This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
File:                     BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json)
Hash identifier:          jdEfbDtXL0wu63Ls+5NQGI80LswBygF+1dkdL3gYnf0=
Subject key identifier:   E7:74:32:FC:0F:2D:3D:07:F9:FF:88:04:E2:4E:6E:76:C6:00:0D:9D
Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21
Certificate issuer:       /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
Certificate serial:       053E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
Manifest number:          0538
Signing time:             Tue 16 Dec 2025 22:54:00 +0000
Manifest this update:     Tue 16 Dec 2025 22:54:00 +0000
Manifest next update:     Tue 23 Dec 2025 22:54:00 +0000
Files and hashes:         1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: uW0CKK2DkjVIK3WJe2guHyVJLg5qDYYODKMsKNUk9JM=)
                          2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: Bfjs/rTdpDPTDnJIoWaxeafLKa6QSKWFHwoAGDnn1AU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl
                          rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 22:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B2C1, serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
        Validity
            Not Before: Dec 16 22:54:00 2025 GMT
            Not After : Dec 23 22:54:00 2025 GMT
        Subject: CN=6941e308-b336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:b3:16:d6:13:95:65:b4:ef:fc:4c:df:c2:
                    eb:9a:f4:0f:07:b4:28:59:88:b3:68:64:4a:80:f5:
                    fc:1b:42:60:8f:4b:37:d5:4e:7b:ab:a6:74:63:f6:
                    81:20:08:00:2f:9b:7d:b3:85:9d:9b:65:5a:af:96:
                    40:55:af:d9:37:c5:d9:23:a5:cf:35:c8:d8:a3:65:
                    11:85:83:45:0d:53:f3:f3:92:db:57:18:6c:36:62:
                    7b:e5:29:dd:c9:fe:43:1e:b1:c7:d5:56:b9:01:1f:
                    e7:c6:47:4c:5c:06:96:9f:e7:73:92:c8:35:a2:3b:
                    09:2e:20:c6:fa:99:92:95:1a:66:9f:89:ad:2c:02:
                    10:92:33:ce:8b:bf:37:57:23:07:2d:80:09:3d:69:
                    ce:96:9e:6c:cd:df:90:9a:84:50:77:2b:8a:58:9f:
                    70:30:02:98:dc:d5:78:58:98:3c:5e:18:01:4a:9d:
                    b5:bb:8b:9d:55:03:44:41:43:58:13:06:8b:81:01:
                    2d:a0:fd:7c:48:91:59:3a:1a:a3:58:b8:60:0a:03:
                    03:88:ba:fc:02:f1:f4:de:c7:71:b0:3b:f0:71:f1:
                    07:06:67:aa:79:b3:aa:8f:26:af:62:78:23:6f:f5:
                    7d:26:e6:bc:bc:e7:c0:c4:31:b5:18:47:fb:56:ec:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:74:32:FC:0F:2D:3D:07:F9:FF:88:04:E2:4E:6E:76:C6:00:0D:9D
            X509v3 Authority Key Identifier:
                keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cc:4c:b6:66:4a:60:61:3d:c3:4f:26:9b:8f:8f:3c:8b:60:
         52:8c:6f:3d:95:2a:46:16:7c:b4:4c:f6:08:de:d3:24:0c:35:
         ae:f7:57:3e:1b:29:1c:03:91:92:60:58:4d:62:15:45:29:40:
         48:cf:a8:d1:8c:6b:d3:fc:21:0d:62:75:b7:ad:f7:c2:ac:6c:
         7f:b3:97:dd:e0:20:2c:8d:7a:27:2a:aa:2f:74:ce:8f:68:65:
         52:ee:e7:e7:ba:3e:fd:c0:46:9d:5e:d2:f9:5c:c0:94:ce:dd:
         9b:66:45:98:db:91:66:a0:60:7e:4b:66:fc:eb:52:8e:ca:5b:
         0f:79:b3:14:ed:7d:f4:40:da:03:44:bc:30:f7:56:60:e2:af:
         1f:c8:94:0a:0e:05:a9:37:f6:70:72:74:0e:43:07:28:41:cc:
         26:cb:9c:ff:7b:68:c0:0b:c3:c5:e1:2b:96:5c:df:25:31:10:
         51:f7:b3:12:ef:c2:4f:b5:3e:d1:6a:a5:be:44:ca:05:f1:4f:
         19:49:57:ad:4a:b9:60:a3:9d:03:22:8d:20:a7:64:a3:25:cc:
         9f:14:c8:28:43:dc:71:bc:1f:61:87:34:7d:9c:b4:03:7a:b5:
         d7:65:f6:c3:00:37:50:0b:fb:da:5a:55:06:0b:f6:75:20:f6:
         8c:c9:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:16:47 2025 by rpki-client