This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft
File:                     jwhmaAoC5LoOvh6PIljuKBzUPv4.mft (raw, json)
Hash identifier:          StthCfrUS8unWNW3kBFDkCCFtUxtjcLyDkgNaLy5vjw=
Subject key identifier:   12:2A:EB:FD:CE:A5:72:6C:5C:80:F3:B9:8C:B2:CE:AC:EE:8F:52:67
Authority key identifier: 8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE
Certificate issuer:       /CN=A913B510/serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft
Manifest number:          57
Signing time:             Tue 23 Dec 2025 06:03:32 +0000
Manifest this update:     Tue 23 Dec 2025 06:03:31 +0000
Manifest next update:     Tue 30 Dec 2025 06:03:31 +0000
Files and hashes:         1: jwhmaAoC5LoOvh6PIljuKBzUPv4.crl (hash: 7GGNM6XxKT47bwtNx3ncGVNOAMryVv+iLbnedjdpY2s=)
                          2: 9D1CBEB65D8111F0A04DD550C4F9AE02.roa (hash: WD6JX9ZeI2PyoWb+KcklrsjlIHW009aV5ZILyIaO+Ps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl
                          rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B510, serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE
        Validity
            Not Before: Dec 23 06:03:31 2025 GMT
            Not After : Dec 30 06:03:31 2025 GMT
        Subject: CN=694a30b4-b201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:f5:f5:79:ae:70:26:91:77:85:2d:98:33:
                    f0:71:7a:c5:04:94:c5:0b:b2:c2:3a:83:20:4d:24:
                    22:a7:0b:e4:01:1d:59:b6:d8:34:1e:25:98:89:65:
                    2a:39:48:b1:07:43:96:92:8f:4c:66:56:9c:54:74:
                    06:e4:af:da:70:fb:e1:0c:c5:4e:39:cb:9f:d7:80:
                    79:f2:a6:b2:43:36:82:1a:90:bd:40:eb:e3:e8:b3:
                    4d:ae:5f:b5:14:cd:30:6d:2c:0f:25:f8:3a:b2:94:
                    90:79:7e:81:4a:66:5d:b3:2c:b9:72:19:68:7d:e4:
                    2c:ee:11:99:41:5a:11:78:fa:a1:fe:5b:55:0b:76:
                    84:56:d8:0a:50:99:48:40:cd:96:de:4b:57:77:66:
                    ca:53:12:e2:a6:ee:f0:41:2c:7e:1a:d6:89:77:c3:
                    8c:08:85:29:23:11:48:0c:6d:f8:b5:f2:b9:19:90:
                    b8:70:07:8f:5d:14:55:22:41:7f:47:06:3f:4a:0a:
                    ac:02:14:aa:3f:2a:32:bf:a9:5f:1b:08:33:e4:11:
                    a7:43:a1:25:5a:15:2a:c0:4d:f5:fd:a8:9f:14:45:
                    57:21:67:bc:ef:2f:86:da:78:b8:42:19:c6:66:31:
                    bd:a4:10:66:d5:bd:04:f0:b9:a3:89:0a:72:c1:b0:
                    21:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2A:EB:FD:CE:A5:72:6C:5C:80:F3:B9:8C:B2:CE:AC:EE:8F:52:67
            X509v3 Authority Key Identifier:
                keyid:8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:ee:97:df:11:76:f3:5b:6f:5c:f0:e0:00:5f:49:f1:42:
         fe:93:3b:7f:53:69:52:85:69:89:27:02:37:13:58:2b:f4:d7:
         64:e4:06:a5:c9:80:55:ec:48:e1:20:4a:60:72:2b:45:90:9a:
         15:35:30:4c:52:69:79:88:05:2e:c3:b0:96:ea:d2:19:59:ee:
         84:54:08:93:3e:1c:e4:17:70:bf:51:81:9c:a4:68:25:c1:79:
         48:ca:a2:5a:d1:52:52:38:ac:8f:44:a8:8c:d5:0e:37:d0:f4:
         c6:2c:d2:7f:83:40:ad:ff:c8:3f:41:91:dc:48:87:10:64:e6:
         03:c7:2b:a2:21:25:c1:d5:e2:fc:63:f9:3c:15:9d:3c:48:4d:
         8b:fe:28:2a:a8:23:d2:de:ca:94:46:71:46:cc:ee:c4:19:d5:
         55:93:f5:d0:19:cc:59:d3:1b:10:20:f4:fe:83:e1:4d:e7:19:
         9f:a2:5b:c8:9b:d8:15:0b:7d:29:b1:6d:e5:ff:f4:61:c2:33:
         42:5b:a0:2c:69:65:e8:e7:f3:18:b4:88:ef:80:98:f8:c2:6e:
         2b:e9:53:4d:27:4b:fa:bc:02:2b:0c:33:91:47:6b:c6:76:b9:
         71:5e:1a:8f:4a:e6:b8:ad:fd:31:79:3f:c3:f8:b3:44:d1:aa:
         dd:cb:21:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:21 2025 by rpki-client