This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
File:                     jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json)
Hash identifier:          GjnBvfQoIOxLHBCblm7T9ujUoRjCMILocfqCI4CbrMo=
Subject key identifier:   4D:3B:C0:C6:54:89:70:75:50:98:BF:60:0B:8D:E9:12:63:43:EF:92
Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07
Certificate issuer:       /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
Manifest number:          015E
Signing time:             Mon 15 Dec 2025 03:29:17 +0000
Manifest this update:     Mon 15 Dec 2025 03:29:16 +0000
Manifest next update:     Mon 22 Dec 2025 03:29:16 +0000
Files and hashes:         1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: vOk9YL+BYFAAp7DnUCqom14WrpO5+q7Ol2jutzBnHtk=)
                          2: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: IHeuJXUBtMHC4lViJX3ZGo0Fkl0iqD4ifRHgtn92cpw=)
                          3: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: hDHi1gPuoYO8h6h8cGnKDVo4yTuh05LbS9LRcNViWNs=)
                          4: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: iEDYEWfoYMQVJJ00VYr7IBwUel6B4Ra9OcE7UNEl9qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl
                          rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 03:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
        Validity
            Not Before: Dec 15 03:29:16 2025 GMT
            Not After : Dec 22 03:29:16 2025 GMT
        Subject: CN=693f808d-d55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:44:b7:ae:d4:4a:a7:af:be:fb:e2:99:3f:
                    81:c7:7c:ef:34:45:75:ea:ec:45:f6:51:ee:84:a2:
                    be:1d:f4:0b:1b:19:db:65:fe:c1:1e:01:49:ed:63:
                    98:7e:0e:4d:91:11:32:f8:41:64:64:14:19:8c:3c:
                    29:00:04:34:b7:48:7e:bb:9b:a2:65:61:97:a7:28:
                    f1:3e:c4:f7:50:cb:20:18:6c:9b:3c:ff:0c:84:91:
                    5b:4f:94:85:48:d9:74:4c:5d:f3:f5:bf:06:0e:9b:
                    e5:90:7c:9f:69:07:76:d0:82:b3:2d:c2:81:39:5d:
                    bc:bc:ac:65:1e:fe:ca:f9:4f:b0:1e:81:a5:6c:5a:
                    44:c2:db:15:c2:f1:6d:32:16:40:da:15:3a:60:46:
                    ad:9a:98:6f:91:2b:e2:fc:c0:bf:5f:d8:cb:4a:ef:
                    3b:3b:f7:e2:f3:ae:28:42:cb:ab:be:9f:1a:9d:54:
                    34:4c:70:ea:28:30:94:5a:30:bd:b2:a3:2f:96:aa:
                    dd:b8:b1:b4:6d:d8:b6:12:26:0f:c5:6d:db:a7:8a:
                    09:d8:bd:c7:47:56:f8:6a:25:9b:db:02:c9:f7:50:
                    ad:1d:05:78:62:cc:8d:6d:5d:94:fd:d0:b5:88:42:
                    bf:80:d7:10:33:b6:45:5d:1f:d7:0b:cd:4e:56:ff:
                    48:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3B:C0:C6:54:89:70:75:50:98:BF:60:0B:8D:E9:12:63:43:EF:92
            X509v3 Authority Key Identifier:
                keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:81:a2:91:9b:e6:1c:4b:00:f2:1a:ac:27:56:e7:5a:13:11:
         20:bd:6d:98:c7:80:9f:83:6b:2e:26:a4:e4:b5:67:bc:9c:f2:
         f9:c4:bd:60:0f:d9:46:c6:54:53:12:5d:73:2f:87:9b:25:09:
         ba:e1:f8:8f:6a:5e:1b:94:01:47:86:a4:6e:5a:d2:81:ed:ff:
         22:45:cc:2f:d3:fc:4e:c6:83:01:91:1b:eb:c6:7d:60:01:5d:
         b8:3f:8a:72:3a:26:51:05:94:45:56:8d:0e:4d:20:a3:0e:63:
         8b:33:42:5c:57:99:0d:60:f3:4c:a8:a1:f3:e0:36:de:27:1b:
         c1:f1:62:e3:40:de:79:40:9a:c7:a6:c8:a6:fd:ce:87:bf:7b:
         69:94:9e:28:f9:84:3e:2a:ec:59:2e:49:ee:98:33:bb:78:a9:
         90:3c:c2:24:4f:75:87:e5:5d:68:31:c1:c8:58:f3:7d:b0:db:
         cd:c9:e1:4e:f1:f3:ba:e6:f7:b0:e7:13:9b:b5:e4:76:7f:f7:
         70:cb:ef:19:21:51:0c:7b:42:2c:f9:d2:d6:87:28:96:ff:48:
         c0:76:7f:be:24:7c:4a:11:d4:50:c7:b1:9c:f6:dc:12:ae:b5:
         c2:54:5c:6c:de:ff:b7:a6:65:4a:48:0b:bc:c6:7d:2e:89:ef:
         4a:9e:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 00:06:08 2025 by rpki-client