This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft
File:                     BudciPNpAzH-l_hiEjG2XRR6O20.mft (raw, json)
Hash identifier:          VKB8v17lYvsjLAK1qBjJfNR4Rcy3sHJwo+dnNV3ecvE=
Subject key identifier:   9B:DF:65:A0:D8:A3:6D:D4:01:11:C2:DC:1A:F5:BB:81:AC:47:31:FB
Authority key identifier: 06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D
Certificate issuer:       /CN=A915FEAC/serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft
Manifest number:          99
Signing time:             Tue 23 Dec 2025 05:18:56 +0000
Manifest this update:     Tue 23 Dec 2025 05:18:55 +0000
Manifest next update:     Tue 30 Dec 2025 05:18:55 +0000
Files and hashes:         1: BudciPNpAzH-l_hiEjG2XRR6O20.crl (hash: xiGLzbrXlQuJbNfOKCvvNCP3I6OZzZ5xw/4iZ2DF7Qs=)
                          2: 2511401EF40311EFBB6EF777C4F9AE02.roa (hash: tnCDhZMDrHPp0NMpU0cMFqMJ1EvDl+x9yj+eC20nwlY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl
                          rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FEAC, serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D
        Validity
            Not Before: Dec 23 05:18:55 2025 GMT
            Not After : Dec 30 05:18:55 2025 GMT
        Subject: CN=694a2640-b54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:07:97:ea:46:25:f4:9b:c6:f8:2b:5e:34:
                    c3:90:df:5a:d3:e1:91:f5:5d:5e:9b:88:09:cd:d4:
                    24:88:00:17:9b:d9:1f:7d:15:93:1d:04:ed:f8:ec:
                    89:d8:32:98:62:1b:93:da:c1:7b:39:1c:ee:67:a0:
                    d0:f1:09:16:d2:11:00:41:22:50:73:b9:b8:cc:47:
                    cc:83:31:46:f8:d5:50:5c:b9:df:ea:2a:88:6d:e7:
                    6e:13:9b:26:95:40:e2:ed:bd:1c:97:5c:94:cb:c8:
                    c1:85:cf:ba:f6:a0:6d:63:a2:4f:89:26:c2:f4:f1:
                    67:5a:c1:da:c3:bb:4a:b7:40:56:5f:b2:59:24:e5:
                    0b:8f:d3:84:62:d8:30:db:b8:93:58:2c:7f:7e:33:
                    5a:85:23:5d:79:09:fb:b5:aa:88:f2:e2:47:9a:71:
                    59:a9:74:57:75:29:59:86:8a:cf:e3:ff:5c:40:b0:
                    95:af:91:1a:f1:08:f7:c8:3b:03:ef:51:42:7b:5c:
                    aa:d9:f0:17:84:60:22:58:4d:04:2b:3b:72:10:cd:
                    ce:d7:f0:c3:a3:96:f6:9f:93:fb:18:bf:89:b4:3f:
                    79:91:c6:c1:1f:e9:f1:2d:cd:99:a9:a3:d2:7a:a1:
                    56:14:7e:f0:a9:43:52:f3:57:85:5a:ad:ae:85:e3:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:65:A0:D8:A3:6D:D4:01:11:C2:DC:1A:F5:BB:81:AC:47:31:FB
            X509v3 Authority Key Identifier:
                keyid:06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f4:88:5f:05:0e:76:ee:9a:25:06:70:a8:f5:35:8a:c2:a3:
         48:f3:dc:a9:e8:b8:4d:1d:c6:1a:52:bf:85:cd:4f:e1:9c:a0:
         0a:71:b3:dc:98:2d:a3:63:37:65:89:27:89:34:b5:6c:14:01:
         55:87:e1:9f:14:24:3b:49:89:e2:6d:74:84:a6:fe:02:02:b6:
         6e:6a:78:6c:cd:89:a7:e7:e4:53:1b:9a:a1:8b:93:fd:99:36:
         12:6f:43:5b:23:15:80:30:73:1a:d0:f2:b6:f2:e9:4a:a2:db:
         92:1d:c6:40:1c:bd:13:38:24:d8:12:b9:83:94:18:0a:93:25:
         30:40:17:29:cf:07:68:85:34:d7:46:02:bf:57:f1:3b:57:f6:
         cf:3d:7f:44:64:63:4c:31:5f:ac:05:ce:2c:63:48:49:c6:0c:
         1b:29:2a:8a:e0:e5:1d:f7:2f:26:7b:f3:ef:c9:e5:1e:64:46:
         3a:3f:03:de:2b:5e:a2:8d:33:3e:4f:bd:ce:3c:d0:f0:71:ba:
         0c:e0:a9:2e:2d:dc:f7:28:7a:d5:06:42:71:be:e4:03:83:6f:
         c7:25:4b:9b:30:65:3d:72:a7:a2:e4:bc:7b:a1:b7:a1:3f:97:
         8c:a5:bf:26:f2:1c:88:c6:09:d7:1e:29:6e:4e:b7:32:21:e7:
         22:9e:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:20 2025 by rpki-client