This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
File:                     JcIFLO89jt7xrjiFX-f7EbRXgRU.mft (raw, json)
Hash identifier:          9vqqVQWvmkXskRlhOmFEtxvYmQUD680ZYbwgUqsCv3E=
Subject key identifier:   BA:8D:68:F8:AD:8B:50:21:94:F7:58:FE:E6:5C:67:E8:98:88:50:41
Authority key identifier: 25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15
Certificate issuer:       /CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115
Certificate serial:       07A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
Manifest number:          079E
Signing time:             Mon 22 Dec 2025 20:45:50 +0000
Manifest this update:     Mon 22 Dec 2025 20:45:49 +0000
Manifest next update:     Mon 29 Dec 2025 20:45:49 +0000
Files and hashes:         1: JcIFLO89jt7xrjiFX-f7EbRXgRU.crl (hash: H5NN+sBL64o2soXoi6aVaK6bebvixBktH2qN6EmNFbI=)
                          2: 325A2ABA2F6D11EBAE27D010C4F9AE02.roa (hash: 1nDYvzLxRQLfDg2+9LpFsB+uny5wVx/68LnNdYTQqaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl
                          rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1956 (0x7a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F18, serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115
        Validity
            Not Before: Dec 22 20:45:49 2025 GMT
            Not After : Dec 29 20:45:49 2025 GMT
        Subject: CN=6949adfe-594f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:e0:d9:58:a3:a5:cf:74:f9:54:19:b2:9d:
                    0f:21:a5:46:9f:6a:5f:f6:f5:6c:dc:71:66:32:14:
                    08:cf:03:16:74:eb:c6:31:2a:7b:6f:13:d7:fd:50:
                    34:9e:a9:69:9d:c1:2f:c7:9d:64:71:53:92:67:46:
                    85:9f:be:a1:29:ee:1f:68:8e:ff:65:72:54:32:40:
                    b6:c0:46:aa:e5:96:ec:b8:67:42:f3:ff:2b:b3:d7:
                    88:49:58:d2:45:fb:c3:ac:be:a6:e5:48:d6:4c:56:
                    da:81:12:a3:e0:ea:49:9a:1c:99:37:59:48:d2:90:
                    ee:e8:e4:ad:21:33:06:f7:c8:7b:ac:d6:11:a0:cf:
                    d2:4e:1e:1c:10:2e:d3:b0:3a:74:2e:3a:94:3d:cb:
                    c9:94:a0:96:91:32:2b:d0:99:d6:dd:f8:01:9b:cf:
                    84:5a:f4:53:f8:99:5d:38:7e:60:21:25:63:6a:78:
                    ac:47:f3:55:11:85:1a:f3:5d:8d:9c:3f:81:1e:16:
                    72:4e:b0:01:a0:ad:5f:95:38:a4:de:4e:ee:a8:66:
                    ec:c8:86:7d:2d:f4:b9:50:64:a9:2c:16:93:51:92:
                    14:d6:a9:50:91:b1:96:a8:41:f1:f0:dd:2c:ae:cc:
                    57:dc:8a:53:4b:68:db:02:79:39:67:f1:7c:8d:cf:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8D:68:F8:AD:8B:50:21:94:F7:58:FE:E6:5C:67:E8:98:88:50:41
            X509v3 Authority Key Identifier:
                keyid:25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:bd:a8:c6:5f:b1:d0:1a:fe:ce:f2:ec:3b:a9:52:e0:57:3e:
         d2:05:1e:e5:6a:2f:d5:8c:75:bc:6e:6b:65:aa:8d:5b:a5:f6:
         98:7b:ba:2e:ab:7a:cf:e6:af:88:36:b2:2c:b6:3f:4a:cb:10:
         30:df:ac:1d:6b:d6:ec:6c:f7:d2:f3:0c:87:32:4e:e6:1c:26:
         d0:e3:76:bf:c5:41:72:89:ee:71:48:59:40:f7:b7:8a:0d:12:
         dc:31:c9:db:2d:7b:7c:76:38:50:62:82:04:41:aa:6f:cb:d3:
         52:00:6b:e4:51:c8:45:cc:17:b5:2d:35:72:38:c4:d2:e3:f1:
         75:f3:4b:18:9b:e9:bb:81:42:52:08:8b:40:16:bb:fc:6a:94:
         ca:94:56:e5:08:50:bf:d4:9b:2e:a6:5f:4f:e7:45:85:ec:32:
         b0:a6:44:a1:5d:4a:86:2c:54:e3:c9:c0:9d:2d:dc:0e:50:b1:
         21:1a:af:a9:8f:40:7e:42:34:36:6a:72:5a:e1:72:b3:89:12:
         07:20:13:b7:89:a7:75:52:c6:67:bf:34:01:16:a7:66:21:67:
         6a:e2:4d:db:ad:3c:4e:f5:48:95:37:6d:4d:92:45:6e:8e:c2:
         64:4e:54:8d:dc:bf:a5:7d:48:0c:71:03:60:83:2a:cc:e5:7b:
         1e:8c:4b:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhGMTgxMTAvBgNVBAUTKDI1QzIwNTJDRUYzRDhFREVGMUFFMzg4NTVGRTdGQjEx
QjQ1NzgxMTUwHhcNMjUxMjIyMjA0NTQ5WhcNMjUxMjI5MjA0NTQ5WjAYMRYwFAYD
VQQDDA02OTQ5YWRmZS01OTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzWTg2Vijpc90+VQZsp0PIaVGn2pf9vVs3HFmMhQIzwMWdOvGMSp7bxPX/VA0
nqlpncEvx51kcVOSZ0aFn76hKe4faI7/ZXJUMkC2wEaq5ZbsuGdC8/8rs9eISVjS
RfvDrL6m5UjWTFbagRKj4OpJmhyZN1lI0pDu6OStITMG98h7rNYRoM/STh4cEC7T
sDp0LjqUPcvJlKCWkTIr0JnW3fgBm8+EWvRT+JldOH5gISVjanisR/NVEYUa812N
nD+BHhZyTrABoK1flTik3k7uqGbsyIZ9LfS5UGSpLBaTUZIU1qlQkbGWqEHx8N0s
rsxX3IpTS2jbAnk5Z/F8jc+AbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqNaPit
i1AhlPdY/uZcZ+iYiFBBMB8GA1UdIwQYMBaAFCXCBSzvPY7e8a44hV/n+xG0V4EV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYxOC82QzE0MTY4RTJG
NjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0N3hyamlGWC1mN0ViUlhn
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pjSUZMTzg5anQ3eHJqaUZYLWY3RWJSWGdSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEYxOC82QzE0MTY4RTJGNjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0
N3hyamlGWC1mN0ViUlhnUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADvajGX7HQGv7O8uw7qVLgVz7SBR7lai/VjHW8bmtlqo1bpfaYe7ou
q3rP5q+INrIstj9KyxAw36wda9bsbPfS8wyHMk7mHCbQ43a/xUFyie5xSFlA97eK
DRLcMcnbLXt8djhQYoIEQapvy9NSAGvkUchFzBe1LTVyOMTS4/F180sYm+m7gUJS
CItAFrv8apTKlFblCFC/1Jsupl9P50WF7DKwpkShXUqGLFTjycCdLdwOULEhGq+p
j0B+QjQ2anJa4XKziRIHIBO3iad1UsZnvzQBFqdmIWdq4k3brTxO9UiVN21NkkVu
jsJkTlSN3L+lfUgMcQNggyrM5XsejEsN
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:24 2025 by rpki-client