This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
File:                     _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json)
Hash identifier:          p6AIeEg9jMQnn0kXkqr6w8rKQqAnTEIRIlQNmccyK2w=
Subject key identifier:   9E:BC:15:33:4D:33:AA:E0:D3:2D:B6:D9:39:A4:D8:84:94:1F:80:DF
Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
Certificate issuer:       /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Certificate serial:       3554
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
Manifest number:          351F
Signing time:             Wed 24 Dec 2025 14:36:24 +0000
Manifest this update:     Wed 24 Dec 2025 14:36:23 +0000
Manifest next update:     Wed 31 Dec 2025 14:36:23 +0000
Files and hashes:         1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: liVATKFTQqCddU1+yL/eOb+T+qNO0K0AVW+9wTKRcps=)
                          2: DA8A3692A59411F0BF072D6DC4F9AE02.roa (hash: pbD3JP/HzqcUzvlBhqeP9HbWOKNkQzUxda+U++yeQSw=)
                          3: F62323DEB97911F0A728D041C4F9AE02.roa (hash: J36yaV9S5VSb6XXTUej0Xefxo/5tW+QQLbzTSN8/VLo=)
                          4: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: 7R/SjQUQ2hP0HbRnbYfsLnedhLehfUDAaOiYlklNqvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
                          rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 14:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13652 (0x3554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
        Validity
            Not Before: Dec 24 14:36:23 2025 GMT
            Not After : Dec 31 14:36:23 2025 GMT
        Subject: CN=694bfa68-a972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:39:2a:1f:d0:c4:d1:8e:a8:d4:7b:a7:13:
                    b0:8e:9e:9f:32:81:59:8d:b4:15:50:20:d5:30:89:
                    df:e6:35:46:af:9b:05:52:30:ab:41:a7:c7:26:ec:
                    4a:6d:fb:7f:08:d4:69:66:6c:28:cf:12:a3:08:5f:
                    9b:78:a5:14:7c:e8:b4:9c:0d:6e:fe:f0:93:87:64:
                    77:08:57:c4:da:7d:64:57:0e:bf:4b:1e:8d:44:06:
                    f2:68:2a:36:5c:1d:06:7f:00:d4:63:89:d2:29:5d:
                    4c:4d:c3:39:84:2d:2d:2f:c3:7d:38:5c:8c:d6:3d:
                    bd:6d:37:f6:41:4c:56:22:5f:d5:e7:da:3b:43:4f:
                    af:54:15:57:fb:f6:dd:68:69:91:03:73:be:23:3b:
                    49:0f:ae:36:68:87:6f:0a:a5:78:f4:0a:06:75:0f:
                    45:a6:d0:e5:4d:f7:1b:69:24:5d:b6:61:a4:ac:83:
                    13:ea:62:fa:f8:22:b7:5c:98:73:d4:cc:0a:6a:65:
                    f8:50:b4:cb:32:36:d3:8b:d7:df:8b:60:50:9c:7b:
                    b9:0b:04:25:30:17:fb:45:22:a2:5d:44:e2:7f:9b:
                    25:ee:04:5f:45:b6:80:4e:bc:44:69:d4:c5:9f:2d:
                    a2:72:f7:4f:c9:71:88:29:03:5f:35:85:f5:44:39:
                    49:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BC:15:33:4D:33:AA:E0:D3:2D:B6:D9:39:A4:D8:84:94:1F:80:DF
            X509v3 Authority Key Identifier:
                keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7f:9f:6b:54:ac:d4:04:8a:ae:fb:9f:af:48:11:0b:c2:a2:
         5e:22:53:fc:17:f8:ce:54:07:86:3c:9d:e3:4e:81:43:69:0b:
         16:5e:b1:f4:db:98:c1:26:16:da:38:27:86:9b:e0:c6:44:11:
         41:c4:e7:b8:d2:aa:df:25:9f:c9:ec:f3:e5:1b:65:3b:5a:38:
         28:df:c1:b9:e8:2f:06:b0:35:c4:ee:6c:e5:b6:f5:db:55:e8:
         21:de:91:9b:c6:01:9b:d2:92:99:fd:b5:09:6f:1c:ae:4e:0b:
         33:74:10:47:76:46:63:12:b4:78:e3:73:b4:75:40:fd:64:e9:
         dc:8a:57:37:0e:46:e2:7a:4f:b4:c0:d3:c2:eb:66:fd:4e:20:
         74:0d:f3:22:73:b4:9c:8d:6f:5f:10:56:91:0e:e6:a3:5b:53:
         13:8b:98:52:83:9e:35:1e:bd:32:05:ee:67:df:6a:0c:d2:26:
         8c:62:8e:66:2e:a3:42:49:bc:84:65:71:e3:1d:8a:ee:1c:f6:
         5c:3c:8a:84:6c:a7:6f:88:73:cb:cd:cd:d4:91:1c:fd:f2:78:
         35:98:ee:c2:b6:03:ae:5e:b3:a4:45:2f:17:3a:ca:fb:dc:fe:
         43:cc:12:a3:bf:b3:97:82:33:e0:0b:6e:f6:1b:63:0d:b6:80:
         2c:e9:e6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 01:27:36 2025 by rpki-client