This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
File:                     J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft (raw, json)
Hash identifier:          7DswCa2h08obIf6t/x4uJbRnNS6doHx0FfHV1a01VhE=
Subject key identifier:   AF:55:AB:B4:F3:AF:41:D5:64:8D:49:FF:03:E7:23:10:24:27:D9:0E
Authority key identifier: 27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07
Certificate issuer:       /CN=A9141559/serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
Manifest number:          74
Signing time:             Tue 23 Dec 2025 05:42:45 +0000
Manifest this update:     Tue 23 Dec 2025 05:42:45 +0000
Manifest next update:     Tue 30 Dec 2025 05:42:45 +0000
Files and hashes:         1: J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl (hash: LkXqMc37V7qRxad1JaSDjnQncfYG0y3CElB7q0bBZo8=)
                          2: 1CF72A482B0C11F08B7A2511C4F9AE02.roa (hash: 2ofBFHApjBEiLo4MH3QZR4kbgOi0f02WpjAlcU00vM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl
                          rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141559, serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507
        Validity
            Not Before: Dec 23 05:42:45 2025 GMT
            Not After : Dec 30 05:42:45 2025 GMT
        Subject: CN=694a2bd5-d308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bb:b0:cd:59:88:d7:63:9e:e1:a5:ca:2b:c6:
                    75:c1:8b:50:ec:56:a2:db:e8:36:2d:86:7c:08:a1:
                    29:51:55:52:f8:96:58:8c:3d:b8:25:60:c2:87:62:
                    99:a8:7e:88:95:9c:c7:87:55:a7:0f:ae:bd:f8:d2:
                    98:54:94:69:12:82:92:8e:2e:e5:f2:54:ef:85:b2:
                    a0:69:fe:e2:7e:9b:50:45:5d:d2:17:a3:69:e8:92:
                    87:74:e1:4f:63:7f:ce:df:74:24:cf:eb:0e:3e:95:
                    4c:f1:90:dc:15:d7:e2:79:08:be:db:d2:e2:43:c1:
                    de:1d:1d:65:a3:f9:bb:09:a8:dc:a9:73:12:03:8a:
                    fd:66:bf:84:61:b7:36:0d:c8:a0:66:d1:1d:bc:9c:
                    ca:3f:86:03:55:c2:35:6a:8e:f1:3f:64:ed:59:7f:
                    fc:fb:e3:ec:9a:0f:0e:6a:fc:e0:c6:27:20:c9:13:
                    f0:47:81:a8:a8:57:d4:f9:0e:65:e2:ae:91:ef:00:
                    ce:af:00:cb:86:5a:4a:86:a3:b8:bf:d9:97:dc:de:
                    28:63:0f:c5:89:47:16:bc:fc:07:66:4f:88:06:70:
                    e5:24:09:d3:fe:26:e0:4b:ea:f7:12:60:24:7a:d4:
                    e2:00:4f:2c:29:63:8b:ac:8a:33:7a:d8:b4:45:9b:
                    f1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:55:AB:B4:F3:AF:41:D5:64:8D:49:FF:03:E7:23:10:24:27:D9:0E
            X509v3 Authority Key Identifier:
                keyid:27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:58:7e:b3:b8:d9:0c:5d:93:48:e5:86:e6:4b:aa:81:3e:ae:
         b0:62:5f:08:6f:be:79:0b:99:b4:ad:a5:ec:b0:c1:24:db:7e:
         09:91:26:73:37:a6:dc:7d:a6:eb:2a:5d:24:39:c6:88:ae:fd:
         a9:5c:df:55:57:f8:65:16:21:29:36:02:83:6a:68:73:a8:fa:
         64:e2:71:b4:ba:ae:10:2d:b0:d0:ff:b1:ca:86:b3:02:cb:ac:
         9f:05:2b:82:b4:da:87:03:41:bd:ab:84:4d:d3:c9:2c:58:42:
         82:71:8f:5d:09:de:0b:95:bb:07:6f:f6:36:5f:25:9e:59:b4:
         8e:e8:53:cb:49:e2:0e:53:06:c4:d0:d0:15:aa:dd:90:f0:8f:
         0c:20:43:bf:36:e1:b1:92:e2:bc:0b:45:7f:88:c2:0d:04:55:
         69:ad:f9:19:c2:53:d7:21:a8:90:b0:f5:72:38:3e:97:5d:6e:
         b8:83:64:4f:9f:8d:41:74:2b:07:63:b7:51:b5:56:09:86:e1:
         65:b3:29:13:7a:c7:0c:da:82:10:4f:1e:cb:ce:1e:8f:81:ea:
         c8:48:da:0a:80:cb:1d:60:5a:dd:c1:a5:e0:08:07:89:d6:2a:
         54:44:40:d0:5c:11:3b:38:2c:ed:36:37:e1:1e:06:b2:9e:01:
         6c:3c:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:51 2025 by rpki-client