This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
File:                     JXjLyvyiaxcgV-N6t3phyBAyIi0.mft (raw, json)
Hash identifier:          oF4y90FJDsoiHL7B+/cpw+/1vWy2IKSw8u4ICl15vRs=
Subject key identifier:   34:71:E0:A1:CD:C5:32:B8:29:2A:CC:0B:B2:57:94:06:79:DA:88:07
Authority key identifier: 25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D
Certificate issuer:       /CN=A9137AD6/serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D
Certificate serial:       03A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
Manifest number:          0395
Signing time:             Fri 19 Dec 2025 00:02:43 +0000
Manifest this update:     Fri 19 Dec 2025 00:02:43 +0000
Manifest next update:     Fri 26 Dec 2025 00:02:43 +0000
Files and hashes:         1: JXjLyvyiaxcgV-N6t3phyBAyIi0.crl (hash: Y6kGxU5+LbV8V9Ear8ZYjwHYQRrdeBRToLqN59Trlzs=)
                          2: 7142AA1A062E11EDA95B3143C4F9AE02.roa (hash: sAHMyFBwbehSytK0bjkDhBpvCN1HCAvo6oyZeTkv4Hs=)
                          3: 2595D7A6063111EDB15E2E5FC4F9AE02.roa (hash: j4AbAcrSNJQt4KCCfWgLsvvoSyCYqNIdVPPppm3Zn7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl
                          rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930 (0x3a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137AD6, serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D
        Validity
            Not Before: Dec 19 00:02:43 2025 GMT
            Not After : Dec 26 00:02:43 2025 GMT
        Subject: CN=69449623-57a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:eb:1d:db:00:86:15:de:64:e3:1b:a9:ff:
                    c9:cb:44:82:64:9a:54:57:38:ac:86:1b:9d:93:e4:
                    86:66:1a:4c:dd:d3:e0:60:2b:fa:5e:88:ad:fc:0f:
                    37:f5:49:56:77:6a:75:1d:ef:45:d8:64:15:e8:cb:
                    c1:a0:2d:f9:51:96:4e:d1:4b:45:6f:e0:52:af:1f:
                    39:e3:ec:b3:2e:09:fe:89:b0:24:19:69:20:27:21:
                    09:f7:1b:c3:1c:ee:4b:56:60:0d:78:a9:40:80:6f:
                    3c:35:0f:40:a0:78:52:b0:57:12:a0:8e:4f:34:35:
                    4d:78:a6:ee:4c:eb:37:b6:b5:84:9a:19:95:b1:1d:
                    2d:8d:b6:c1:92:a7:df:18:48:cb:7b:b1:a3:be:5b:
                    6c:5b:e6:96:b2:d7:1c:21:b3:8c:64:1f:16:36:62:
                    18:58:6f:c9:e4:5e:fb:ff:23:24:1a:07:e4:68:9a:
                    c8:92:17:09:05:d0:f0:ba:96:cc:43:94:36:be:16:
                    22:85:55:fa:a3:26:08:2a:b2:c5:ea:04:2f:f8:f2:
                    d5:c6:cf:ea:de:f7:e2:3b:f8:16:c6:51:ba:25:bf:
                    44:3f:0d:ea:24:5c:a6:ae:48:5c:9e:60:73:0e:20:
                    dd:a6:9d:f6:cc:55:aa:95:4c:5c:79:4a:95:ac:61:
