This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
File:                     bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft (raw, json)
Hash identifier:          +8jpOwDEH9Y4INUGiGsRBDwVsDwj7TGY8xlJf5kWlaw=
Subject key identifier:   71:1D:CE:63:3A:74:38:CC:05:62:FD:7A:24:98:B5:93:FC:2E:BD:75
Authority key identifier: 6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05
Certificate issuer:       /CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505
Certificate serial:       187F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
Manifest number:          1876
Signing time:             Fri 26 Dec 2025 16:15:19 +0000
Manifest this update:     Fri 26 Dec 2025 16:15:19 +0000
Manifest next update:     Fri 02 Jan 2026 16:15:19 +0000
Files and hashes:         1: bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl (hash: DpIDF7Qbn7KkFGA022y+aEH+fkNY5f08tqmwgDH60Do=)
                          2: 870C2B58B47811E788EC7E65C4F9AE02.roa (hash: IgkWueiZzDaSaqXsqac+/PyEgRdDcfnQbUbjQVGTTtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl
                          rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 16:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6271 (0x187f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91881D9, serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505
        Validity
            Not Before: Dec 26 16:15:19 2025 GMT
            Not After : Jan  2 16:15:19 2026 GMT
        Subject: CN=694eb497-bcc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:63:a0:71:0d:3b:c8:71:42:f0:25:c7:2b:
                    c1:43:ec:9e:ea:d8:4d:27:a5:e4:d1:ee:e2:e4:a7:
                    7a:a3:a5:71:9b:c1:04:b2:e3:4a:af:4b:67:9a:10:
                    fc:69:ae:d7:71:5a:60:f2:22:f4:0c:93:c7:f5:26:
                    7e:4e:e5:75:33:e8:be:9a:3f:2e:52:b5:f2:4f:bc:
                    78:6b:f2:0f:18:6b:49:04:0c:6f:55:50:e9:6c:25:
                    fc:5d:2a:5e:7c:ce:6e:05:d4:24:d6:a4:0f:85:b3:
                    3d:9f:1f:1d:5d:0e:a7:35:dc:74:04:ca:da:b1:40:
                    50:74:cf:aa:63:6a:02:04:71:ec:36:15:2e:6e:60:
                    f4:40:d9:6b:cc:cb:86:cd:69:c3:5e:89:72:e0:89:
                    dd:4d:94:3c:38:7a:b1:da:03:99:9e:53:71:5b:4d:
                    34:a4:0b:e5:db:77:b4:a0:d6:71:9b:03:6e:f2:81:
                    1d:4d:ec:3a:cb:b2:8d:00:3c:c0:dd:5d:8f:57:cb:
                    bb:e8:7f:ce:4a:0d:5a:ae:4e:f6:20:0e:d2:e2:f4:
                    a8:bc:19:a6:97:a3:cb:a5:dd:74:f4:e7:ac:d0:49:
                    84:b2:75:81:67:a9:01:3b:ed:ae:6a:5a:11:81:1d:
                    80:10:37:1b:8f:59:ab:34:c9:22:58:82:19:74:98:
                    2b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1D:CE:63:3A:74:38:CC:05:62:FD:7A:24:98:B5:93:FC:2E:BD:75
            X509v3 Authority Key Identifier:
                keyid:6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9b:fe:71:a7:59:da:10:64:63:ce:eb:7e:9f:a4:a8:df:01:
         e2:bb:10:f1:0d:3c:2d:f5:6b:9f:31:44:8f:eb:5f:db:64:92:
         2f:f7:6f:47:fb:76:80:56:7b:2c:7a:4d:c8:8c:2a:b1:5e:1e:
         59:67:2c:60:ec:b3:fd:e2:8a:ff:99:b9:ef:96:6a:94:69:86:
         16:f2:70:3f:eb:b5:91:a0:af:6d:0d:62:28:9c:b0:29:3e:89:
         1d:62:3c:63:93:1c:d6:ea:b9:c5:d4:88:fc:e1:42:c3:65:85:
         99:c2:78:51:28:f4:4b:52:3e:3d:66:34:77:7a:50:3d:7a:6a:
         2c:33:ef:58:04:ab:68:48:7b:b8:c0:be:bd:8c:18:4b:40:51:
         84:aa:cf:17:b8:a1:e1:a1:b6:3c:98:fd:e1:dd:48:a5:25:50:
         37:81:9c:4e:27:76:ca:5d:07:d0:ab:15:7b:51:1a:33:b8:34:
         15:ae:a0:b0:1e:04:aa:f2:03:05:49:0d:27:d4:47:62:84:42:
         32:94:97:09:08:61:e5:93:54:ca:fb:5d:79:d6:fe:57:7a:e6:
         4f:74:3a:4c:7e:75:aa:d1:ce:81:c8:72:d0:5f:38:a9:f9:47:
         9a:b8:d8:45:ba:2c:b9:dd:b1:8e:8f:96:63:fc:b3:a0:06:b6:
         e0:03:65:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 07:28:17 2025 by rpki-client