This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
File:                     BWvvRscxWDfrrepBeAueQaP7fqA.mft (raw, json)
Hash identifier:          hISbuAXgLdpMmT7Da0shvDBt2nKtrRjn2U/z/qHBVVo=
Subject key identifier:   BD:C8:2C:F4:24:A6:7A:5C:97:11:4A:1B:75:E4:52:80:B1:78:35:7A
Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0
Certificate issuer:       /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
Certificate serial:       02DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
Manifest number:          02DA
Signing time:             Fri 19 Dec 2025 00:33:53 +0000
Manifest this update:     Fri 19 Dec 2025 00:33:52 +0000
Manifest next update:     Fri 26 Dec 2025 00:33:52 +0000
Files and hashes:         1: BWvvRscxWDfrrepBeAueQaP7fqA.crl (hash: mhVWGLkP91Xu0bcH+U69WtEf3CcEHwvLsSE/kpyAzGg=)
                          2: 207B27560EE411EDA32ABE0FC4F9AE02.roa (hash: 6uwFx8/ukSzKKH+6QOFIRRiywJ0AdBaXItyBqWPv0ck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl
                          rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734 (0x2de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912391D, serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
        Validity
            Not Before: Dec 19 00:33:52 2025 GMT
            Not After : Dec 26 00:33:52 2025 GMT
        Subject: CN=69449d71-ab5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b3:9d:cf:5d:b6:95:db:6c:1d:c8:d0:6b:ff:
                    2f:c8:53:56:fd:7e:d4:75:43:d7:a7:e4:08:db:bb:
                    42:40:5e:36:4e:aa:9a:aa:bc:2d:5d:bd:e8:41:df:
                    a7:23:72:2d:40:9a:e7:70:be:e2:a3:c8:5b:3c:de:
                    04:f2:ca:0a:0f:ec:92:79:d0:97:b0:9e:7b:31:db:
                    b6:6d:fc:f3:4c:01:50:7b:b4:b0:95:46:5f:05:5f:
                    cb:1e:8f:ed:1e:bd:1d:12:f8:35:19:49:0d:83:bc:
                    ce:e7:2e:5b:be:08:6b:a6:ed:b0:27:35:be:1f:8c:
                    ab:1e:72:6a:94:2d:fb:09:94:af:c8:50:33:32:76:
                    29:86:c2:d1:84:ac:86:74:c1:01:6a:3e:1b:14:15:
                    11:32:53:d7:0d:0b:12:e0:ac:61:49:2b:85:ec:c5:
                    4f:19:00:03:4f:d8:c5:b8:85:6b:1b:59:ef:de:1c:
                    13:41:21:92:93:d2:00:84:69:bb:ab:0b:80:a3:7e:
                    62:bf:7f:6c:cb:9c:eb:c9:68:14:35:06:df:18:48:
                    34:6b:48:e9:db:48:7e:16:7a:47:e2:2c:5f:a7:06:
                    a5:0a:7a:61:81:9b:9e:24:c7:20:17:84:3a:9a:e4:
                    8c:19:6e:e7:27:10:67:7c:81:0e:06:d2:70:3d:d0:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C8:2C:F4:24:A6:7A:5C:97:11:4A:1B:75:E4:52:80:B1:78:35:7A
            X509v3 Authority Key Identifier:
                keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1f:36:98:8d:94:04:3e:7f:dd:06:19:e1:92:ae:22:e6:7e:
         77:b9:81:62:d3:e1:7f:aa:95:8a:9f:cb:4a:57:fd:f8:29:2f:
         36:c1:c8:d0:94:47:42:3d:7f:8c:62:55:b1:b6:8b:90:1a:85:
         bf:8f:a4:9e:d1:d6:8a:32:f4:8b:2c:96:3e:f5:c5:cc:95:5d:
         d9:bb:a7:a0:e5:65:ff:55:71:0e:af:4f:40:37:7f:bb:bc:18:
         67:03:bc:8c:b4:5f:a2:af:05:3b:9c:86:3b:8e:b6:de:ef:eb:
         d9:4f:9e:82:96:ea:42:cc:71:ab:87:71:7a:93:08:d1:60:e3:
         81:56:ce:34:2f:d7:d2:2b:33:1a:65:60:5e:45:a6:3b:3f:75:
         37:b4:15:c0:b4:bc:15:59:ba:a3:80:89:6a:37:37:35:ff:d2:
         9e:b8:6a:86:ce:af:b8:d0:a8:23:23:03:60:04:1e:a4:6a:6e:
         b0:41:9b:b8:84:28:fb:cc:c0:e1:1b:c4:77:89:82:de:05:46:
         57:38:4d:28:47:ed:49:70:17:54:eb:4e:30:44:b8:fe:04:0d:
         31:3a:9d:4f:20:7a:94:2b:e8:35:b9:3d:44:a6:ee:ad:60:a5:
         4a:5b:42:61:d4:46:79:d5:7b:91:e3:61:8f:4e:03:dc:5f:c9:
         7e:11:06:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:12 2025 by rpki-client