This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
File:                     0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json)
Hash identifier:          Eev54EfT07heSJ8NAdJXILFCGQaaq+enoY5BHWbDNWE=
Subject key identifier:   BC:99:6E:51:42:B9:46:2A:A0:73:57:57:AD:E1:09:ED:9A:15:01:33
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Certificate issuer:       /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial:       0953
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
Manifest number:          0946
Signing time:             Tue 16 Dec 2025 19:48:20 +0000
Manifest this update:     Tue 16 Dec 2025 19:48:20 +0000
Manifest next update:     Tue 23 Dec 2025 19:48:20 +0000
Files and hashes:         1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: jR+seE1NBYe3p7vozR/OWpsuRDOxeHWakxigHHmK70w=)
                          2: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: j+7FuDdUw+7PzuykOYS3riW81hh3FFiLyNobRrPETRw=)
                          3: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: bj4egIAAlTEUd+3GyfnPFN1nOaWoeA00wwzQy3Jloew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
                          rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 19:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387 (0x953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
        Validity
            Not Before: Dec 16 19:48:20 2025 GMT
            Not After : Dec 23 19:48:20 2025 GMT
        Subject: CN=6941b784-77b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d1:fc:41:ff:ac:8d:a5:dc:22:47:a9:01:e1:
                    c8:71:d3:9a:08:fc:65:0a:ab:1a:ec:ea:40:13:f6:
                    22:89:6d:f7:6f:c2:13:2d:ac:ab:cd:cb:35:56:47:
                    08:ff:57:03:4e:50:98:3d:7d:69:a3:1e:e5:52:e8:
                    68:23:72:dd:5a:d4:67:5d:75:11:77:19:6f:0f:41:
                    c7:9d:e2:d7:88:61:1d:29:13:ee:9a:17:e6:af:5a:
                    23:38:6a:17:78:49:5f:45:71:68:ac:31:78:fd:01:
                    07:84:4e:c0:a9:9a:4c:65:10:e8:b5:67:bb:7d:f1:
                    d5:f3:f4:f6:ea:e6:72:a2:00:22:e6:a1:13:c3:6a:
                    29:da:8b:a2:bc:ef:2e:1c:8d:f4:59:34:cf:94:eb:
                    a5:d6:7f:76:1d:ce:be:69:45:f1:bd:c2:09:a0:96:
                    b3:1e:6d:80:1c:53:6d:96:cf:0e:72:f4:42:b4:30:
                    7b:8f:63:14:25:0a:1a:a1:8c:61:0b:65:44:ae:95:
                    f0:f6:41:7b:8d:bd:8b:c2:11:38:47:8a:48:b1:d2:
                    e3:40:4d:93:95:31:39:05:b2:2f:b4:5c:63:d8:83:
                    ad:70:58:b3:77:ba:b9:a7:77:40:2b:c1:2d:65:09:
                    fa:e1:10:6d:dc:c3:a5:8f:15:ec:d0:36:8b:cf:9b:
                    07:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:99:6E:51:42:B9:46:2A:A0:73:57:57:AD:E1:09:ED:9A:15:01:33
            X509v3 Authority Key Identifier:
                keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:19:a3:da:b9:42:4d:40:75:f0:80:7d:00:93:b6:d1:00:76:
         10:7a:9a:61:a3:23:4c:50:74:6b:4b:10:e5:b3:5f:69:63:ff:
         68:2c:26:12:b6:31:94:68:4d:f1:2d:3f:90:51:0b:cb:07:aa:
         cc:3d:49:9f:35:21:b3:13:b7:25:7f:df:79:14:f4:11:2f:ff:
         4e:fa:99:2c:02:11:aa:0c:0a:e9:38:e8:20:3f:fd:83:96:09:
         ff:6a:df:9f:3a:a4:67:07:96:18:e4:c2:cc:00:c1:23:be:98:
         e1:61:b8:fa:dc:d1:60:43:6c:c2:48:3e:27:56:97:68:45:89:
         b7:bf:57:b4:31:ad:14:9c:7e:c5:e2:e4:a0:f5:ba:a3:f4:0c:
         8c:a2:95:be:af:2d:74:03:3b:f7:e7:6b:78:64:51:2d:80:31:
         d4:37:67:2e:90:39:0d:bd:1c:d1:b6:aa:36:4f:06:c5:97:15:
         dc:7d:ed:b3:09:38:83:3a:89:99:42:c0:34:f9:50:4c:12:84:
         cd:14:f0:25:3b:fd:0f:bc:3a:66:4d:7d:b3:4e:f5:71:fe:aa:
         f9:e1:70:8b:27:86:53:44:e7:da:08:6a:c3:cc:e5:bb:ad:38:
         21:10:6f:1b:96:5c:e4:be:fd:b7:6c:dd:8d:80:95:cd:8d:0a:
         85:9f:47:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:07:07 2025 by rpki-client