This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
File:                     bjdXKUWj6XupZFmfpVXE20JjwOQ.mft (raw, json)
Hash identifier:          TUoTtB7Arxl2tT53smABhlSCgmjfOkcjZW1g0PtXuag=
Subject key identifier:   56:B0:91:A8:23:AE:5A:61:EF:06:E5:C0:39:BA:78:06:BD:40:09:1F
Authority key identifier: 6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4
Certificate issuer:       /CN=A9176302/serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
Manifest number:          6A
Signing time:             Wed 03 Dec 2025 03:21:55 +0000
Manifest this update:     Wed 03 Dec 2025 03:21:54 +0000
Manifest next update:     Wed 10 Dec 2025 03:21:54 +0000
Files and hashes:         1: bjdXKUWj6XupZFmfpVXE20JjwOQ.crl (hash: bSv1wgKpSYxXDsawSkUNDXRw6QslFQQopkfendXE/Q4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl
                          rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 03:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176302, serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4
        Validity
            Not Before: Dec  3 03:21:54 2025 GMT
            Not After : Dec 10 03:21:54 2025 GMT
        Subject: CN=692facd2-0dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:27:37:c9:37:41:64:83:ae:7f:98:6c:a5:
                    e1:f4:a4:58:e8:cd:2d:af:76:de:fa:dc:6e:3a:e2:
                    af:f6:6f:ac:f0:b9:ac:47:9b:54:cb:a3:cd:43:ef:
                    56:97:35:d9:df:3a:6f:2d:90:55:94:c9:58:14:bf:
                    1d:a2:8c:3b:47:6b:ca:35:4e:d0:6d:ae:7e:6b:02:
                    d5:7d:75:4b:c1:3f:d0:8d:d2:a7:06:d3:8b:93:46:
                    c9:37:5a:d3:29:10:c4:1f:5a:be:06:12:a6:f7:a0:
                    80:83:fd:e9:48:23:f2:78:a9:05:dc:73:f1:d9:20:
                    22:79:3e:31:26:b1:66:85:0c:a8:e4:b2:35:2e:8a:
                    46:cb:46:27:0f:43:4f:67:15:89:b3:5b:46:c2:a4:
                    58:76:e3:24:7b:e0:e7:b2:2e:d9:92:b1:71:89:b9:
                    ce:06:43:14:9b:bd:35:9a:c7:36:a6:75:09:cd:0a:
                    fb:63:fd:9b:8c:8c:b1:4d:dd:8f:22:81:ba:90:20:
                    b0:33:2e:f5:cb:ad:d4:ae:48:72:45:f6:fc:f0:0c:
                    ae:d1:e4:ec:9f:d3:13:d9:95:0a:22:69:bf:55:db:
                    d9:47:7c:a7:ed:42:73:06:7b:f6:51:07:c9:ca:26:
                    29:a6:69:ce:9a:7e:0d:46:ef:f2:34:74:90:ba:fa:
                    e1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B0:91:A8:23:AE:5A:61:EF:06:E5:C0:39:BA:78:06:BD:40:09:1F
            X509v3 Authority Key Identifier:
                keyid:6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:16:6e:98:78:b5:d6:47:d9:eb:32:3f:8e:c4:be:6c:da:76:
         df:29:96:4e:56:e1:e6:2d:4f:81:73:0d:c6:96:91:e2:da:35:
         d6:70:1e:08:8a:58:cd:8f:18:a9:6a:ac:76:a9:1a:e8:90:dc:
         c2:b8:27:95:33:71:21:4c:f1:a1:54:b4:11:f9:a5:a1:61:69:
         cd:73:cd:70:4b:c0:4e:96:87:b2:8f:d6:0f:0b:64:1a:03:9e:
         22:8c:4c:a4:bc:49:03:10:32:8c:4c:ec:75:4d:af:47:92:91:
         0c:a6:1b:8a:59:36:ea:ed:2c:46:3f:88:32:7b:3b:18:d5:b8:
         82:7d:e3:06:d2:87:66:6a:5d:16:a3:41:55:b1:6e:13:9b:e5:
         c9:56:7c:d8:29:46:c2:53:e0:ec:97:cf:75:19:92:12:1e:64:
         39:89:b9:1b:cf:83:fc:66:4f:76:e3:a1:84:a5:1f:f2:69:a6:
         55:49:24:f3:1d:15:c6:f4:74:ee:b9:5f:fa:ce:67:0a:0d:de:
         57:6f:67:8b:e7:85:ae:ba:39:67:2a:f0:0e:bb:1d:97:ec:6c:
         63:68:13:15:7f:52:2b:2e:58:c1:5f:f5:9c:41:03:ff:82:87:
         05:d2:14:f6:5b:38:e4:ff:2f:96:30:a9:b0:f4:4d:4e:e7:5e:
         a8:51:96:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:44 2025 by rpki-client