This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
File:                     bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json)
Hash identifier:          aEKADc9vFE+9PAaBiDOzPSG/7ZXCOy0N+jLN339346s=
Subject key identifier:   0F:5D:6C:94:46:BD:ED:99:96:D0:8C:DF:9A:82:1E:3F:B5:F5:53:22
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Certificate issuer:       /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial:       13F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
Manifest number:          13CE
Signing time:             Mon 22 Dec 2025 16:41:21 +0000
Manifest this update:     Mon 22 Dec 2025 16:41:21 +0000
Manifest next update:     Mon 29 Dec 2025 16:41:21 +0000
Files and hashes:         1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: t+8WDEZnDvvWrhQLWMGaKo7PuhxLmMef3GYFudg1RaI=)
                          2: 872698A8041B11F0A98AFA39C4F9AE02.roa (hash: UjuTxiRAP/X58Z72XiuqvHNz63YuSaMMCGvUPVkyPaA=)
                          3: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (hash: DcZGy4PWZzTwOUNtpL1rLlMb1gqaFihjq3bAlb0Tfo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
                          rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 16:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5113 (0x13f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
        Validity
            Not Before: Dec 22 16:41:21 2025 GMT
            Not After : Dec 29 16:41:21 2025 GMT
        Subject: CN=694974b1-d67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:1f:09:16:84:fd:d0:bd:7f:68:15:a2:a2:
                    ec:e4:ae:b3:e9:3d:66:32:e4:bb:65:f8:e5:e4:bf:
                    7a:f1:63:0c:13:d2:1f:04:93:28:bc:31:b0:38:b8:
                    d1:39:30:c2:b9:1c:3b:3d:64:4e:0d:c3:6b:33:16:
                    29:2a:70:4d:8d:d9:47:fe:20:8e:c7:3e:c6:9b:f4:
                    e6:da:29:a2:ad:69:23:4a:7d:f6:54:ff:ae:cd:ae:
                    7e:83:3b:83:7d:36:bc:52:b0:46:2d:fb:20:3f:a2:
                    3b:b1:a0:f0:e1:24:55:86:54:51:9d:ca:77:1f:6a:
                    0a:54:8d:38:21:fb:72:cf:c7:70:fd:5e:f9:b7:e0:
                    80:65:fe:e2:81:cc:fc:17:57:18:32:ab:a2:87:93:
                    36:1c:10:44:f4:24:55:8c:59:4a:34:d8:69:4b:ce:
                    ec:87:0e:9c:6d:f9:17:9a:60:38:5d:2b:93:5b:d5:
                    bf:15:a1:ae:ea:03:2b:f3:05:54:08:93:64:86:89:
                    af:43:0e:51:98:6d:94:16:26:dc:ea:36:47:56:84:
                    b7:c0:6a:23:44:15:3d:09:af:07:94:ec:4b:a9:44:
                    25:fb:aa:87:af:a3:e2:a9:75:73:c2:b4:f3:1b:b1:
                    cb:6e:63:f9:7f:8c:3f:09:de:90:e4:96:34:d5:c0:
                    47:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5D:6C:94:46:BD:ED:99:96:D0:8C:DF:9A:82:1E:3F:B5:F5:53:22
            X509v3 Authority Key Identifier:
                keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:47:84:2b:05:bf:6a:11:2a:90:a9:c1:6e:d4:ac:78:ac:e2:
         40:b2:9e:e7:e3:bc:09:a2:dd:98:32:11:52:2c:ba:4c:ac:c8:
         ea:61:6d:56:69:79:fe:58:79:dc:35:8f:8a:d7:90:0a:e6:42:
         46:fb:98:53:a6:b7:fd:f4:41:d4:13:30:9e:87:9c:fd:61:61:
         c7:a3:98:5d:ce:67:34:25:06:5b:34:c8:5e:13:b1:55:3d:98:
         b1:59:6c:ce:dd:83:e2:fc:a6:50:0e:f6:1b:dc:df:5f:b7:05:
         5d:ca:21:3e:b5:cc:5c:36:3e:6d:04:bf:cf:55:c8:16:a8:50:
         1a:85:ab:5a:90:e5:fe:5e:62:51:d2:04:65:44:47:15:47:fe:
         fe:06:23:c1:8e:a5:ea:74:a0:98:7e:e7:a1:a9:b5:9e:2d:bd:
         2d:6d:41:69:e0:54:62:7d:0d:aa:3c:89:e3:d7:d2:6f:c7:35:
         f8:27:91:92:e1:c3:fe:6b:ff:aa:b2:da:98:1f:5a:71:36:1c:
         c1:3e:92:dd:05:c7:04:be:7c:98:5b:4b:17:44:02:9f:ee:11:
         e3:3f:63:26:47:6e:c7:5c:d5:e9:cc:63:23:b6:b0:0e:57:ef:
         d7:3b:1c:70:ed:69:08:71:9a:01:8d:35:0f:95:e7:de:ba:a8:
         71:5d:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:12:19 2025 by rpki-client