This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File:                     jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier:          M8zT/ZxkLoWxRDO3hncJDVKMu0BZspQbqAl9gScKrLA=
Subject key identifier:   D8:08:CF:F4:A4:AC:66:08:C0:A7:FD:D4:3A:60:3F:2C:58:84:27:94
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer:       /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial:       051E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number:          0513
Signing time:             Sun 14 Dec 2025 22:55:29 +0000
Manifest this update:     Sun 14 Dec 2025 22:55:28 +0000
Manifest next update:     Sun 21 Dec 2025 22:55:28 +0000
Files and hashes:         1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: lPaAtgWhr+oBtgVJ/6Owfjxu1+jo6shoMBIfFhBbfn0=)
                          2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=)
                          3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
                          rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 22:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
        Validity
            Not Before: Dec 14 22:55:28 2025 GMT
            Not After : Dec 21 22:55:28 2025 GMT
        Subject: CN=693f4061-1dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:a2:2e:3a:fe:e9:fa:80:2e:3c:28:52:de:
                    04:f3:a3:ee:c5:00:a8:46:00:88:fa:64:5c:98:d4:
                    43:1e:bf:d2:f1:4b:cc:c1:42:71:ca:5e:88:bb:0b:
                    b4:7e:60:53:6e:12:49:d2:bb:93:89:86:b9:e6:fe:
                    f9:74:50:96:f9:9c:01:51:d2:60:87:24:46:8c:37:
                    5d:fe:22:53:24:d0:e7:25:6a:a1:d5:ba:31:54:dd:
                    39:d2:b6:b7:c6:6d:de:e7:54:58:f3:40:95:f4:ca:
                    4b:c9:61:2d:f3:86:e8:f7:e5:d6:42:bc:dc:fc:a5:
                    ed:9d:45:b9:39:33:3b:58:7e:c6:10:ff:57:0b:5d:
                    a8:6f:e5:f4:d8:6b:85:cd:ce:0c:ad:36:b5:b8:f3:
                    ba:02:09:e8:95:56:c9:a4:54:0f:d6:6d:ff:fc:a6:
                    72:a0:c0:4a:dc:d0:d6:e9:2b:55:1f:8f:b6:29:fd:
                    dc:52:1b:3d:d4:53:1d:f0:c5:19:4d:ef:6b:22:3c:
                    f2:0e:33:b7:88:21:bc:43:34:82:7e:a3:4b:b8:ca:
                    37:2c:4c:0f:22:f1:57:52:51:69:8c:e8:fe:96:3c:
                    45:b1:89:45:d4:3c:68:c6:f6:d6:48:2d:23:96:4e:
                    c4:15:f9:3d:48:d1:76:06:b3:c8:41:32:95:6f:a6:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:08:CF:F4:A4:AC:66:08:C0:A7:FD:D4:3A:60:3F:2C:58:84:27:94
            X509v3 Authority Key Identifier:
                keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:20:c2:2c:eb:26:9c:af:9a:3a:0b:d5:fb:f6:56:5e:3b:69:
         23:2c:d1:0b:8d:7e:d5:02:f4:38:e4:62:61:60:a6:28:9c:59:
         b6:01:96:58:de:cd:92:86:49:9f:b7:f7:eb:36:32:d8:79:c6:
         3d:dd:b9:0d:c6:e2:ea:c5:32:bd:b9:0a:4e:6d:60:c1:f1:8b:
         0d:fe:ba:43:43:7c:ef:8a:31:ba:2c:01:3a:34:e4:76:b4:12:
         de:a4:ad:78:0e:80:22:74:66:07:6f:4b:37:10:69:6f:f2:60:
         13:cb:0d:b2:fa:6f:80:15:82:e6:3d:e2:bb:56:5e:1f:33:1f:
         6f:9e:a7:aa:9d:c7:61:cd:46:c7:92:3a:92:b1:bc:2c:5a:7e:
         3d:04:34:08:54:03:7d:1c:a5:e2:4a:1f:cc:07:51:02:36:90:
         54:1d:2a:bc:b6:17:25:46:9a:dd:21:21:37:93:fd:88:c5:c1:
         2a:e0:47:e3:07:7b:99:9f:36:0f:e4:2d:e0:61:87:5a:ba:f3:
         22:e4:33:82:53:8c:d7:dd:0b:c5:bd:30:12:07:9a:40:6c:03:
         10:0d:9c:dd:0b:7a:ed:e1:d3:b4:df:48:28:1f:e2:e0:ad:a4:
         5c:31:b9:ff:50:31:98:c7:6f:10:df:a1:e4:51:83:f8:2b:a8:
         3e:3c:82:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz
QzE5QUYwNTAwHhcNMjUxMjE0MjI1NTI4WhcNMjUxMjIxMjI1NTI4WjAYMRYwFAYD
VQQDDA02OTNmNDA2MS0xZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcOiLjr+6fqALjwoUt4E86PuxQCoRgCI+mRcmNRDHr/S8UvMwUJxyl6Iuwu0
fmBTbhJJ0ruTiYa55v75dFCW+ZwBUdJghyRGjDdd/iJTJNDnJWqh1boxVN050ra3
xm3e51RY80CV9MpLyWEt84bo9+XWQrzc/KXtnUW5OTM7WH7GEP9XC12ob+X02GuF
zc4MrTa1uPO6AgnolVbJpFQP1m3//KZyoMBK3NDW6StVH4+2Kf3cUhs91FMd8MUZ
Te9rIjzyDjO3iCG8QzSCfqNLuMo3LEwPIvFXUlFpjOj+ljxFsYlF1DxoxvbWSC0j
lk7EFfk9SNF2BrPIQTKVb6ZEgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgIz/Sk
rGYIwKf91DpgPyxYhCeUMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw
QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh
WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuIMIs6yacr5o6C9X79lZeO2kjLNELjX7VAvQ45GJhYKYonFm2AZZY
3s2Shkmft/frNjLYecY93bkNxuLqxTK9uQpObWDB8YsN/rpDQ3zvijG6LAE6NOR2
tBLepK14DoAidGYHb0s3EGlv8mATyw2y+m+AFYLmPeK7Vl4fMx9vnqeqncdhzUbH
kjqSsbwsWn49BDQIVAN9HKXiSh/MB1ECNpBUHSq8thclRprdISE3k/2IxcEq4Efj
B3uZnzYP5C3gYYdauvMi5DOCU4zX3QvFvTASB5pAbAMQDZzdC3rt4dO030goH+Lg
raRcMbn/UDGYx28Q36HkUYP4K6g+PIJ7
-----END CERTIFICATE-----
Generated at Tue Dec 16 12:51:08 2025 by rpki-client