:da:3e:33:6a:35:1a:63:b6:04:
                    f1:56:88:a1:4a:9a:b1:47:36:03:6a:ca:7e:fa:91:
                    0b:25:e7:be:44:93:e0:f8:93:00:61:6f:a6:b8:54:
                    07:23:1b:b6:b6:39:25:8e:62:fe:62:5b:b9:29:2f:
                    21:d1:31:c3:df:a7:1a:27:9a:8d:84:d8:ca:e5:93:
                    b0:bb:20:3e:b3:f4:55:9c:56:3e:42:6b:ab:b8:2f:
                    33:9e:e6:f8:e4:e2:91:d8:eb:61:ba:35:75:89:f7:
                    6d:2b:7a:12:89:53:93:43:4e:7a:40:02:a9:c1:32:
                    45:78:19:25:e2:c0:cc:3e:d2:2d:e1:e4:78:f1:6e:
                    6c:dd:d7:15:44:7e:ee:c7:b0:25:b6:4a:17:89:c6:
                    f0:86:5d:00:a2:57:bd:29:b1:3a:d5:e3:f9:9c:6e:
                    06:8c:a3:c7:51:a7:48:c2:7b:a9:88:bd:6b:b7:3b:
                    df:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:37:EB:13:73:85:A2:16:EA:4D:52:FC:F9:A1:C9:02:A6:DB:99:C1
            X509v3 Authority Key Identifier:
                keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:dc:cd:a0:75:52:5d:e4:43:15:42:0e:1e:1b:a5:76:7b:93:
         1d:56:54:16:06:82:d8:9f:9e:9f:28:33:96:eb:4c:1f:07:48:
         13:48:fa:d3:fd:4a:67:c7:8a:12:e2:1a:7f:a8:83:65:05:4f:
         1e:a8:a1:5f:2b:98:9c:74:f9:9f:f3:86:58:7d:f7:9a:f4:31:
         a1:1f:4c:11:e1:b2:c7:2a:47:9c:5c:64:bc:bb:2c:ad:8f:c5:
         c9:ba:14:1f:bb:95:70:26:64:ea:ea:38:c6:11:b0:65:b2:31:
         20:b9:09:c5:00:ff:06:73:b0:42:f1:70:74:28:be:16:1d:76:
         61:89:3f:d5:c8:b6:92:6a:f6:fa:ca:00:d9:35:ab:ae:ca:b9:
         28:ae:60:72:20:e7:f2:69:2c:f0:6d:4e:28:b2:1b:a8:8f:f3:
         42:18:b0:fe:b5:e5:d8:15:88:f4:14:12:7e:e5:52:c0:d6:97:
         20:0c:c1:ff:bb:86:7b:de:44:8a:f6:d6:62:09:1c:7e:42:54:
         3b:26:82:41:b9:5e:aa:3a:78:d3:ce:1f:a5:cf:c9:b3:a3:a7:
         3e:e5:c2:74:d6:e5:d3:87:af:26:e1:6d:35:93:18:2e:16:d6:
         6e:15:7f:0b:67:e9:d2:0a:ac:8c:04:b2:e7:64:be:3b:c3:d7:
         5d:94:87:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:33:00 2025 by rpki-client