This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
File:                     bjpCzSsjnaPmWO-5fq0VsObt2qE.mft (raw, json)
Hash identifier:          Ogv5fyR/Lo1z7YtsfNWkpqbkt5fabtYeox12/aXyQAU=
Subject key identifier:   C4:E8:C6:85:51:E8:70:B7:D7:18:02:7B:80:9D:D0:15:B2:75:4C:FB
Authority key identifier: 6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
Certificate issuer:       /CN=A914AA58/serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Certificate serial:       03DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
Manifest number:          03D9
Signing time:             Thu 18 Dec 2025 23:51:10 +0000
Manifest this update:     Thu 18 Dec 2025 23:51:09 +0000
Manifest next update:     Thu 25 Dec 2025 23:51:09 +0000
Files and hashes:         1: bjpCzSsjnaPmWO-5fq0VsObt2qE.crl (hash: b+RjvadgbMNDmAzPAxt0nSqeT2Lgx77Yp6OTBpDQHcI=)
                          2: CC2E531EAA7811ECB6791A3EC4F9AE02.roa (hash: Mqskw9Y8RqndiVtB/sczxL2ZoSm43CtM51EkD9hWUXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
                          rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AA58, serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
        Validity
            Not Before: Dec 18 23:51:09 2025 GMT
            Not After : Dec 25 23:51:09 2025 GMT
        Subject: CN=6944936e-1596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:39:ec:fa:24:e5:77:6e:b7:3c:b4:97:f5:
                    db:f2:b2:e7:d6:1e:02:64:8f:75:10:5b:79:58:99:
                    52:62:8f:b0:a0:98:2e:9b:3a:5e:73:1c:71:59:f8:
                    5c:16:71:5f:0e:e2:6f:c7:b8:e6:b6:8a:1e:5a:f7:
                    f0:3f:32:fb:aa:0f:14:9c:c0:b8:bb:46:61:0d:0c:
                    98:1c:c4:8c:71:04:59:64:a9:46:33:44:1e:2b:ed:
                    07:14:ec:7d:a5:4b:89:df:b4:26:ac:ad:d5:19:30:
                    9b:ff:f0:49:5c:0f:ed:1f:83:05:9c:70:52:c3:e3:
                    57:90:9a:6d:d6:14:38:73:0c:52:98:46:d2:3a:26:
                    4f:0e:a7:7d:83:f7:77:4e:b0:f4:9c:f3:49:4d:ab:
                    54:70:95:42:89:77:fe:46:55:29:02:64:64:cb:20:
                    ed:3e:3c:95:a2:e3:bc:92:3f:7d:80:5a:59:c5:65:
                    c4:5f:b7:06:a0:01:4e:a8:b2:44:9c:94:c2:f8:5f:
                    6c:4f:2b:1c:9d:ad:03:7f:4d:9b:68:5b:3a:3c:16:
                    e7:fb:7a:c2:5f:f3:4a:df:1c:6e:0c:7d:f1:e8:03:
                    57:df:4b:78:ce:4b:c6:90:f5:0b:98:27:fa:5e:cd:
                    37:29:de:cb:de:c8:cc:8e:a4:1b:3d:40:a8:3c:37:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E8:C6:85:51:E8:70:B7:D7:18:02:7B:80:9D:D0:15:B2:75:4C:FB
            X509v3 Authority Key Identifier:
                keyid:6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:51:a1:ca:b6:5c:41:55:ac:ce:2b:97:8e:4e:0e:e9:e7:
         8d:87:50:17:2e:8c:5f:cc:8e:85:e7:72:8d:ad:66:4b:d0:8e:
         56:f1:ae:fa:09:fd:be:3f:aa:a1:50:07:9c:63:e2:69:be:7c:
         c2:44:18:03:a4:5c:c7:58:b7:73:1d:18:82:1f:20:5b:c2:ce:
         99:1f:c2:90:3c:1c:3e:d3:27:e0:43:49:7d:06:fd:ed:53:cb:
         51:02:0d:fc:85:80:b5:bb:8a:4d:0c:ed:db:34:5f:eb:22:ee:
         0f:98:43:50:69:95:47:77:4e:93:24:51:95:43:80:f0:fb:af:
         24:98:f5:c2:97:92:45:aa:03:5e:67:3f:90:69:1c:c2:9c:a5:
         e5:e5:cd:54:8a:d2:7a:43:3c:f9:28:73:61:3a:52:a5:01:10:
         03:2f:a8:d9:15:ec:42:31:f6:6e:ea:df:67:a5:5a:f5:93:9a:
         2c:cf:fc:0d:c0:03:ff:dd:25:4c:a7:61:a4:bc:70:4f:e6:5c:
         25:c6:02:73:cc:10:5f:23:1d:8a:66:99:27:2e:c9:02:26:45:
         df:84:11:8d:d2:96:bc:03:e8:a1:1c:e1:c3:7c:4f:46:29:a9:
         49:6f:da:6e:b3:55:1a:63:46:e9:96:a3:83:0c:c1:77:77:47:
         1f:de:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:40 2025 by rpki-client