This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
File:                     JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json)
Hash identifier:          +dce+qQnng7D4+b2OFtM8v8JcsST1aPPsyycPkyReQA=
Subject key identifier:   4B:22:A4:72:85:D3:F8:CB:F9:99:A7:FC:C1:95:74:A1:D3:EA:5B:E6
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Certificate issuer:       /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
Manifest number:          0119
Signing time:             Tue 23 Dec 2025 03:50:30 +0000
Manifest this update:     Tue 23 Dec 2025 03:50:30 +0000
Manifest next update:     Tue 30 Dec 2025 03:50:30 +0000
Files and hashes:         1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: D2RGo5KcT5F6zTXC+709NO3ZRb5Opr30IsS6GCs8UFE=)
                          2: 1381259CCA3811F0B890C35CC4F9AE02.roa (hash: 2AIbsNw95CGEUCI+hzWilcZK30P6hAcxR4zxP/RQzJ4=)
                          3: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: dFNn3jO43SdP+6Z3qx4suVU/JHAZ4DSHsOgrTOhwaUU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
        Validity
            Not Before: Dec 23 03:50:30 2025 GMT
            Not After : Dec 30 03:50:30 2025 GMT
        Subject: CN=694a1186-428c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:35:e5:ca:0e:ce:d1:97:72:de:db:11:e0:
                    c4:38:9f:1c:ea:e5:74:74:03:a9:e7:af:0c:27:71:
                    cf:f0:4c:04:24:91:16:00:14:c4:2b:3a:ef:98:ce:
                    fd:ce:22:8e:a4:73:0e:68:09:01:27:44:11:47:fa:
                    fc:42:08:8e:04:c9:9d:07:f5:f3:b3:4f:95:d4:cc:
                    22:48:83:c9:5d:3d:5e:7c:e3:94:51:98:f6:4e:d4:
                    9f:a7:ec:fa:2c:fa:ed:cb:91:18:35:69:f3:c8:dc:
                    70:c7:73:a9:73:e2:02:3b:9e:f7:c1:ca:14:33:c8:
                    eb:3b:ce:c1:8a:ba:d3:fa:dd:79:1d:66:03:16:ef:
                    b7:ad:80:3d:bb:5a:55:45:27:33:9e:c6:a8:23:65:
                    8a:6f:ca:87:a4:b4:2d:2a:cf:9c:12:08:99:bc:1f:
                    cd:12:e1:77:52:79:39:1f:fc:e7:ac:55:c0:89:5f:
                    4d:0b:f6:98:31:96:6e:a0:97:cc:04:e0:65:6d:00:
                    43:7c:d0:4d:20:b2:cf:54:fb:50:44:b9:c5:a4:8f:
                    35:84:ed:7f:fd:d1:ec:7a:1d:02:15:2c:bf:2d:b3:
                    62:f9:ec:0c:66:cd:74:2c:7d:21:b2:91:7f:f3:8d:
                    ef:93:d6:80:bc:9e:06:39:08:7c:09:8b:70:5d:77:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:22:A4:72:85:D3:F8:CB:F9:99:A7:FC:C1:95:74:A1:D3:EA:5B:E6
            X509v3 Authority Key Identifier:
                keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4f:01:22:8d:e7:e1:c8:9d:0c:35:8a:4a:d9:51:eb:3c:57:
         c1:10:71:5f:08:7f:d3:d5:de:c6:ad:90:fb:84:11:69:45:76:
         61:26:0e:d4:37:53:fa:09:3a:9d:4d:09:f0:92:8a:d6:8a:19:
         7c:79:09:3f:e1:d2:68:a4:81:82:2e:3a:58:79:fb:22:99:e3:
         c2:db:c8:5d:37:17:fe:bc:90:9b:2a:64:97:fa:e9:ee:99:35:
         32:cf:c2:ef:87:16:ab:fa:09:7d:9e:75:90:fa:d8:fa:c1:fa:
         bc:df:03:c3:d0:e1:0a:2f:91:fe:88:82:9b:dc:23:cd:0e:c6:
         6b:7b:e0:48:d2:5a:2d:9c:3d:81:f1:8c:93:10:93:6c:87:ca:
         7c:44:93:e1:36:04:67:c9:e2:c2:a2:da:d2:2a:d3:45:3c:45:
         a6:8d:f5:06:3d:b7:d2:21:ea:1b:14:01:92:e5:83:cc:72:32:
         cc:5e:a4:be:aa:2c:27:1d:d7:86:c7:c5:42:e4:00:e2:1a:e7:
         b5:d4:53:08:6b:bd:9d:30:ef:49:49:6d:aa:f9:a0:19:4d:4c:
         72:fa:4e:25:f0:f7:25:80:f9:ec:d3:d0:73:82:63:79:d1:37:
         5d:8b:ba:c3:75:35:e1:0e:07:ef:f5:24:27:07:94:87:d2:13:
         92:25:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:20:27 2025 by rpki-client