This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
File:                     b-jBYY_6_7LM_1aejqkV2vpNTjY.mft (raw, json)
Hash identifier:          7vaI7gasAVOIcHeEALBVvTbUUqa2nGz5Daty7wovwWE=
Subject key identifier:   1C:4E:08:64:D7:94:14:B1:4C:29:8D:A6:95:B4:73:1A:C6:D4:D7:F6
Authority key identifier: 6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36
Certificate issuer:       /CN=A91232C2/serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
Manifest number:          0143
Signing time:             Mon 29 Dec 2025 03:27:07 +0000
Manifest this update:     Mon 29 Dec 2025 03:27:07 +0000
Manifest next update:     Mon 05 Jan 2026 03:27:07 +0000
Files and hashes:         1: b-jBYY_6_7LM_1aejqkV2vpNTjY.crl (hash: Gf9gYJc4lQX3kn6lOCwIbmaTuC4muKeEMy3wEjkndYY=)
                          2: 85035A64F0CD11EE8CC1FC16C4F9AE02.roa (hash: 9ZKq+nwt9P9nCI+BvZS/E6A1E5sodaBd/S4ZxhUXp0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl
                          rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 03:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91232C2, serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36
        Validity
            Not Before: Dec 29 03:27:07 2025 GMT
            Not After : Jan  5 03:27:07 2026 GMT
        Subject: CN=6951f50b-1141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cb:36:99:2b:6c:2c:31:ad:6e:b2:11:36:51:
                    0f:65:c3:b7:6b:19:81:61:3b:8f:65:76:88:c4:48:
                    d3:c3:38:f1:86:bf:9e:07:51:91:71:5a:24:f0:df:
                    20:1e:f8:7b:ce:ed:7c:a0:c3:44:fb:1d:08:d6:f1:
                    92:45:ab:92:d0:32:46:30:bc:2a:f8:6b:e2:2b:31:
                    d8:bc:02:c9:04:1b:11:ed:2f:8f:da:6b:1c:bd:94:
                    10:25:ed:d6:7c:60:5a:26:53:a2:55:54:f1:88:02:
                    ff:72:f1:64:db:53:35:e0:36:a8:53:75:e1:67:06:
                    da:71:e4:e0:74:a4:59:a6:a6:70:6d:66:a9:55:02:
                    7e:9d:b6:10:da:99:5d:48:a6:e0:14:eb:e7:6e:7f:
                    cc:a1:5a:06:7d:cb:a8:25:27:f8:09:98:7a:42:f1:
                    65:f5:3e:b8:9f:62:10:1f:47:f3:8f:52:39:98:c2:
                    2c:b0:57:a6:8b:bc:be:4a:58:98:a6:84:b8:c5:e0:
                    b2:ed:ef:2e:e9:a0:68:c0:d6:0f:4d:5a:5e:09:9c:
                    38:f9:aa:ac:7d:53:ca:ed:5f:b4:07:59:4e:dd:de:
                    7c:4f:23:5f:6d:af:6a:14:87:77:76:03:c8:d1:98:
                    67:59:27:89:78:59:7d:2f:92:b5:41:c7:d3:4f:51:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4E:08:64:D7:94:14:B1:4C:29:8D:A6:95:B4:73:1A:C6:D4:D7:F6
