This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
File:                     bvj-zvM56m3paYzCxfWGRc9l794.mft (raw, json)
Hash identifier:          ChZZSd+lw6Sj/V5Ny03FlNu3+ijj2USA76/OBL9YJ48=
Subject key identifier:   81:32:97:7F:13:F0:14:36:7C:56:A9:A1:E5:5E:39:3C:66:B3:B1:BA
Authority key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Certificate issuer:       /CN=A9196F7C/serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
Manifest number:          22
Signing time:             Wed 03 Dec 2025 03:00:27 +0000
Manifest this update:     Wed 03 Dec 2025 03:00:26 +0000
Manifest next update:     Wed 10 Dec 2025 03:00:26 +0000
Files and hashes:         1: bvj-zvM56m3paYzCxfWGRc9l794.crl (hash: pdGYsNaj7JFMxj4GuES5krEljz5rQ6bu7cZ1O/txhJM=)
                          2: E047F204A4CC11F0AE32440DC4F9AE02.roa (hash: IbTCPbnBI2DL2kcBkW+LiJNqF8edylNBGRuBoI+lCNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
                          rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
        Validity
            Not Before: Dec  3 03:00:26 2025 GMT
            Not After : Dec 10 03:00:26 2025 GMT
        Subject: CN=692fa7cb-860d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:e4:c9:2b:7a:49:de:bb:bd:38:f9:31:d6:
                    f4:f5:31:25:45:0c:36:ad:54:90:90:ce:c8:74:bf:
                    8b:e2:1d:bb:17:2e:2d:e1:4d:be:12:37:65:b1:a1:
                    f7:63:8f:8d:2a:7d:62:71:fd:fe:70:d5:f4:86:ce:
                    f1:05:39:c8:c2:ff:b5:1d:1d:e4:93:b0:81:f4:c1:
                    43:be:2c:7d:08:ed:99:67:99:96:a8:00:75:ae:95:
                    e1:2f:2b:4b:35:00:97:73:e0:1c:01:05:20:b2:ed:
                    b3:97:14:6b:84:04:05:a5:2d:cc:97:16:3c:9e:b8:
                    1f:92:bd:bd:c0:e3:fe:d3:fa:6b:94:11:e0:36:e4:
                    a7:c2:0b:1f:32:ad:fc:22:73:e0:6a:03:f7:ba:3e:
                    50:ef:59:fd:f1:68:1d:ca:b2:0c:d3:df:7f:57:a5:
                    c0:15:8e:e2:37:66:4e:00:69:4b:16:5c:9a:38:39:
                    3b:d3:e3:ee:43:a3:53:e2:3f:c8:fc:b0:4d:59:13:
                    4c:4b:c9:0c:01:6f:1a:82:10:61:f1:e3:3e:e6:b1:
                    be:32:27:02:d6:84:51:61:05:5c:41:23:ed:6f:ea:
                    af:3b:bf:bf:ce:d5:19:ea:78:34:a5:90:5f:09:bc:
                    1a:b5:46:a4:32:03:e5:a2:bb:ce:4d:97:45:75:e6:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:32:97:7F:13:F0:14:36:7C:56:A9:A1:E5:5E:39:3C:66:B3:B1:BA
            X509v3 Authority Key Identifier:
                keyid:6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b5:71:b2:c2:3e:c3:3f:d7:40:89:6f:ca:f0:cb:e2:2d:2b:
         a0:ed:d2:b0:92:03:c1:16:c7:f8:2f:0b:69:72:63:7d:b9:61:
         b3:81:16:0d:8d:90:af:82:59:67:53:c7:d3:2d:e1:d9:79:b8:
         a1:82:8a:cd:4c:e5:6d:03:d0:ce:3c:2d:a5:16:a1:c0:f3:5a:
         69:71:0f:6f:2e:b8:7b:06:f3:1e:76:ab:76:b9:a2:a1:a3:62:
         8d:a9:be:4b:58:53:be:95:6b:dd:c9:9b:4b:05:79:bb:6b:9c:
         ad:0c:9e:89:2e:67:d0:ac:cc:85:8b:ed:da:32:65:f6:5a:92:
         fd:52:0b:f8:8f:b1:15:56:54:59:b4:39:2f:8a:03:29:ae:4f:
         7b:4a:89:1c:ea:77:53:4e:1c:d4:12:89:d8:87:59:90:81:4c:
         d7:8d:04:d5:36:92:36:44:0d:3a:a9:c4:1e:1f:ef:a2:d8:05:
         a5:41:b8:6a:03:32:14:4e:64:76:54:b0:df:63:33:83:88:60:
         5d:51:c5:da:1d:61:55:fa:c5:e9:86:c7:d7:9e:59:7b:cb:43:
         4e:b4:af:57:2c:73:be:bf:6c:b0:57:9f:51:2a:d5:9a:f1:49:
         8c:51:c3:77:eb:4b:15:62:1a:83:5e:0f:26:3d:82:f9:f3:2f:
         f9:20:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:19 2025 by rpki-client