This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
File:                     RjnSkJhvTwBU_cBZAURBYh06u_8.mft (raw, json)
Hash identifier:          eDDdXXIFyP/AKS7Wj9i9VyBA4vhUVMhXN8p3AfKvraQ=
Subject key identifier:   FA:DC:48:D6:CC:A8:1C:9B:F4:4C:C1:46:6E:55:BC:22:14:6B:A9:F8
Authority key identifier: 46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF
Certificate issuer:       /CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
Certificate serial:       039B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
Manifest number:          0393
Signing time:             Mon 22 Dec 2025 23:49:39 +0000
Manifest this update:     Mon 22 Dec 2025 23:49:39 +0000
Manifest next update:     Mon 29 Dec 2025 23:49:39 +0000
Files and hashes:         1: RjnSkJhvTwBU_cBZAURBYh06u_8.crl (hash: J+O2YmqS7SxPVFLVzv+71yh7KofLF2xRoOjCxeOG84g=)
                          2: 8719518C26AD11EDA881874BC4F9AE02.roa (hash: bs5+XFoKF15//AFAKd1GGD7hmAgwTgeLUC9v0U9PGwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl
                          rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B71, serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
        Validity
            Not Before: Dec 22 23:49:39 2025 GMT
            Not After : Dec 29 23:49:39 2025 GMT
        Subject: CN=6949d913-8949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a6:dd:dd:f3:82:b1:15:14:81:95:cd:79:cd:
                    ed:10:2d:3b:7b:7a:3a:31:83:a7:73:d3:4e:72:82:
                    bb:7d:1c:9b:85:40:0b:ca:65:78:fb:9d:a6:e0:1f:
                    5e:8e:50:ab:5d:f4:bf:30:c9:17:39:e0:9b:6a:68:
                    c3:a1:c2:d4:fd:6e:2e:d3:ce:7e:5a:0a:92:90:99:
                    01:4c:4c:1c:0b:10:3f:7e:76:9a:d9:64:7a:a9:45:
                    8f:d0:ce:3a:cf:82:42:30:91:05:4f:4c:fd:62:de:
                    81:5a:c8:6e:4e:8d:56:8c:20:33:a8:64:27:b8:08:
                    e4:92:be:dd:33:ca:0a:93:cb:a2:16:d9:44:39:d5:
                    04:01:52:df:0b:1e:70:7b:5a:fd:1a:3f:cb:24:7e:
                    f3:8d:a8:9d:de:bc:af:1e:e3:da:85:14:23:a9:ba:
                    78:ce:51:82:39:be:46:7b:e5:e0:89:7b:0e:f9:c2:
                    d3:a7:e6:18:34:e3:62:0b:61:7c:69:85:d9:fe:8a:
                    b9:92:bc:df:08:35:0c:da:3b:86:93:bb:33:fd:b8:
                    f8:23:ef:95:6f:7c:2b:14:16:3f:77:6b:56:de:19:
                    4b:19:af:b4:12:03:6e:5d:60:81:3f:79:e0:38:23:
                    35:b5:e5:4f:7b:0d:e3:a7:b8:f7:d7:57:f2:a0:0d:
                    17:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DC:48:D6:CC:A8:1C:9B:F4:4C:C1:46:6E:55:BC:22:14:6B:A9:F8
            X509v3 Authority Key Identifier:
                keyid:46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:04:97:1d:bd:37:66:44:e5:fc:b8:e6:d5:5d:25:d9:9b:
         13:4a:3d:7b:88:c3:19:ee:aa:55:a0:3f:e5:b7:38:f2:e4:19:
         af:38:22:88:d6:2c:48:10:78:2b:47:d6:16:56:f1:a6:eb:87:
         1a:c2:7d:1c:61:8b:94:72:9d:5e:37:7a:f6:0b:04:b4:47:a3:
         75:bf:87:69:ed:f3:42:bb:92:a1:3e:ee:45:08:d3:44:22:7a:
         52:d3:b1:7c:e1:07:07:d1:b7:b0:c5:4f:ad:2b:16:37:ec:bf:
         f9:f7:f0:fc:14:89:6f:7b:90:13:ca:8f:6a:f2:8f:11:af:53:
         80:d1:cd:96:f5:56:31:e8:c8:a3:e8:b5:6c:d8:a6:38:be:1a:
         65:90:ba:3f:03:71:ef:9a:3e:d8:52:1c:55:c1:4d:a5:cf:81:
         b6:cd:2e:b1:ef:11:d5:ab:cc:03:ce:63:00:88:b0:c7:81:47:
         5a:6a:dd:d5:52:a6:bf:4d:21:d8:44:31:46:45:19:5a:c2:ac:
         87:0b:a2:1b:53:b0:77:33:ab:ce:72:5c:bf:eb:4e:29:ee:f1:
         87:bf:0c:0f:2c:07:2e:4d:5a:c5:d0:4d:3e:60:00:fe:9e:73:
         de:d2:55:12:c0:4b:65:0a:6f:d6:3b:88:cc:a7:23:4b:0d:50:
         a3:a1:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:54:30 2025 by rpki-client