This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
File:                     bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft (raw, json)
Hash identifier:          wXal1PYYBXiI5PeiyxMS3Q8JsQ2EXKIZMTJwG0LF9wo=
Subject key identifier:   E5:B1:03:15:E9:BC:F6:74:58:14:A1:10:E1:E9:32:AC:72:0B:C6:CE
Authority key identifier: 6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86
Certificate issuer:       /CN=A916103C/serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
Manifest number:          2F
Signing time:             Sun 21 Dec 2025 06:37:24 +0000
Manifest this update:     Sun 21 Dec 2025 06:37:24 +0000
Manifest next update:     Sun 28 Dec 2025 06:37:24 +0000
Files and hashes:         1: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl (hash: 9AgBWyVhO4a3thojhGANYz2t0rfKJetjKfgtbtjuNIA=)
                          2: 6F8F75C49A0811F0AB023487C4F9AE02.roa (hash: lUWsYl532wJJWUk+oUDmB7VdeqxtkYdMM4ni2vAOoF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl
                          rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 06:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916103C, serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
        Validity
            Not Before: Dec 21 06:37:24 2025 GMT
            Not After : Dec 28 06:37:24 2025 GMT
        Subject: CN=694795a4-7c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:b0:86:0e:71:11:6f:71:63:07:96:de:fc:
                    d1:38:bf:93:14:9a:27:5c:be:9c:1e:5f:16:45:f7:
                    df:40:74:c8:53:00:aa:7c:39:2f:d5:e2:8a:58:86:
                    df:33:79:48:9d:db:14:f0:4e:76:72:ac:85:60:07:
                    bc:a5:5d:c1:b5:11:2d:13:8d:56:18:1f:4b:5b:30:
                    da:8b:b9:67:e8:90:6e:36:b1:04:b1:24:52:74:32:
                    ad:ec:83:dc:20:1e:76:ff:2f:57:56:19:5c:61:c3:
                    e4:fc:0c:9b:14:a5:10:05:f5:0f:a9:6a:05:01:70:
                    62:47:88:af:36:27:48:8f:4a:e4:8a:f1:59:2d:13:
                    08:25:83:67:0f:17:2d:bc:f9:5c:64:b9:44:40:f1:
                    a4:48:a3:67:90:6c:ca:e3:b7:fa:2d:7b:b1:28:d7:
                    6f:a0:18:2a:81:cc:75:9f:0f:9c:c0:5c:6e:48:d3:
                    74:71:a9:99:d4:20:f0:34:34:38:5b:51:1b:3d:e4:
                    75:61:09:66:f0:72:92:31:63:a5:9b:da:cc:92:39:
                    b0:c2:53:a4:11:6a:f7:d0:80:5b:1e:18:91:8e:30:
                    ab:db:01:80:df:99:a8:f3:b9:92:38:fe:3d:62:a8:
                    9b:8a:f9:0e:9a:ef:dd:97:63:dd:03:70:0e:35:bc:
                    a6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B1:03:15:E9:BC:F6:74:58:14:A1:10:E1:E9:32:AC:72:0B:C6:CE
            X509v3 Authority Key Identifier:
                keyid:6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a6:d6:0d:5c:a0:82:88:6b:a1:f2:10:38:80:91:b8:f9:2e:
         25:c1:a9:48:56:10:46:33:38:1a:c2:8d:2b:14:3d:41:58:20:
         7b:9a:db:31:91:9b:7d:76:2f:24:82:86:90:08:ba:b9:03:27:
         11:73:58:e9:54:06:0d:c7:d4:2d:12:45:b4:b8:f1:66:18:ce:
         a0:69:3b:51:0a:2a:e9:7b:b3:15:bb:a0:1b:eb:df:39:c5:20:
         95:f9:ed:59:80:00:c8:0e:93:a1:28:b1:71:05:5d:f6:82:23:
         52:57:76:9e:e6:d3:7f:d1:df:8e:82:15:20:d2:58:d3:26:8b:
         2a:fc:90:28:44:e6:c6:39:f9:14:f8:24:26:3e:b5:8f:74:ea:
         26:33:b9:4b:20:41:67:ca:b6:4c:37:a1:29:b0:3d:84:80:b2:
         07:6b:6c:e9:fa:71:01:86:bc:dc:8a:54:d8:f5:d9:28:dd:08:
         95:ee:97:5d:b6:98:65:4a:fe:65:75:fa:dd:3b:f7:ed:9d:09:
         b3:77:c4:3b:bf:ac:8a:75:ec:96:cf:50:f2:1a:b1:93:85:a5:
         af:dd:08:7e:0a:5b:f4:f5:e6:53:f3:d3:ab:e4:81:2f:51:20:
         51:c2:44:60:de:33:e1:a3:a1:2c:50:53:ea:3d:09:0e:4b:e8:
         94:cb:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 16:00:40 2025 by rpki-client