This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
File:                     bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft (raw, json)
Hash identifier:          0nOR1KmnnE1ukc1ZL1t+QT1GShUfJFT+EVR5OCMgxws=
Subject key identifier:   F0:C4:63:CC:83:51:D9:49:D7:3C:68:7B:F0:C3:26:D7:10:36:07:89
Authority key identifier: 6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25
Certificate issuer:       /CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25
Certificate serial:       02F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
Manifest number:          02ED
Signing time:             Tue 23 Dec 2025 00:15:10 +0000
Manifest this update:     Tue 23 Dec 2025 00:15:10 +0000
Manifest next update:     Tue 30 Dec 2025 00:15:10 +0000
Files and hashes:         1: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl (hash: 7054T8Pl4LMaCKWi+3KSTSMQejeCkgwTNFeU4zH1HRU=)
                          2: ED947C26088911EDA7D9A84AC4F9AE02.roa (hash: m5tkDr99ueIyPYAtBqolFfiSgG7uue2Tp2ShsOm2nZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl
                          rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A44, serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25
        Validity
            Not Before: Dec 23 00:15:10 2025 GMT
            Not After : Dec 30 00:15:10 2025 GMT
        Subject: CN=6949df0e-2368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:25:5e:1a:d3:c8:65:6c:7f:12:4e:a6:04:
                    fd:c7:8a:4e:64:4e:35:ee:37:94:46:a4:1f:32:06:
                    99:45:69:db:72:39:be:8e:5f:1b:70:80:0e:d9:1a:
                    dd:70:73:15:48:b5:af:2c:6b:69:dc:63:e3:bd:8b:
                    a9:f6:97:2c:a5:48:12:6f:75:ec:75:d3:66:e5:40:
                    86:ee:9d:f9:76:18:bc:e0:24:55:0a:0b:cb:40:16:
                    e9:68:fa:3c:15:88:a0:1e:3e:35:6f:c2:a6:d0:88:
                    3c:46:a0:6a:08:56:ad:c0:2f:48:9c:1c:c0:20:42:
                    61:4c:da:bc:9f:c3:9f:53:65:60:84:f7:c0:3d:1b:
                    d3:ec:a0:e7:93:c8:7c:17:5c:30:63:7f:ac:fb:dd:
                    c9:ad:35:98:d2:03:87:c9:0a:26:96:14:dc:aa:77:
                    d7:db:0a:84:8c:77:b1:ab:a9:bf:4b:b6:d1:7f:0a:
                    0a:ad:a5:5f:3d:d6:8e:4f:59:8d:c2:a7:61:cf:a7:
                    4b:c9:30:e2:16:d3:38:41:1c:a1:15:db:5d:15:fc:
                    f7:6a:b1:26:ce:43:91:36:42:5b:a1:31:b7:03:d8:
                    d0:cc:4e:d2:4c:51:64:54:fb:4f:e6:62:00:87:6a:
                    78:15:21:b8:84:e1:ec:3f:09:df:fb:eb:d2:cf:7d:
                    ba:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C4:63:CC:83:51:D9:49:D7:3C:68:7B:F0:C3:26:D7:10:36:07:89
            X509v3 Authority Key Identifier:
                keyid:6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e1:a9:85:2f:c5:14:4e:9f:da:7f:45:e1:61:dc:f7:f4:cb:
         89:86:9c:a9:54:82:c0:19:d9:8e:a5:ec:33:ac:c5:d7:03:b7:
         88:b6:27:a2:b6:11:a3:a2:e0:10:ab:60:91:e6:30:b5:f6:53:
         c1:24:83:a4:98:a0:6f:a5:e5:c8:01:03:be:cc:31:52:66:93:
         ab:18:f5:79:9a:de:8f:bf:d2:ce:32:72:98:03:6a:f8:ca:92:
         b9:2c:76:e8:75:56:bf:97:9a:6b:06:c1:e5:44:09:0c:ee:e6:
         5d:71:69:b8:04:c4:d3:7a:99:3a:06:63:9e:8f:0d:6a:2a:e1:
         7a:95:0e:d6:b6:1b:aa:b7:07:be:04:03:c1:49:92:21:02:5d:
         f8:3d:35:97:ff:03:de:8f:92:d1:94:22:78:ec:6a:d5:0d:61:
         4f:d0:cc:a6:b2:09:51:2c:1b:4b:2a:94:02:b1:f1:22:48:fd:
         a1:53:73:f7:a2:2f:75:5b:01:9a:ed:d5:18:58:cd:de:c2:8e:
         bd:55:70:f6:0d:63:c7:40:06:ab:ce:75:7c:39:a2:ea:21:f3:
         f1:8f:f6:f5:99:d7:5f:5a:3e:77:77:b9:f5:f1:e1:8a:72:01:
         22:49:d6:35:e8:a1:80:69:f2:92:ba:19:09:02:06:b5:d5:b8:
         b1:eb:b6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:16 2025 by rpki-client