                    3c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:71:E0:A1:CD:C5:32:B8:29:2A:CC:0B:B2:57:94:06:79:DA:88:07
            X509v3 Authority Key Identifier:
                keyid:25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:69:85:a4:70:e0:54:7d:21:e0:2a:d8:ca:9e:4d:11:ed:8c:
         e4:be:fc:99:27:0b:43:bf:ee:7f:b9:61:19:dd:a5:e0:dc:11:
         88:01:2b:e0:95:09:da:cb:23:20:a5:7d:d7:2e:12:a4:5b:93:
         7f:bc:39:66:93:fa:6b:f1:a7:c0:11:71:e4:fa:d3:02:67:0f:
         20:af:e6:f2:01:84:43:f0:b7:a0:98:38:77:4a:f1:88:3e:e5:
         d0:4c:74:c7:5f:4e:6c:c2:5c:f6:2e:4f:f0:a8:b0:fc:d9:f9:
         93:c1:89:fd:08:41:2b:03:ad:1a:be:c7:28:01:50:8b:d2:a2:
         b8:9f:ac:60:42:e7:c5:83:7c:12:5e:05:ce:e3:a5:f0:5e:c5:
         06:ce:c3:aa:f1:df:85:52:22:db:a0:a6:a4:10:63:b1:81:6b:
         4f:2b:35:6d:ee:87:ee:34:4c:ed:48:0e:70:50:73:8e:a1:32:
         27:af:88:5d:4f:c7:7d:0a:1e:56:76:04:47:05:56:5f:f8:3b:
         de:ff:f9:2d:55:5a:d4:62:ba:65:82:49:8b:b2:68:69:2a:03:
         72:e6:fe:66:7b:ce:6d:ca:9f:97:6b:8b:fd:cc:de:a9:02:a6:
         5b:ba:41:68:73:df:22:b6:1f:13:b3:a1:a0:7d:6a:2c:c9:3c:
         c6:a2:60:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBRDYxMTAvBgNVBAUTKDI1NzhDQkNBRkNBMjZCMTcyMDU3RTM3QUI3N0E2MUM4
MTAzMjIyMkQwHhcNMjUxMjE5MDAwMjQzWhcNMjUxMjI2MDAwMjQzWjAYMRYwFAYD
VQQDDA02OTQ0OTYyMy01N2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtmjrHdsAhhXeZOMbqf/Jy0SCZJpUVzishhudk+SGZhpM3dPgYCv6Xoit/A83
9UlWd2p1He9F2GQV6MvBoC35UZZO0UtFb+BSrx854+yzLgn+ibAkGWkgJyEJ9xvD
HO5LVmANeKlAgG88NQ9AoHhSsFcSoI5PNDVNeKbuTOs3trWEmhmVsR0tjbbBkqff
GEjLe7GjvltsW+aWstccIbOMZB8WNmIYWG/J5F77/yMkGgfkaJrIkhcJBdDwupbM
Q5Q2vhYihVX6oyYIKrLF6gQv+PLVxs/q3vfiO/gWxlG6Jb9EPw3qJFymrkhcnmBz
DiDdpp32zFWqlUxceUqVrGE8MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRx4KHN
xTK4KSrMC7JXlAZ52ogHMB8GA1UdIwQYMBaAFCV4y8r8omsXIFfjerd6YcgQMiIt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FENi9BMkNFNkJEOEM3
NzYxMUVDQjczQUQ1NjZDNEY5QUUwMi9KWGpMeXZ5aWF4Y2dWLU42dDNwaHlCQXlJ
aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pYakx5dnlpYXhjZ1YtTjZ0M3BoeUJBeUlpMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
N0FENi9BMkNFNkJEOEM3NzYxMUVDQjczQUQ1NjZDNEY5QUUwMi9KWGpMeXZ5aWF4
Y2dWLU42dDNwaHlCQXlJaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7aYWkcOBUfSHgKtjKnk0R7YzkvvyZJwtDv+5/uWEZ3aXg3BGIASvg
lQnayyMgpX3XLhKkW5N/vDlmk/pr8afAEXHk+tMCZw8gr+byAYRD8LegmDh3SvGI
PuXQTHTHX05swlz2Lk/wqLD82fmTwYn9CEErA60avscoAVCL0qK4n6xgQufFg3wS
XgXO46XwXsUGzsOq8d+FUiLboKakEGOxgWtPKzVt7ofuNEztSA5wUHOOoTInr4hd
T8d9Ch5WdgRHBVZf+Dve//ktVVrUYrplgkmLsmhpKgNy5v5me85typ+Xa4v9zN6p
AqZbukFoc98ith8Ts6GgfWosyTzGomDm
-----END CERTIFICATE-----
Generated at Fri Dec 19 13:26:40 2025 by rpki-client