This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
File:                     jBwU3BZ027aLSUMBWHs9L5jtcBs.mft (raw, json)
Hash identifier:          bfXehau8JESM3ruplVJivwYO6GcPx2vauEKB7O0WaVY=
Subject key identifier:   35:26:EC:CC:14:59:DA:C5:5F:D1:08:73:F3:9D:4A:B8:F5:C0:0D:81
Authority key identifier: 8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B
Certificate issuer:       /CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
Manifest number:          0150
Signing time:             Tue 23 Dec 2025 03:14:03 +0000
Manifest this update:     Tue 23 Dec 2025 03:14:02 +0000
Manifest next update:     Tue 30 Dec 2025 03:14:02 +0000
Files and hashes:         1: jBwU3BZ027aLSUMBWHs9L5jtcBs.crl (hash: +qmjA+AJpZyPApkVovurXtg4HOBroQzH35SkYutLPvI=)
                          2: 24241410E2A211EEBFC9412EC4F9AE02.roa (hash: /HUgZFHQdOKqVGsoyIo8SC7cdtj7Z66CHfzRpJ6gBOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl
                          rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912ECA4, serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
        Validity
            Not Before: Dec 23 03:14:02 2025 GMT
            Not After : Dec 30 03:14:02 2025 GMT
        Subject: CN=694a08fa-1c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:be:56:d2:18:a8:f6:77:92:66:a9:d3:d3:
                    d4:08:04:e8:c7:9b:c8:eb:f4:b2:cc:bb:a9:eb:0f:
                    82:9d:99:2c:4b:7e:06:10:85:94:ee:ca:fc:76:bc:
                    26:c8:62:96:13:23:27:05:cc:67:8e:49:e3:35:1e:
                    7b:21:a8:0e:bd:90:68:27:e9:81:18:97:bf:b1:e4:
                    bc:43:27:bc:d3:52:0f:eb:9c:c6:8a:64:88:92:8e:
                    6f:91:3f:94:d2:04:d6:44:21:dc:b2:b0:a0:c9:ce:
                    88:96:41:39:06:6b:ab:5e:c1:77:0c:ce:ed:94:2c:
                    7f:54:14:42:bc:1f:17:ef:5b:af:4e:0a:27:d0:2c:
                    d9:db:d4:24:b5:dd:53:4b:92:27:ea:6d:cb:6f:23:
                    04:ef:08:ef:f2:94:ce:5c:50:1b:98:8d:ec:b1:5b:
                    45:e4:36:b0:d3:a9:d5:e9:8d:49:e3:a3:60:ab:40:
                    f6:77:f4:81:79:70:03:54:ee:f5:14:07:3d:02:8a:
                    68:c2:64:6d:99:7d:bf:5a:ef:c9:76:06:63:4b:61:
                    17:51:65:ef:ad:c2:b5:be:c7:20:58:99:28:71:0f:
                    8b:ad:2b:f5:00:dd:ec:3c:91:1c:ab:7a:9e:15:90:
                    2e:be:f2:59:91:f2:c2:8d:47:20:e2:5b:f7:d4:54:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:26:EC:CC:14:59:DA:C5:5F:D1:08:73:F3:9D:4A:B8:F5:C0:0D:81
            X509v3 Authority Key Identifier:
                keyid:8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:18:39:94:87:d8:05:fa:e6:4c:60:a5:da:99:3b:9e:5d:d9:
         4c:6a:21:c2:5d:e5:87:df:4f:45:b4:7b:d4:dd:a4:5c:ee:15:
         b3:9c:52:bf:77:a9:13:47:bf:d9:ba:8c:27:44:19:ba:e7:96:
         94:6b:27:ad:7b:07:f3:18:dd:4b:41:b9:e6:e4:ba:33:3b:ab:
         fb:d5:63:5f:c5:50:5a:04:88:bb:5f:79:15:4a:4d:ad:45:a4:
         b7:ec:4c:4e:f2:a3:aa:7a:22:ff:20:47:24:54:21:7f:49:8c:
         f9:15:c6:25:ee:c2:5a:95:29:6b:ef:4b:8f:84:3c:c4:f7:87:
         d1:b6:28:39:60:2a:f1:d6:8d:9f:39:75:32:2c:ad:2d:5e:58:
         32:6e:71:05:13:e5:4e:df:34:18:e5:03:25:bc:4d:31:e6:81:
         e2:09:63:4b:48:83:ea:ec:84:e4:d1:90:1b:ae:01:33:ba:94:
         a4:36:00:c7:ab:93:3e:64:11:db:8c:10:f3:c7:d2:7f:11:ce:
         ab:8f:bf:5c:45:ef:99:c3:19:c8:ed:7e:a4:b9:db:c1:3f:fc:
         80:3c:f1:f1:13:b5:79:4a:24:69:64:22:29:a0:db:8c:01:54:
         38:29:a8:dc:99:e0:ee:0e:e6:c7:1d:4c:4d:d6:23:fb:73:31:
         dd:8c:18:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkVDQTQxMTAvBgNVBAUTKDhDMUMxNERDMTY3NERCQjY4QjQ5NDMwMTU4N0IzRDJG
OThFRDcwMUIwHhcNMjUxMjIzMDMxNDAyWhcNMjUxMjMwMDMxNDAyWjAYMRYwFAYD
VQQDDA02OTRhMDhmYS0xYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzP++VtIYqPZ3kmap09PUCATox5vI6/SyzLup6w+CnZksS34GEIWU7sr8drwm
yGKWEyMnBcxnjknjNR57IagOvZBoJ+mBGJe/seS8Qye801IP65zGimSIko5vkT+U
0gTWRCHcsrCgyc6IlkE5BmurXsF3DM7tlCx/VBRCvB8X71uvTgon0CzZ29Qktd1T
S5In6m3LbyME7wjv8pTOXFAbmI3ssVtF5Daw06nV6Y1J46Ngq0D2d/SBeXADVO71
FAc9AopowmRtmX2/Wu/JdgZjS2EXUWXvrcK1vscgWJkocQ+LrSv1AN3sPJEcq3qe
FZAuvvJZkfLCjUcg4lv31FRdWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUm7MwU
WdrFX9EIc/OdSrj1wA2BMB8GA1UdIwQYMBaAFIwcFNwWdNu2i0lDAVh7PS+Y7XAb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUNBNC80ODVGMzM2QURD
RUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3YUxTVU1CV0hzOUw1anRj
QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pCd1UzQlowMjdhTFNVTUJXSHM5TDVqdGNCcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RUNBNC80ODVGMzM2QURDRUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3
YUxTVU1CV0hzOUw1anRjQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZGDmUh9gF+uZMYKXamTueXdlMaiHCXeWH309FtHvU3aRc7hWznFK/
d6kTR7/ZuownRBm655aUayetewfzGN1LQbnm5LozO6v71WNfxVBaBIi7X3kVSk2t
RaS37ExO8qOqeiL/IEckVCF/SYz5FcYl7sJalSlr70uPhDzE94fRtig5YCrx1o2f
OXUyLK0tXlgybnEFE+VO3zQY5QMlvE0x5oHiCWNLSIPq7ITk0ZAbrgEzupSkNgDH
q5M+ZBHbjBDzx9J/Ec6rj79cRe+ZwxnI7X6kudvBP/yAPPHxE7V5SiRpZCIpoNuM
AVQ4KajcmeDuDubHHUxN1iP7czHdjBid
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:49 2025 by rpki-client