This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
File:                     mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft (raw, json)
Hash identifier:          NuF51gYY3sA1vPS4Wa6Q02xF16GGDC3A19JwVhqEKig=
Subject key identifier:   0B:D4:F5:94:75:B7:5F:CF:C2:35:60:4D:ED:06:49:0E:FA:DF:91:FB
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
Manifest number:          23
Signing time:             Fri 05 Dec 2025 05:52:53 +0000
Manifest this update:     Fri 05 Dec 2025 05:52:52 +0000
Manifest next update:     Fri 12 Dec 2025 05:52:52 +0000
Files and hashes:         1: mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl (hash: bra9859UD5VK5vs0pt49sw6R9r8ycTl1P632zG+qaFs=)
                          2: B1E31BF6C92411F087908126C4F9AE02.roa (hash: Yz3B628v+Zuwc3iSweZDybyNZNxIugyujdSDXvZHFHU=)
                          3: B2815168C92411F0B6E88126C4F9AE02.roa (hash: +uKZk71p6xoGxSkkGPJRZ/3fiUO3ZyZAyRc1mBvILaY=)
                          4: 549CF418C91911F083F34C6DC4F9AE02.roa (hash: CPReL8vgcmnmoA6zONoWs9wX51oRMHqU0VkmCxr+UGY=)
                          5: D008EA4AC92211F0AD92BA21C4F9AE02.roa (hash: 4PFl+djOCvc8xGyc3NA3mOXdB4cbVSoZGtyLfcbiQvA=)
                          6: B3994B8CC92411F0928E8126C4F9AE02.roa (hash: AH7IPsSFFEPRn+zV12YskMymoNAR9h6j8zf44NNZ4tM=)
                          7: 55B2771AC91911F0BA7D4C6DC4F9AE02.roa (hash: +Lyza8h2/Z4uXs2d+lFs1I7p0cxofH7YS5tzMbCiLyc=)
                          8: 9F196B2EC91A11F0AAB4C673C4F9AE02.roa (hash: A0BIKZWnnoXyCWoiUzYWJD9AJntPcwDJG9Ku+oPkh0Q=)
                          9: A0000D2CC91A11F08D74C673C4F9AE02.roa (hash: 3apnTYZUuA7N2cNukLCN12qI42VG+eaxv1WLiU5/scg=)
                          10: 7D679C84C92511F09CF68054C4F9AE02.roa (hash: 7etvoXAGwyYEYpaGBfDwDld33O7lKbrVTucALnOeq/Y=)
                          11: B2F27AFAC92411F09F068126C4F9AE02.roa (hash: DtE4Gub6HXNOtAF1R9QWTavpwFvcacPl8V38z7ZHdcg=)
                          12: 59826FE4C91911F0B6074C6DC4F9AE02.roa (hash: AdbMScDuHZrnG48K6jAQq7R7hjJcp2b/kDWOqDvQMIo=)
                          13: 9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa (hash: ZT5u+LiwEwXLyRnjvq/L61qw+MNZgpjnIsJ8w3vDTcA=)
                          14: B4B21A80C92411F099228126C4F9AE02.roa (hash: 8u4dud3avbhQgE5CopYuEjp9f5QzWDBwOaQ9kBXQeOY=)
                          15: B40A9A4EC92411F09FAB8126C4F9AE02.roa (hash: MIjlw2AczUDY3cA2K0ShhfW4ijFo/ptiKrc7rq/4vDM=)
                          16: 9DA31C0EC91A11F0AEDEC673C4F9AE02.roa (hash: xTLF64HiFnl4Ua3DqFhX3rQXHABClSMIShrBUqKCQDg=)
                          17: 58EF9BECC91911F080D34C6DC4F9AE02.roa (hash: j1lbvHYehq+WgCpoOKiItpNlLY8XBd6+Fc/mlE4o5Wc=)
                          18: 9F9D4E9EC91A11F08745C673C4F9AE02.roa (hash: yDVSc2+F6J/qBiAoUaI9aYB4F42z0AMiAWD72TYkXo8=)
                          19: 57F3E1BCC91911F083BE4C6DC4F9AE02.roa (hash: jJXT7Vo6Xui3neNH5mn3y9zT7Dwin+uruwOajavMv80=)
                          20: 9C957EF6C91A11F0971EC673C4F9AE02.roa (hash: IqGGpB6gbv2zxuI13AiPWnYbFdRhvLZ7GYYUS6dO6EI=)
                          21: 9E1FAF62C91A11F08AC0C673C4F9AE02.roa (hash: EYJuj7Ys2yn/Y3ogPFCOzhRA1x4eMfO+KUjbme3Rfpk=)
                          22: 20151124C8EE11F0BD2FFA4CC4F9AE02.roa (hash: cNqGGRe6NzhSCTXzIASVI8hhiih8GTSivPf6s6Rfquk=)
                          23: 70C18F94C91611F0BC037B3EC4F9AE02.roa (hash: k1w2I69Wq/jSWiugsVcXcDYCXLjUSbXkNqnDPGKa0Y8=)
