This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
File:                     bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json)
Hash identifier:          Bb9ly2OIPP9/STIAD5+P4ZKHdVArMXd37SzZVt3S+JU=
Subject key identifier:   E8:95:F9:23:C7:9B:14:38:C8:3B:07:A1:78:25:7C:B9:32:87:2C:41
Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
Certificate issuer:       /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Certificate serial:       0549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
Manifest number:          0544
Signing time:             Thu 18 Dec 2025 22:47:25 +0000
Manifest this update:     Thu 18 Dec 2025 22:47:24 +0000
Manifest next update:     Thu 25 Dec 2025 22:47:24 +0000
Files and hashes:         1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: FXAx+MirpEDP+61jbVdTnIk/Tf+YEpMoiN6FKjhfkFg=)
                          2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: VqWOdJpzHU4g7FfrJlbFpwfob9hyB+C2diH5Mhn8hxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
                          rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
        Validity
            Not Before: Dec 18 22:47:24 2025 GMT
            Not After : Dec 25 22:47:24 2025 GMT
        Subject: CN=6944847d-284e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:bf:ac:7d:47:49:3e:ea:60:76:7b:f7:f4:
                    4b:bb:92:98:db:43:ca:2d:86:26:08:05:95:be:f7:
                    62:70:ca:e5:b8:59:f0:5a:6f:8e:c9:78:51:68:a6:
                    59:d6:c1:5c:2c:b2:e1:cb:92:19:f9:5f:fd:1b:db:
                    1b:46:32:5e:9c:e8:84:25:fc:59:48:b0:19:ff:af:
                    b2:61:9b:ba:a1:30:8d:19:cd:b5:ee:e2:98:59:0e:
                    2a:c1:65:6a:d2:ac:d0:39:ad:16:17:8a:77:af:ed:
                    0d:01:13:92:21:80:28:80:9a:22:19:23:10:40:64:
                    fd:42:ab:46:a5:69:d8:20:af:47:6e:b2:d9:56:2d:
                    f8:77:9c:2d:e9:92:33:a1:03:f5:5d:fe:a9:8d:e9:
                    78:bc:a7:7b:ef:cf:45:3c:3f:15:df:e0:de:65:c4:
                    74:ec:ba:2c:13:cc:1e:07:23:12:d9:d6:ff:2d:36:
                    08:fa:b3:7b:73:0b:59:3e:e6:b2:15:cb:b1:3b:fd:
                    75:98:bd:5c:b4:d1:6d:37:fe:04:01:4e:87:99:e2:
                    7b:b2:30:f4:1d:08:cb:5c:4f:46:1b:a5:67:03:18:
                    59:7a:15:ca:d0:6d:68:f5:75:70:9f:b2:4f:6b:d1:
                    43:fc:24:66:60:36:77:b3:bf:84:72:6b:6c:e2:79:
                    24:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:95:F9:23:C7:9B:14:38:C8:3B:07:A1:78:25:7C:B9:32:87:2C:41
            X509v3 Authority Key Identifier:
                keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:39:dc:e0:13:50:14:56:ae:21:32:69:cd:5c:c3:6e:85:4f:
         04:40:6c:a1:fd:2b:df:6e:00:3e:ce:3d:ab:ff:cc:14:ad:0d:
         19:97:ee:f8:c6:ab:b3:c4:f1:c9:c1:1f:c1:b1:4a:30:d1:51:
         05:be:32:5b:d5:75:ae:f1:c0:34:03:bf:42:5e:78:30:44:54:
         98:2d:ba:e2:a6:83:e5:14:68:3b:3c:ba:53:d0:b7:f0:38:e4:
         13:67:9e:41:b8:a8:f7:87:bb:66:c4:38:2a:0a:6b:3c:b5:b0:
         ad:00:e7:e8:c6:c1:de:f4:73:09:4f:d8:3b:ed:e1:c8:8c:4e:
         5c:fb:d1:83:24:23:28:5e:30:42:58:2b:b5:83:59:b8:4c:39:
         d9:1b:67:72:7f:21:41:ec:81:2a:93:b0:3a:89:31:e7:1a:2d:
         ff:49:a3:93:6a:fa:50:81:59:c0:e8:18:d9:53:6e:ce:a0:5d:
         3c:1e:4a:fd:eb:e6:4f:c1:cb:5b:8d:1b:b1:8d:e7:21:8e:4f:
         b2:15:ca:0b:58:b4:34:82:66:61:7f:97:6a:6e:bf:10:41:39:
         d8:22:c5:78:ef:77:cd:8e:68:f3:d4:88:af:f5:4c:cf:b9:40:
         a1:ad:98:14:eb:2c:21:bb:dc:98:22:67:64:0f:4b:14:90:f4:
         c4:81:95:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:43:26 2025 by rpki-client