This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
File:                     bP1Wp36tnhWbyxjrbehic1CRtUo.mft (raw, json)
Hash identifier:          hFkT8/nca4YC3rmM81OJt7RTm6DjCJwhaS8h+E3y8Es=
Subject key identifier:   C4:68:D8:28:98:6E:E9:73:0E:EE:57:17:60:90:23:9F:5C:6A:34:45
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       19D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
Manifest number:          1982
Signing time:             Thu 18 Dec 2025 16:19:16 +0000
Manifest this update:     Thu 18 Dec 2025 16:19:15 +0000
Manifest next update:     Thu 25 Dec 2025 16:19:15 +0000
Files and hashes:         1: bP1Wp36tnhWbyxjrbehic1CRtUo.crl (hash: JM5haNYOGmG3YrGwrU7CXW6d6MhNDyWTC8wtN4ZyHnA=)
                          2: 4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (hash: dceLhAn5ElbChEaUwf/DaqfinbRbtnjApELgjG/plvw=)
                          3: 682214D6505711F08AA6EA60C4F9AE02.roa (hash: GMifjOan9zjfGsumgJ0TL9VR/xphZ6U6tm6+SoHoHZc=)
                          4: 7AF2C29C50C811F09EF54B31C4F9AE02.roa (hash: jG3cUbtm554H7AD3dhUJ+NzhtzlcaiTkqkxRj23wG2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6614 (0x19d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Dec 18 16:19:15 2025 GMT
            Not After : Dec 25 16:19:15 2025 GMT
        Subject: CN=69442983-2b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:34:e7:93:0c:e6:be:36:57:27:a1:1a:47:
                    aa:c1:75:b4:09:81:d3:8f:03:82:d1:7a:cc:e7:11:
                    75:b6:ab:62:02:c1:5f:8a:25:ee:6c:f0:6a:9d:bc:
                    d3:4e:94:8e:9d:d4:ca:c9:53:d8:f5:44:5b:91:08:
                    8c:f7:e3:b6:94:92:01:0e:38:35:01:dc:47:a7:2e:
                    24:e0:b5:41:90:d5:11:d5:a8:97:f5:86:5a:ee:2e:
                    e2:8c:10:18:b6:87:1d:4b:93:bb:14:84:9c:33:75:
                    d1:59:86:8d:50:c4:7a:71:cf:ab:7e:0c:2a:30:df:
                    fe:5b:2f:8c:28:da:33:0f:2c:3b:d8:f4:4b:82:c3:
                    30:91:64:f1:81:7b:da:16:97:bb:3a:f1:62:a9:ab:
                    fc:ff:e2:69:b4:02:cd:05:aa:f8:fc:2e:bc:b0:b4:
                    78:0d:ae:4e:3a:c6:88:78:43:45:b8:50:23:78:09:
                    4f:44:97:18:18:2d:fe:e4:4b:83:f1:16:6e:65:bf:
                    be:e3:6c:50:01:45:81:62:a1:ff:20:55:e3:63:46:
                    f5:24:be:e7:b2:a3:1a:90:6d:28:07:49:39:5c:b5:
                    08:de:74:e1:7e:8a:5b:ee:f5:23:b2:e0:ef:8e:6b:
                    b7:83:15:22:f9:47:6a:ea:1e:b4:c4:a2:75:40:a0:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:68:D8:28:98:6E:E9:73:0E:EE:57:17:60:90:23:9F:5C:6A:34:45
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:ec:71:a4:9d:98:56:31:39:ff:cd:fb:81:4f:97:6f:c4:1c:
         f1:f8:2a:d8:4c:29:f2:a1:44:8c:e9:33:58:5d:70:6d:d1:38:
         ea:a8:80:32:7b:f2:1d:5c:1c:6e:04:11:dc:d7:f7:61:e8:92:
         f9:12:40:1c:3d:cb:e6:9d:f3:51:e5:7a:2c:07:87:b4:c9:dc:
         79:f6:e5:a7:fb:2c:b1:80:c5:32:c4:01:ff:25:33:0c:bc:61:
         8c:11:d8:44:74:d4:91:ff:fb:66:ae:b9:fb:18:81:80:20:e9:
         0f:b4:b2:84:43:c9:a7:8a:c2:d7:b4:da:a3:34:ae:79:e3:c9:
         07:ff:c3:94:08:06:0b:ff:6c:57:2a:cc:6b:e2:d7:9d:c6:b7:
         6f:48:80:af:8c:31:68:4e:a1:3d:70:cf:60:9d:1d:a8:ae:fb:
         f9:ae:f7:58:55:55:ee:b9:82:ee:44:f2:4a:4a:d3:07:bb:35:
         59:5b:23:a7:54:49:b3:6e:b0:70:32:61:5e:d3:79:af:3c:a9:
         97:ca:03:b3:d6:78:a1:b4:16:31:14:57:37:ae:6a:7b:bd:92:
         c1:69:af:c0:23:7f:b6:30:52:4e:c6:a3:30:75:84:e1:0d:2c:
         a2:6f:87:ef:e1:e3:c0:fc:cc:ed:dc:77:f9:7e:55:a3:35:d4:
         70:f9:71:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:39:13 2025 by rpki-client