This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
File:                     mBpus4OnlllRIB38cbLqDUSWGxQ.mft (raw, json)
Hash identifier:          BeuTMunP6vl6t0SeyW65PKFFiI0O/3LR6qwLfB0/VOo=
Subject key identifier:   78:C5:BC:E8:B6:D8:E6:AE:4D:0A:B7:C4:EB:CD:CB:5E:F6:95:FF:34
Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14
Certificate issuer:       /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
Certificate serial:       05C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
Manifest number:          05C1
Signing time:             Thu 18 Dec 2025 22:26:12 +0000
Manifest this update:     Thu 18 Dec 2025 22:26:12 +0000
Manifest next update:     Thu 25 Dec 2025 22:26:12 +0000
Files and hashes:         1: mBpus4OnlllRIB38cbLqDUSWGxQ.crl (hash: 9qrTszoDwJjroZFjJHC4bMizlQZsLx/J6auDGrRSCKU=)
                          2: B6FC3096EB1611EBB525CD6AC4F9AE02.roa (hash: 9s+ytbSfZP14tsCh3SQ3yDAVSot/0B8wxn8RGQZH8yM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl
                          rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110888, serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
        Validity
            Not Before: Dec 18 22:26:12 2025 GMT
            Not After : Dec 25 22:26:12 2025 GMT
        Subject: CN=69447f84-2668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:c3:75:0c:cb:22:cd:95:cd:3c:54:86:4d:
                    95:92:ea:68:69:43:8e:fb:e8:c6:8a:ef:fb:19:10:
                    d7:65:16:cf:1d:bd:52:5b:52:fc:da:1e:c8:d9:d0:
                    58:e2:06:69:63:47:f9:fb:ee:21:37:9f:07:30:14:
                    4c:c7:e4:20:50:f1:af:d2:91:47:c5:be:60:78:f2:
                    6d:89:56:3e:85:43:e5:f9:92:39:cc:91:7f:bb:08:
                    cf:f8:de:d8:af:31:35:19:b4:1d:3d:c7:08:e0:a4:
                    91:6a:32:63:af:42:f0:eb:3f:df:db:e8:89:a0:d2:
                    31:f7:06:db:36:98:bb:e5:6a:64:dc:ee:0d:ff:aa:
                    5e:fb:3b:e6:43:c9:e2:87:b9:b7:10:26:c8:07:f4:
                    95:8f:c2:75:50:0c:17:22:df:88:5e:96:e0:33:02:
                    03:09:06:8e:ac:9f:b2:14:9b:fb:e9:84:a1:b5:49:
                    6f:44:49:63:c7:65:a7:de:d5:24:26:07:b7:ce:2d:
                    ac:fa:e8:e8:4d:c3:ae:00:7b:13:ed:a3:d1:ea:9a:
                    af:83:e1:b1:3b:c2:74:a1:99:6f:c7:41:6f:b5:ab:
                    62:b8:c8:4c:2f:a9:8d:b1:c0:da:3d:e3:fa:b6:c4:
                    7d:0e:a6:94:3e:23:f3:80:a4:37:31:44:e6:90:d8:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C5:BC:E8:B6:D8:E6:AE:4D:0A:B7:C4:EB:CD:CB:5E:F6:95:FF:34
            X509v3 Authority Key Identifier:
                keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:35:a8:3c:f8:24:c7:49:a0:38:1b:90:cd:35:b1:65:7f:
         09:ec:4a:3c:9c:06:c0:cd:00:f2:b4:b8:c9:4c:41:05:4a:e9:
         87:e6:1a:24:c2:68:ff:61:11:97:3a:61:e3:d6:48:c0:ca:85:
         09:9a:f8:4c:af:6a:7e:06:02:ba:4c:c3:e4:b5:2e:a7:cb:9e:
         37:51:46:5d:15:8f:41:4f:57:1f:15:62:15:13:5c:34:73:e8:
         0f:99:0c:fb:aa:a4:7a:4e:27:83:0b:e7:a2:dd:88:de:38:5f:
         b5:12:42:d6:f9:86:7f:4b:76:57:e3:06:af:40:1d:bd:80:9e:
         5b:70:fe:0f:a7:12:13:3f:ff:33:be:11:53:f1:28:9f:3b:b7:
         18:e7:0e:e8:e4:0d:ba:60:8e:75:ec:6b:b7:f5:ea:2c:2b:0f:
         36:1e:11:40:99:bf:c5:e5:7b:ee:c7:94:a2:9f:ed:83:7c:7a:
         11:f9:1d:d0:16:79:1c:83:86:c2:47:39:ef:89:9e:2a:e4:16:
         13:fb:a9:3c:1b:e2:ec:83:ce:3a:58:68:d5:28:88:d6:07:b6:
         c2:6b:f3:19:7c:47:79:f7:b0:0d:cb:14:0d:46:a1:e1:23:a9:
         77:02:fe:11:d3:ce:1f:9b:9c:08:0b:44:a8:af:65:6b:7a:a1:
         b8:3c:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:39 2025 by rpki-client