This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
File:                     1bTWxIC76WuryHIkhQJdTEX-x4o.mft (raw, json)
Hash identifier:          k8v7oT6JxXbVJL2CgRNA3u7YLjwi14Bl3PnnCJaf4gY=
Subject key identifier:   49:58:1F:20:C4:00:B0:B5:72:7C:DF:0E:99:D0:55:9B:BA:B4:E9:F5
Authority key identifier: D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
Certificate issuer:       /CN=A91907D3/serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
Manifest number:          48
Signing time:             Wed 03 Dec 2025 05:37:51 +0000
Manifest this update:     Wed 03 Dec 2025 05:37:51 +0000
Manifest next update:     Wed 10 Dec 2025 05:37:51 +0000
Files and hashes:         1: 1bTWxIC76WuryHIkhQJdTEX-x4o.crl (hash: /5qVJUKFr9yb9a9/MRs0tfzQgvldV68IlV21myG0DQg=)
                          2: 38361A086DD311F08BB89272C4F9AE02.roa (hash: jze8pXPb+Ih57A9PJ1kUit8+mteLPMOuLcigHYQRgfs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl
                          rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 05:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91907D3, serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
        Validity
            Not Before: Dec  3 05:37:51 2025 GMT
            Not After : Dec 10 05:37:51 2025 GMT
        Subject: CN=692fccaf-8fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:5d:93:f2:35:80:96:18:31:68:e5:66:c9:
                    d9:39:13:28:69:d1:74:b0:dd:ff:60:e1:9b:d9:22:
                    73:90:ab:c5:d1:14:0d:a1:5b:85:41:ab:33:de:f2:
                    7f:d3:61:ce:cb:75:27:f9:dc:ec:b1:33:a2:38:2e:
                    a9:80:cb:bb:b7:46:27:41:52:c7:cd:98:8a:20:86:
                    d7:05:e4:1c:88:fa:a8:c1:1f:08:dc:4d:fd:8c:c9:
                    17:90:21:b7:03:3b:20:9a:05:9d:9b:73:12:bf:bf:
                    0f:a8:52:58:f3:7b:7d:cd:6b:1b:c5:4b:43:29:52:
                    03:eb:f0:a7:f3:39:3b:25:b8:0f:27:3b:21:b8:4e:
                    97:31:89:28:9d:66:9c:c5:20:4f:38:f0:e8:15:91:
                    b3:d1:e9:89:2c:d8:cb:64:19:51:da:82:3b:17:fc:
                    1c:8a:82:48:37:90:a0:36:b1:0b:9d:2b:c2:85:0c:
                    ea:66:6f:93:15:d9:7f:7c:64:04:02:10:57:0f:42:
                    1d:01:39:3b:a0:0e:eb:d4:b2:1d:03:26:eb:c3:b6:
                    c8:2d:67:7b:c1:04:0e:50:1d:74:1f:30:ef:ef:83:
                    08:4c:ab:32:af:29:88:93:95:80:7d:9f:ac:e9:32:
                    d1:71:28:21:4a:4c:f8:01:6e:fe:45:b7:36:3b:23:
                    90:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:58:1F:20:C4:00:B0:B5:72:7C:DF:0E:99:D0:55:9B:BA:B4:E9:F5