                          24: 56F1C6BCC91911F08B394C6DC4F9AE02.roa (hash: sq2FH3KxuzVCERwQzUbxosanTt/57fQSY7WjnEZYE9A=)
                          25: 567E4552C91911F0BB194C6DC4F9AE02.roa (hash: ckqlJh190Z78TnMGe9Si/aLYThzKpCI7qGyR/k/KtyY=)
                          26: 230E492ECB6711F0991B7E4FC4F9AE02.roa (hash: M7DPbOG45eZHQqrP0j+lb07O1Ass56QxDbwI6RBmTIw=)
                          27: 576F51B8C91911F0AB974C6DC4F9AE02.roa (hash: IB2q7pBY7tiWYmmMufMjNcggqg1Dv4TLNZ3XaMRxv3I=)
                          28: 542098FAC91911F0BE3C4C6DC4F9AE02.roa (hash: spbtK9CKcvweJFv/ZXZIoLoQObzhpb1Xmfc6tWnbbn0=)
                          29: 5537463AC91911F0AFA34C6DC4F9AE02.roa (hash: LZgCqON6rHgVqUf9z12TYfdTuWCZr+gIXpomnS/txSc=)
                          30: 9E825176C91A11F0876AC673C4F9AE02.roa (hash: C9zxlmppcqgvN9kMFuhGoxlegcOeqD3KVMdKppsyxnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Dec  5 05:52:52 2025 GMT
            Not After : Dec 12 05:52:52 2025 GMT
        Subject: CN=69327334-1ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:3b:bc:2d:cc:6e:12:38:7c:7e:c7:07:5f:
                    88:db:3f:5a:ae:e9:11:e5:bc:a2:e5:b2:dd:28:15:
                    51:b8:7e:04:74:33:68:eb:d8:7a:eb:03:5f:3f:ab:
                    96:bb:cd:d3:6d:37:6c:14:18:5e:d5:75:01:48:1e:
                    02:44:bf:15:c4:b3:d0:a5:d9:e8:53:23:34:50:a2:
                    9c:ce:d5:1f:94:a6:24:d8:05:cc:0a:bc:a5:60:50:
                    60:51:6b:6d:99:b8:a1:1a:4d:80:ca:3a:2f:1a:18:
                    66:7f:4c:98:60:4f:c9:cc:f7:51:4d:a3:ce:83:77:
                    52:f4:a4:04:16:ab:7c:33:78:07:50:29:d3:25:43:
                    d4:bc:ad:5b:48:74:98:03:9c:33:99:62:58:77:b7:
                    9a:d7:1c:91:2e:ca:3d:9d:73:f9:8f:ed:18:5f:f5:
                    38:e8:93:15:d3:1f:61:d7:4c:50:49:0c:0a:19:89:
                    6d:e7:6e:84:2b:57:a9:f6:26:86:ee:df:f8:87:42:
                    47:7c:8c:39:d3:ad:e3:f1:52:07:5b:6b:0f:73:72:
                    c7:a0:0b:a3:19:75:38:41:c6:0d:f1:04:9b:4a:83:
                    b7:8d:18:70:ac:ff:8d:53:3c:c1:11:1e:31:2d:5e:
                    3a:ae:4c:98:c0:74:01:73:b5:76:9f:78:12:36:93:
                    d9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:F5:94:75:B7:5F:CF:C2:35:60:4D:ED:06:49:0E:FA:DF:91:FB
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:04:7c:5b:ce:36:62:db:01:48:e4:e6:80:f7:9e:75:8f:d1:
         f0:48:9c:b5:08:3b:30:8c:61:fe:a8:f8:54:da:e1:60:23:e4:
         9c:14:8f:b1:44:ff:ae:d5:3a:18:b4:45:ed:fd:29:0c:40:5f:
         ce:f9:2c:53:75:96:50:1c:a5:fc:c7:cc:c6:7e:66:cd:2a:02:
         c0:a2:b6:73:30:8f:6b:fa:3c:34:80:2b:a8:6d:2d:27:6e:29:
         1e:80:29:6f:26:b1:67:47:a5:8e:d8:0d:e3:f0:db:0e:f4:80:
         73:3e:8b:5f:aa:b8:6a:f3:a3:58:75:26:61:be:56:62:f8:d3:
         9e:76:4a:b8:d1:7f:ed:17:a5:44:c7:51:99:b2:ed:23:7a:94:
         e4:05:0d:7f:3f:47:6e:a9:07:4a:2d:4c:79:56:a9:20:54:a0:
         43:37:1a:d0:db:e3:92:c3:0b:d1:a1:67:30:6c:9c:fd:f6:cd:
         9e:7f:9d:86:e2:9a:48:36:54:74:a6:20:b4:78:79:7a:38:01:
         10:18:a9:1f:5b:3b:59:63:34:a3:d8:9c:e8:71:3f:9c:a4:5d:
         43:96:b7:32:49:03:5e:73:89:3a:a7:ab:9b:67:01:80:83:20:
         80:db:30:1e:1c:f5:94:77:17:bf:6c:c9:a2:3f:e7:45:ba:4b:
         48:c9:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----