This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
File:                     js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json)
Hash identifier:          uYkIkQ4CziI+MIEqG9HztcBw1Hf7Uo+95jIxjZe3ylg=
Subject key identifier:   9B:E7:28:1B:A3:ED:7F:A7:03:81:44:E9:6C:4A:69:F9:8C:47:2E:A1
Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
Certificate issuer:       /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Certificate serial:       0316
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
Manifest number:          0307
Signing time:             Wed 10 Dec 2025 23:33:44 +0000
Manifest this update:     Wed 10 Dec 2025 23:33:44 +0000
Manifest next update:     Wed 17 Dec 2025 23:33:44 +0000
Files and hashes:         1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: CI84wBi1KOsFLuTRjqIqpwPCe8yy55uW4ua/BqlrRRg=)
                          2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: Z1+2srjHcffoSnsNHW/6kMtu1QEBMk8cg+vN7B6fKN0=)
                          3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: b/uz4uUGbldWv98MGi9g31ZiA1AfDx60qTlS76qiVkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
                          rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 23:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136592, serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
        Validity
            Not Before: Dec 10 23:33:44 2025 GMT
            Not After : Dec 17 23:33:44 2025 GMT
        Subject: CN=693a0358-6670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:02:cc:f5:a7:c8:b3:ef:48:d3:df:82:ec:
                    ba:af:95:cc:fc:e6:3c:34:ec:c3:16:05:71:fe:27:
                    1c:49:75:c9:5e:69:86:ea:7c:d6:0c:71:4b:54:b9:
                    e6:52:9e:98:f5:a1:8f:7c:b9:6b:88:3c:17:1f:ed:
                    97:94:5a:8d:89:4d:50:61:f9:b8:56:b7:a0:87:3f:
                    bb:39:2f:9d:17:ee:b1:b5:4c:9e:fb:c6:39:0d:66:
                    bf:0e:71:6a:65:99:b2:c5:e4:45:b2:88:cc:16:cc:
                    dc:8c:45:03:41:0c:44:04:de:2e:f7:21:07:ee:47:
                    71:89:cb:db:32:35:68:bc:82:d7:f7:8f:a1:31:a2:
                    bb:f9:00:d1:ee:79:e3:e7:dc:60:55:ce:27:fc:aa:
                    82:6e:1f:ab:53:6e:55:24:e6:7c:52:66:eb:24:04:
                    7f:61:65:d2:d0:c2:41:28:88:86:0a:10:0f:57:16:
                    51:24:f2:fd:a6:31:2d:6a:af:9f:8c:20:96:f5:22:
                    7b:37:59:09:0a:8c:98:8f:a5:9f:12:ff:9f:bc:dc:
                    1d:f3:39:e8:17:35:d1:35:f6:29:d0:37:43:9e:c7:
                    44:70:c9:ce:56:75:ea:aa:9b:84:8d:9e:37:9c:1a:
                    1e:8e:8d:d8:71:70:48:d4:a3:85:93:66:1c:52:cf:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E7:28:1B:A3:ED:7F:A7:03:81:44:E9:6C:4A:69:F9:8C:47:2E:A1
            X509v3 Authority Key Identifier:
                keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:32:2d:13:4c:8d:2b:e6:52:86:51:31:4d:5c:c4:5d:ab:96:
         88:53:5b:ce:9b:f4:ff:eb:3c:b3:e4:39:73:f6:9f:8a:67:c8:
         66:57:70:28:ea:91:08:85:27:43:16:0f:02:66:15:80:34:2e:
         59:6d:61:41:b7:9a:17:ad:4c:45:95:93:39:3e:3b:2f:b1:3d:
         fe:ca:32:cf:f4:e1:51:c2:15:2f:7c:f6:36:90:3d:8b:13:c5:
         e9:bd:4e:72:7a:0b:5d:40:49:49:a6:39:a2:be:00:0d:5b:0f:
         b9:b6:9b:a4:43:1b:9c:63:32:57:d7:03:67:c9:3c:d8:ad:45:
         08:56:78:f0:a4:73:b9:1d:ff:9b:bf:61:ce:e2:43:d4:de:55:
         1f:22:eb:84:4b:0a:0e:6a:f7:7a:f7:bd:d3:6c:7b:ee:a5:3f:
         eb:2e:3c:35:ff:9c:52:0d:93:c5:b6:b6:cf:c4:b7:61:cf:09:
         07:2b:5c:b5:09:dc:01:00:c3:f0:54:75:2d:6b:da:c0:43:24:
         2e:6b:d1:ba:a0:12:a2:31:36:2f:a5:16:14:b7:31:50:72:e8:
         75:05:59:fc:c5:bd:66:4c:10:0d:fb:8a:84:83:fb:6f:2d:7f:
         ce:8e:56:a6:34:69:53:b6:4c:47:3e:ca:9f:08:56:57:f8:6e:
         2b:db:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 08:02:22 2025 by rpki-client