            X509v3 Authority Key Identifier:
                keyid:D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:70:64:81:38:f0:f8:97:1f:7b:15:4b:b9:e9:e7:37:7d:12:
         8a:76:69:47:20:39:2f:75:ea:f2:1d:fe:cb:5e:67:8d:30:65:
         9a:7c:7d:c2:ca:4c:4c:65:2a:a6:14:12:c7:89:2a:6b:51:73:
         23:ce:d9:2c:c1:a9:8f:88:b6:51:a5:2d:d9:6a:e5:67:5d:27:
         09:d1:85:59:a0:17:f9:d4:c2:c7:95:d2:17:a2:00:45:e5:fa:
         5a:fa:ed:24:3d:66:c3:37:7c:3c:c3:5b:f7:1a:a2:d9:87:61:
         cd:c4:91:72:79:94:27:ea:b2:02:73:0c:f0:b5:4a:fb:ab:ab:
         ba:eb:fd:f7:ec:58:61:62:5a:20:1c:0f:76:3e:5d:e2:6d:21:
         2d:7c:e5:3a:39:1b:1a:29:4e:8e:af:c3:e0:71:64:4a:7f:51:
         e4:9b:a7:f2:4d:e2:62:a2:eb:67:4b:f2:f9:7a:e5:e7:b8:19:
         aa:1b:be:16:83:d9:86:25:10:d6:b6:30:50:7c:ef:3a:65:2d:
         04:33:23:b5:17:55:d9:84:95:77:c0:81:b5:fb:75:84:87:40:
         a2:00:dc:f0:02:94:9d:55:db:34:4a:ea:fc:9b:34:1e:83:68:
         5e:9f:d8:fd:fd:ac:43:d8:5b:a2:de:05:0d:fa:c3:d1:a0:da:
         89:f6:40:ef
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MDdEMzExMC8GA1UEBRMoRDVCNEQ2QzQ4MEJCRTk2QkFCQzg3MjI0ODUwMjVENEM0
NUZFQzc4QTAeFw0yNTEyMDMwNTM3NTFaFw0yNTEyMTAwNTM3NTFaMBgxFjAUBgNV
BAMTDTY5MmZjY2FmLThmYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC79l2T8jWAlhgxaOVmydk5Eyhp0XSw3f9g4ZvZInOQq8XRFA2hW4VBqzPe8n/T
Yc7LdSf53OyxM6I4LqmAy7u3RidBUsfNmIoghtcF5ByI+qjBHwjcTf2MyReQIbcD
OyCaBZ2bcxK/vw+oUljze33NaxvFS0MpUgPr8KfzOTsluA8nOyG4TpcxiSidZpzF
IE848OgVkbPR6Yks2MtkGVHagjsX/ByKgkg3kKA2sQudK8KFDOpmb5MV2X98ZAQC
EFcPQh0BOTugDuvUsh0DJuvDtsgtZ3vBBA5QHXQfMO/vgwhMqzKvKYiTlYB9n6zp
MtFxKCFKTPgBbv5FtzY7I5DvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSVgfIMQA
sLVyfN8OmdBVm7q06fUwHwYDVR0jBBgwFoAU1bTWxIC76WuryHIkhQJdTEX+x4ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwN0QzLzM4RkIyMTVDNkM1
OTExRjBBMzg4NEU3QUM0RjlBRTAyLzFiVFd4SUM3Nld1cnlISWtoUUpkVEVYLXg0
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMWJUV3hJQzc2V3VyeUhJa2hRSmRURVgteDRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw
N0QzLzM4RkIyMTVDNkM1OTExRjBBMzg4NEU3QUM0RjlBRTAyLzFiVFd4SUM3Nld1
cnlISWtoUUpkVEVYLXg0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALVwZIE48PiXH3sVS7np5zd9Eop2aUcgOS916vId/steZ40wZZp8fcLK
TExlKqYUEseJKmtRcyPO2SzBqY+ItlGlLdlq5WddJwnRhVmgF/nUwseV0heiAEXl
+lr67SQ9ZsM3fDzDW/caotmHYc3EkXJ5lCfqsgJzDPC1Svurq7rr/ffsWGFiWiAc
D3Y+XeJtIS185To5GxopTo6vw+BxZEp/UeSbp/JN4mKi62dL8vl65ee4GaobvhaD
2YYlENa2MFB87zplLQQzI7UXVdmElXfAgbX7dYSHQKIA3PAClJ1V2zRK6vybNB6D
aF6f2P39rEPYW6LeBQ36w9Gg2on2QO8=
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:20 2025 by rpki-client