This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft
File:                     bUron6l6cWotkmYf8s9b08zcKfw.mft (raw, json)
Hash identifier:          Jj4L+VjV7EiE1x72MmuVEaLllfu3GkIsYK3vLDzs6h8=
Subject key identifier:   31:9C:EA:DA:D0:9E:E9:69:0E:97:0C:0C:9B:C6:11:B7:D9:7E:56:0C
Authority key identifier: 6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC
Certificate issuer:       /CN=A91778C2/serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC
Certificate serial:       17B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft
Manifest number:          1772
Signing time:             Thu 18 Dec 2025 16:29:50 +0000
Manifest this update:     Thu 18 Dec 2025 16:29:49 +0000
Manifest next update:     Thu 25 Dec 2025 16:29:49 +0000
Files and hashes:         1: bUron6l6cWotkmYf8s9b08zcKfw.crl (hash: wdiQIT70OVc+HTgwbBciOeb1g3GggCiOSH1Z5nmR/XQ=)
                          2: 0EF775B2EFCD11EF92BCB66CC4F9AE02.roa (hash: dhGM48Qmuh+yyQJu0VDMTodAqTolqsrvBN1YFz8HF0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl
                          rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6064 (0x17b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91778C2, serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC
        Validity
            Not Before: Dec 18 16:29:49 2025 GMT
            Not After : Dec 25 16:29:49 2025 GMT
        Subject: CN=69442bfe-1272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:94:5f:86:af:b6:1f:f2:30:0b:77:92:ca:1b:
                    2e:f7:08:03:14:23:cc:df:e8:50:22:b1:2a:84:9e:
                    a0:5f:32:71:95:3e:b7:09:8b:d2:df:09:6b:c2:46:
                    fe:09:c3:4e:dd:a1:d7:c2:90:e8:3e:57:58:32:5e:
                    cd:ee:f9:72:29:77:5b:a2:99:7f:de:9d:fb:65:f9:
                    b3:21:fc:09:45:cf:45:cb:57:e3:3d:03:1d:bf:84:
                    b8:14:2f:ac:56:b7:53:d4:3d:e9:4e:c8:a6:01:0f:
                    a9:4d:a9:c3:56:eb:be:a8:b4:88:f1:d6:9d:e4:9c:
                    ae:ac:f3:1b:38:ae:72:34:2a:80:b7:f8:7f:77:99:
                    e7:9f:eb:41:cf:b3:08:e2:b9:2d:ab:d3:16:bb:a3:
                    e4:c0:51:14:71:98:a5:2c:c5:eb:b0:40:fc:71:85:
                    79:b9:06:e6:6f:e2:36:15:6d:49:63:74:46:93:82:
                    b7:01:fe:1b:84:15:1b:aa:13:e7:5c:48:2f:39:a9:
                    00:30:90:89:08:d3:2b:4b:c3:22:82:02:cb:7d:19:
                    1a:b9:74:9f:50:1e:9e:a0:55:a1:f2:2a:f7:d4:d3:
                    18:d2:d3:88:95:7e:96:d0:e8:f1:4b:c2:4b:f7:35:
                    d3:3e:20:da:34:fe:db:8a:e8:86:6a:7d:23:8a:34:
                    62:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9C:EA:DA:D0:9E:E9:69:0E:97:0C:0C:9B:C6:11:B7:D9:7E:56:0C
            X509v3 Authority Key Identifier:
                keyid:6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c2:29:6b:3f:4b:98:c3:0a:43:a4:b6:3c:4c:68:0b:a5:a8:
         e0:22:2e:b6:a9:ca:2a:30:98:60:a5:e1:3b:20:85:d4:18:d1:
         0c:22:7d:a5:d2:43:0b:53:43:81:6d:f6:bc:fe:54:e1:f2:de:
         16:20:69:c9:a0:f4:d7:57:d9:49:a4:fb:2a:bf:1c:9b:45:52:
         db:8a:65:50:c7:d7:3f:e1:ef:33:43:89:67:f9:80:9d:30:b4:
         60:0b:43:18:7a:ae:a6:28:7e:ad:a5:7c:eb:16:92:c9:bf:98:
         d3:31:aa:9d:33:83:c6:10:12:5a:2e:1e:d5:ee:82:25:c2:5a:
         dc:f8:c6:50:dc:a5:0c:73:91:19:33:b7:fd:0f:9d:89:66:1d:
         7e:4e:f6:3c:8f:7c:f7:89:44:3e:1a:e1:ac:91:57:a8:56:da:
         5a:7b:2c:6c:e7:78:a8:ad:b8:33:72:4d:99:ad:40:68:c3:92:
         42:e2:d4:5c:27:55:b3:fb:7f:1d:92:45:c1:9e:f1:49:a0:e9:
         40:97:b7:06:26:4a:90:65:ff:ff:1a:b5:ac:6c:9c:73:6d:82:
         88:08:06:5f:c8:fd:e7:20:10:4c:06:19:5d:41:6f:65:bc:c7:
         4a:4f:a8:5e:e5:fc:63:17:fa:01:a5:29:7d:26:5c:77:8f:02:
         a2:90:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:56:37 2025 by rpki-client