This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
File:                     SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json)
Hash identifier:          LpFnV31eu+cTBljXRfxPOhSfEeMiDAdvkL+157l8uW0=
Subject key identifier:   11:A7:31:88:EA:64:45:D8:91:60:24:6F:34:33:9F:83:70:E1:CD:69
Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
Certificate issuer:       /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
Manifest number:          89
Signing time:             Tue 23 Dec 2025 05:33:08 +0000
Manifest this update:     Tue 23 Dec 2025 05:33:08 +0000
Manifest next update:     Tue 30 Dec 2025 05:33:08 +0000
Files and hashes:         1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: WjQ9ZJowmCZrYxBt6LE2/vyNWjM+zrR7iNGefEDWI+k=)
                          2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: litZH04YNtCR4iuEOlm91tI8Ccgt0oYZlfR5gRznpNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
                          rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
        Validity
            Not Before: Dec 23 05:33:08 2025 GMT
            Not After : Dec 30 05:33:08 2025 GMT
        Subject: CN=694a2994-fd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:79:35:ff:70:de:2f:64:7d:34:1c:d3:64:
                    ed:5f:af:2c:31:94:5d:cb:db:79:f8:a8:82:e1:63:
                    46:79:10:9d:28:1f:1d:29:43:08:ac:5e:3f:82:e2:
                    1d:cb:0e:04:0d:2b:27:c1:88:1c:00:e5:45:6f:15:
                    a0:94:7d:2b:28:61:85:66:72:d7:fc:e2:50:fa:02:
                    e5:df:b2:a4:ae:64:cf:59:4b:d9:85:f9:60:9e:e9:
                    ca:ee:3f:76:9b:81:1e:37:4a:51:bf:af:6c:29:36:
                    fc:4a:bb:c6:9f:89:28:58:9f:85:e5:30:66:27:0c:
                    64:b3:6d:81:7c:81:05:7c:81:18:f5:be:da:f5:7f:
                    9b:9e:93:d0:54:d1:4c:62:8b:5d:52:0b:23:42:c4:
                    20:6f:07:d8:04:5b:45:19:dc:c3:c6:e2:f5:ca:e6:
                    77:27:71:9a:fc:33:4a:25:62:a4:79:19:1d:41:9d:
                    81:02:db:35:4e:62:92:bf:f9:cc:6c:08:be:81:b2:
                    63:d3:5a:ca:a3:22:2b:b1:37:ca:f0:b3:d5:02:bf:
                    fe:07:bc:57:da:56:bc:c4:a4:91:cb:a6:ed:a8:3c:
                    6d:ce:93:da:f6:1c:54:00:b4:fe:6f:a3:56:16:0d:
                    63:8b:6c:a3:eb:61:7e:7b:f6:0b:fb:a4:a6:0b:57:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A7:31:88:EA:64:45:D8:91:60:24:6F:34:33:9F:83:70:E1:CD:69
            X509v3 Authority Key Identifier:
                keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:ff:d0:e3:6d:24:f5:54:d5:8b:c4:1f:79:17:1a:0a:28:
         c0:56:05:dc:93:3a:7e:c4:6f:48:d5:f0:92:fc:88:35:ad:35:
         19:9a:92:d1:70:de:ed:d3:d2:80:c5:12:0e:63:e8:af:7a:d6:
         ab:4b:b3:f0:05:ec:42:68:4d:aa:ea:d5:1d:f4:af:e0:46:e1:
         30:da:d8:78:99:6b:59:ec:b5:fb:83:9d:e0:9f:75:c1:f4:35:
         4e:90:64:5f:83:2e:47:7f:84:8a:00:09:a1:a0:43:ee:2c:9b:
         7c:18:3b:af:30:aa:79:5c:58:2e:7c:4e:c7:80:a5:60:f0:6a:
         17:b1:6c:f7:39:58:da:6f:17:a7:89:f5:ff:8d:73:7e:3b:59:
         c2:4a:73:5a:72:51:b9:54:1a:f7:74:28:a8:ad:8d:78:60:5b:
         a8:21:c5:49:55:00:8a:e7:9d:4f:66:1c:7b:77:34:d7:11:6b:
         86:c0:e6:9d:1c:de:14:8e:37:05:40:88:b6:8a:cf:44:88:1e:
         2f:87:6e:54:01:71:64:3b:80:36:38:56:a7:9c:1d:b3:ca:63:
         bf:ed:1d:7f:ff:26:e3:24:a4:0d:d9:0f:94:69:42:6c:8b:72:
         a0:91:3f:52:e7:c2:a7:91:f2:0e:5a:7a:35:aa:7b:a6:5d:69:
         6c:55:08:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:39 2025 by rpki-client