This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
File:                     1BO-Gf_T9trcEjTNxhmyQy6oA08.mft (raw, json)
Hash identifier:          v5BHDSfAx/f7PYL2zQkrwoXYzGdPuohbhCXr59GrFOM=
Subject key identifier:   69:1A:5A:3E:F3:9F:5C:98:C0:8B:ED:F2:7F:86:65:2B:3B:95:6A:5A
Authority key identifier: D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F
Certificate issuer:       /CN=A91913D7/serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
Manifest number:          0B
Signing time:             Fri 19 Dec 2025 06:57:18 +0000
Manifest this update:     Fri 19 Dec 2025 06:57:17 +0000
Manifest next update:     Fri 26 Dec 2025 06:57:17 +0000
Files and hashes:         1: 1BO-Gf_T9trcEjTNxhmyQy6oA08.crl (hash: al1kBxGGID0n7XgRn1FqcNNwnoOmxDzAi7ss8XxS+DQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F
        Validity
            Not Before: Dec 19 06:57:17 2025 GMT
            Not After : Dec 26 06:57:17 2025 GMT
        Subject: CN=6944f74e-909a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:53:41:d1:73:df:45:a7:e5:ba:c7:62:a0:
                    69:bb:29:56:ca:65:d7:13:88:6d:d2:18:6c:99:b9:
                    b3:29:d5:9d:9f:57:db:a0:1c:98:61:ad:05:3a:03:
                    86:df:4d:99:f7:0b:cd:cf:f8:c5:d0:b9:f0:18:3b:
                    bb:25:df:3a:9a:9d:c4:26:7b:4c:7f:96:e4:f9:b7:
                    d1:26:d5:91:95:ea:c8:bb:79:ce:e0:41:de:33:62:
                    9c:22:40:a7:61:21:df:df:cf:bd:d3:eb:4f:2e:9e:
                    d5:cb:82:3b:7c:cb:a0:e2:78:7a:b8:1b:70:e6:3f:
                    5e:e3:03:98:28:38:1d:ae:c3:20:94:2d:e4:8e:c6:
                    1d:a7:db:20:7f:21:52:ae:86:78:95:c2:28:e5:39:
                    34:20:b4:84:1d:6f:ce:52:99:ad:03:e5:89:8a:14:
                    64:b6:33:20:ed:0a:fe:ee:e0:1c:b2:93:22:66:57:
                    8f:7d:ae:66:9a:e1:ab:cd:b8:d9:24:9a:a4:9a:b9:
                    39:83:eb:1c:db:a0:be:74:36:45:3f:10:c3:09:a3:
                    21:cb:ab:e8:5b:1f:2e:64:af:aa:c6:8d:0c:bd:0e:
                    24:4a:83:2b:ee:08:19:26:f1:a5:5b:2f:e1:b4:d6:
                    86:60:34:34:fa:2f:07:db:19:7c:b1:90:ab:85:97:
                    b0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1A:5A:3E:F3:9F:5C:98:C0:8B:ED:F2:7F:86:65:2B:3B:95:6A:5A
            X509v3 Authority Key Identifier:
                keyid:D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8f:69:86:a9:77:82:8a:2a:75:70:42:73:ff:e6:16:87:3a:
         98:52:d1:90:dc:54:6f:b6:5f:15:ee:32:f8:fc:9f:b9:37:b6:
         cf:9c:0d:92:ed:8f:33:b7:16:a5:20:70:e8:a8:99:7e:de:41:
         c4:da:33:b5:09:9d:5f:8b:2a:e0:4f:95:af:7f:f3:c0:5e:a9:
         a0:62:93:f3:ba:60:6c:64:66:e4:56:54:7a:6d:b2:77:b4:f7:
         e0:0e:69:ab:53:a3:81:49:32:ff:b9:11:7a:28:55:cc:c0:22:
         ec:da:bd:5b:9c:a2:01:4f:e3:99:f3:ae:24:19:d1:1d:a2:1d:
         e1:72:54:61:9d:85:7a:ea:e4:b6:76:99:3c:f0:96:a4:5f:7b:
         25:7b:dd:b0:a6:d1:e1:c4:c8:72:5e:7f:d2:12:1b:d3:f9:2a:
         31:ad:e5:91:6a:1f:1a:f1:dc:15:f7:64:e4:a3:8a:6f:96:25:
         0d:93:66:41:8e:91:22:9f:b0:59:99:3d:68:96:2b:8d:5e:e1:
         3b:0c:05:1f:49:22:e5:76:e2:f5:8a:7b:9e:bc:cf:90:a5:6c:
         12:39:83:11:b8:0a:ea:57:21:57:6c:71:85:dd:ef:b2:7c:79:
         10:5d:b2:1d:1a:e2:17:d3:0f:9f:3d:79:ae:80:33:6a:a2:47:
         4d:4b:36:d2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MTNENzExMC8GA1UEBRMoRDQxM0JFMTlGRkQzRjZEQURDMTIzNENEQzYxOUIyNDMy
RUE4MDM0RjAeFw0yNTEyMTkwNjU3MTdaFw0yNTEyMjYwNjU3MTdaMBgxFjAUBgNV
BAMMDTY5NDRmNzRlLTkwOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCq51NB0XPfRaflusdioGm7KVbKZdcTiG3SGGyZubMp1Z2fV9ugHJhhrQU6A4bf
TZn3C83P+MXQufAYO7sl3zqancQme0x/luT5t9Em1ZGV6si7ec7gQd4zYpwiQKdh
Id/fz73T608untXLgjt8y6DieHq4G3DmP17jA5goOB2uwyCULeSOxh2n2yB/IVKu
hniVwijlOTQgtIQdb85Sma0D5YmKFGS2MyDtCv7u4ByykyJmV499rmaa4avNuNkk
mqSauTmD6xzboL50NkU/EMMJoyHLq+hbHy5kr6rGjQy9DiRKgyvuCBkm8aVbL+G0
1oZgNDT6LwfbGXyxkKuFl7BPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaRpaPvOf
XJjAi+3yf4ZlKzuValowHwYDVR0jBBgwFoAU1BO+Gf/T9trcEjTNxhmyQy6oA08w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxM0Q3Lzc5MTMyNEI4Q0U4
QTExRjBBQjRCRDc2OUM0RjlBRTAyLzFCTy1HZl9UOXRyY0VqVE54aG15UXk2b0Ew
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMUJPLUdmX1Q5dHJjRWpUTnhobXlReTZvQTA4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx
M0Q3Lzc5MTMyNEI4Q0U4QTExRjBBQjRCRDc2OUM0RjlBRTAyLzFCTy1HZl9UOXRy
Y0VqVE54aG15UXk2b0EwOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAGPaYapd4KKKnVwQnP/5haHOphS0ZDcVG+2XxXuMvj8n7k3ts+cDZLt
jzO3FqUgcOiomX7eQcTaM7UJnV+LKuBPla9/88BeqaBik/O6YGxkZuRWVHptsne0
9+AOaatTo4FJMv+5EXooVczAIuzavVucogFP45nzriQZ0R2iHeFyVGGdhXrq5LZ2
mTzwlqRfeyV73bCm0eHEyHJef9ISG9P5KjGt5ZFqHxrx3BX3ZOSjim+WJQ2TZkGO
kSKfsFmZPWiWK41e4TsMBR9JIuV24vWKe568z5ClbBI5gxG4CupXIVdscYXd77J8
eRBdsh0a4hfTD589ea6AM2qiR01LNtI=
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:45:45 2025 by rpki-client