This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
File:                     bUGUPlFfU_mSYZyH8COTgRJT3mc.mft (raw, json)
Hash identifier:          jjlE7i0ahI6X0XoFokG7+wl0WzD5obrBakqAXe3Cedo=
Subject key identifier:   C1:49:41:C8:9E:92:88:15:F7:AA:73:83:D5:02:55:E5:8C:FA:87:AC
Authority key identifier: 6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67
Certificate issuer:       /CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
Manifest number:          017A
Signing time:             Tue 23 Dec 2025 02:50:02 +0000
Manifest this update:     Tue 23 Dec 2025 02:50:01 +0000
Manifest next update:     Tue 30 Dec 2025 02:50:01 +0000
Files and hashes:         1: bUGUPlFfU_mSYZyH8COTgRJT3mc.crl (hash: 0tZwua41ckkr8aC3S6SQisX0Cx57In4hjRKI6k3X+S4=)
                          2: 038457CEA3A011EEBE44947FC4F9AE02.roa (hash: PgCUtYUopFfJUcc6oCyLffXra/44Q+4sS+exi8w3QBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl
                          rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915216F, serialNumber=6D41943E515F53F992619C87F02393811253DE67
        Validity
            Not Before: Dec 23 02:50:01 2025 GMT
            Not After : Dec 30 02:50:01 2025 GMT
        Subject: CN=694a035a-7720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:24:cf:04:5e:f6:d6:2b:9c:9d:f9:6b:ef:
                    1a:20:2d:e8:d3:9c:36:f9:8a:5a:1e:62:41:e3:06:
                    13:fc:25:99:55:11:b3:41:d6:c6:46:c5:03:2e:fd:
                    1c:f4:e5:d1:1c:6b:a7:35:db:b9:a8:6e:6b:46:8d:
                    1f:f1:2c:75:e4:f5:76:d5:ac:9f:12:13:6b:45:90:
                    bc:c7:83:e5:3a:ea:10:7f:12:d9:c5:4f:52:fa:d5:
                    58:57:be:53:7c:c2:91:a0:21:31:9a:ad:65:63:6f:
                    6e:46:a2:ed:6d:a6:f3:ae:bc:05:a9:cc:61:bf:79:
                    ea:3a:df:56:1c:88:c4:c8:6a:e9:54:64:bc:b0:59:
                    06:18:16:5a:bd:87:37:f1:d2:7f:f9:ee:51:c9:fa:
                    ab:10:ff:ce:b8:fa:5b:71:fb:39:f5:a2:4a:ab:8b:
                    78:77:c7:96:4e:74:f3:a3:30:6c:87:55:07:f2:fb:
                    d1:fa:ac:93:75:98:db:57:e8:da:25:2e:c4:ad:bc:
                    27:12:c8:49:ce:3f:00:1e:5f:2c:f6:c9:9b:3b:a7:
                    5d:ad:58:9b:b8:9d:a5:b7:f5:4e:63:cd:62:a6:7d:
                    71:18:c2:11:45:e3:e7:bc:83:00:83:13:76:a8:25:
                    8a:f2:19:fd:c7:11:16:b2:70:33:0d:6c:87:86:a8:
                    c1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:49:41:C8:9E:92:88:15:F7:AA:73:83:D5:02:55:E5:8C:FA:87:AC
            X509v3 Authority Key Identifier:
                keyid:6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ce:aa:b4:c2:d7:ad:28:ef:83:eb:37:76:95:b0:c7:fa:57:
         b5:77:ca:ff:0b:72:6d:4c:3c:91:8a:26:93:7c:3d:ed:24:33:
         6d:10:54:f7:7d:6a:d2:f4:3d:77:86:d4:e2:e5:cd:5e:85:b8:
         18:22:95:d7:d6:43:76:5c:d7:2f:32:70:31:bd:b6:c9:50:99:
         90:e2:d8:ff:b2:12:64:18:d5:d2:4d:28:b6:4b:43:d2:e9:17:
         97:29:99:c3:86:d0:f4:23:25:99:a7:0c:38:18:28:13:e4:5a:
         a5:da:bb:c5:02:af:93:b8:c9:b2:da:a8:fe:8e:9b:67:25:cc:
         f0:01:c5:5e:03:c3:ad:0a:66:45:d6:9e:1f:5e:dc:2f:92:3a:
         42:41:78:ca:39:6c:d1:f2:70:ce:90:79:9e:76:bc:53:05:c3:
         d7:fe:14:a8:b8:ef:23:f4:1f:e1:99:05:de:7b:c7:18:36:eb:
         80:96:07:aa:23:59:b5:93:e4:47:b0:2e:b7:ff:3a:59:96:57:
         6c:9c:31:d8:3b:8f:ad:fe:a3:54:f6:a1:3e:b6:00:f2:c8:b8:
         92:dd:48:ef:da:a4:6f:03:6a:cc:07:f4:38:fd:5e:eb:a2:b2:
         ee:a3:0b:6b:f0:cb:1f:2c:a2:c2:dd:b0:75:d9:eb:0f:a8:77:
         a6:11:c3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:13:57 2025 by rpki-client