            X509v3 Authority Key Identifier:
                keyid:6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:eb:2c:6d:92:a1:48:ec:d9:7e:5b:67:dc:20:eb:32:d7:3a:
         88:2e:e2:77:84:1b:3d:a8:6d:f3:4d:c6:cb:9a:54:54:d0:40:
         d5:54:e3:56:7b:ce:e7:7c:0d:8f:10:a7:bd:20:5f:ed:8c:a1:
         cb:9c:8d:be:99:1d:2c:32:6e:13:1c:80:85:28:9c:c1:b2:59:
         bd:b9:f8:47:cb:d3:55:3d:fc:b7:63:f8:5f:e6:8a:8c:e0:a2:
         28:95:20:34:8d:1a:77:39:e7:74:39:68:2b:29:7d:b5:d4:cb:
         48:5e:75:85:94:f3:2d:15:72:ca:a2:c2:62:7c:ee:85:b5:c7:
         d1:16:ca:99:f9:3a:f3:67:ec:b1:50:58:bd:a8:dc:eb:ea:d4:
         8b:2a:7a:42:b2:11:fb:e2:77:19:34:51:16:98:17:44:e7:d1:
         75:64:e9:64:2f:48:20:36:3b:9c:48:3c:a0:df:3e:2f:b4:46:
         2f:9d:fd:6f:a2:b9:33:f8:4e:c0:f4:bb:ab:2d:51:a0:4e:cf:
         5c:5e:29:18:ea:7c:39:cc:f2:7f:97:46:0f:60:49:df:df:c5:
         e9:ef:df:68:50:a5:6d:df:4a:5a:33:a6:ea:7e:50:6c:ac:65:
         75:0b:73:b8:95:50:6b:5a:10:3d:75:49:34:6f:dd:14:8f:8a:
         18:6b:be:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMyQzIxMTAvBgNVBAUTKDZGRThDMTYxOEZGQUZGQjJDQ0ZGNTY5RThFQTkxNURB
RkE0RDRFMzYwHhcNMjUxMjI5MDMyNzA3WhcNMjYwMTA1MDMyNzA3WjAYMRYwFAYD
VQQDDA02OTUxZjUwYi0xMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4cs2mStsLDGtbrIRNlEPZcO3axmBYTuPZXaIxEjTwzjxhr+eB1GRcVok8N8g
Hvh7zu18oMNE+x0I1vGSRauS0DJGMLwq+GviKzHYvALJBBsR7S+P2mscvZQQJe3W
fGBaJlOiVVTxiAL/cvFk21M14DaoU3XhZwbaceTgdKRZpqZwbWapVQJ+nbYQ2pld
SKbgFOvnbn/MoVoGfcuoJSf4CZh6QvFl9T64n2IQH0fzj1I5mMIssFemi7y+SliY
poS4xeCy7e8u6aBowNYPTVpeCZw4+aqsfVPK7V+0B1lO3d58TyNfba9qFId3dgPI
0ZhnWSeJeFl9L5K1QcfTT1HsdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxOCGTX
lBSxTCmNppW0cxrG1Nf2MB8GA1UdIwQYMBaAFG/owWGP+v+yzP9Wno6pFdr6TU42
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzJDMi8xRTdGRkY5QUYw
Q0QxMUVFODgxRDNDMTZDNEY5QUUwMi9iLWpCWVlfNl83TE1fMWFlanFrVjJ2cE5U
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ItakJZWV82XzdMTV8xYWVqcWtWMnZwTlRqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzJDMi8xRTdGRkY5QUYwQ0QxMUVFODgxRDNDMTZDNEY5QUUwMi9iLWpCWVlfNl83
TE1fMWFlanFrVjJ2cE5UalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB36yxtkqFI7Nl+W2fcIOsy1zqILuJ3hBs9qG3zTcbLmlRU0EDVVONW
e87nfA2PEKe9IF/tjKHLnI2+mR0sMm4THICFKJzBslm9ufhHy9NVPfy3Y/hf5oqM
4KIolSA0jRp3Oed0OWgrKX211MtIXnWFlPMtFXLKosJifO6FtcfRFsqZ+TrzZ+yx
UFi9qNzr6tSLKnpCshH74ncZNFEWmBdE59F1ZOlkL0ggNjucSDyg3z4vtEYvnf1v
orkz+E7A9LurLVGgTs9cXikY6nw5zPJ/l0YPYEnf38Xp799oUKVt30paM6bqflBs
rGV1C3O4lVBrWhA9dUk0b90Uj4oYa77Y
-----END CERTIFICATE-----
Generated at Mon Dec 29 14:58:10 2025 by rpki-client