This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
File:                     bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json)
Hash identifier:          UWXWQsNSmqClATzJcnqZklD3I8vfruERS5Fi7kbIlRw=
Subject key identifier:   A8:BE:55:5D:05:69:6E:04:5F:34:9C:AD:F4:C2:AA:6E:8C:A7:91:06
Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91
Certificate issuer:       /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
Manifest number:          01D5
Signing time:             Fri 19 Dec 2025 02:04:06 +0000
Manifest this update:     Fri 19 Dec 2025 02:04:05 +0000
Manifest next update:     Fri 26 Dec 2025 02:04:05 +0000
Files and hashes:         1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: Z6Ury/MmFn5edY3WyRgtmZLV0j4b8bypgceiyTj2R60=)
                          2: C5AB6AECCEB211F0AFD62649C4F9AE02.roa (hash: AY+idTpVGw77xjFbUl8HASMZxlsrqPW10xf83isPHV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl
                          rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F69, serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
        Validity
            Not Before: Dec 19 02:04:05 2025 GMT
            Not After : Dec 26 02:04:05 2025 GMT
        Subject: CN=6944b296-8971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:aa:78:b0:79:f1:b9:00:3e:b0:55:62:dc:
                    3a:4f:36:06:74:3e:1d:2c:71:9e:01:10:e6:bb:b6:
                    a7:33:10:29:aa:cc:d7:f9:3e:96:d6:35:f4:18:99:
                    8f:9b:80:06:ad:2e:44:c2:3a:84:b2:8e:bb:b7:51:
                    c3:44:32:30:66:76:95:e0:e9:1c:08:a1:33:42:04:
                    4f:90:a7:45:a6:af:6e:6a:a7:66:e9:ba:67:c8:a6:
                    74:d1:f6:16:8c:31:e2:a7:c4:b9:66:7d:17:9f:50:
                    0d:58:3a:47:a1:33:18:88:87:13:59:1e:01:dd:64:
                    45:12:e0:bf:7d:52:8f:eb:af:ad:84:b3:32:df:ba:
                    ad:3f:df:85:7f:d1:fb:bf:c1:e4:14:7b:aa:2a:48:
                    47:ca:71:e0:d3:93:8e:3a:01:31:57:bf:de:d2:17:
                    0d:22:db:74:78:c1:37:98:c8:13:9c:39:fd:41:35:
                    99:2f:d1:d3:1d:b2:97:2b:c3:0e:68:8a:16:7f:cf:
                    5d:4a:c2:b3:5f:c9:6b:20:43:5f:c8:0d:a4:6e:b7:
                    17:cd:2c:bd:55:c0:45:42:e5:2e:36:69:93:c0:b5:
                    3e:7e:2a:8e:15:4b:cf:fc:3c:83:22:b3:1a:7f:34:
                    dc:35:0f:75:b7:25:1e:dd:b2:4c:c4:af:60:cc:d1:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BE:55:5D:05:69:6E:04:5F:34:9C:AD:F4:C2:AA:6E:8C:A7:91:06
            X509v3 Authority Key Identifier:
                keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:45:57:80:8f:66:a1:21:08:f9:b7:4b:ba:3d:03:b2:5a:32:
         f0:2e:eb:78:c1:4a:0f:85:b6:55:0c:8d:7c:ba:3c:22:63:a9:
         2f:38:ef:90:ac:46:1d:43:6f:98:8f:69:2d:aa:0c:46:d8:0c:
         29:a1:fd:12:3c:0b:9f:71:cf:0d:d5:86:4e:cd:c5:af:25:aa:
         87:1e:66:bd:ce:ec:8c:3c:43:0b:a6:c4:ca:cb:3e:11:d4:df:
         b8:32:14:e3:a5:01:f6:79:48:e7:3a:96:4e:d8:56:a0:7c:29:
         34:11:d7:05:cb:3b:cc:28:21:66:3c:2e:e8:05:10:33:39:97:
         b0:ae:07:10:4d:70:d8:08:b0:0a:2b:2b:64:6e:71:63:65:1a:
         ef:e6:11:dc:41:52:13:be:3a:b8:02:d0:30:ea:e2:1e:7b:8b:
         4c:0b:13:2a:06:c0:a9:5f:3e:e8:31:8a:1a:e6:84:ff:0c:f2:
         05:57:51:64:cf:42:f9:e5:c3:62:66:cd:0f:a3:cf:61:c5:7e:
         a7:e1:bc:b5:87:fe:b4:ca:2e:90:ba:e2:01:a8:4c:49:cb:33:
         66:f3:00:af:14:c5:59:44:67:a3:21:98:04:49:7e:0c:09:8b:
         a7:18:c5:76:c3:ff:43:e3:0f:78:7c:96:4f:52:53:60:7b:24:
         71:60:91:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:35 2025 by rpki-client