This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
File:                     jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json)
Hash identifier:          4S1vkh6HFvcSHqVmO0cnuSAOk1g79quJQfeH9q7vhuw=
Subject key identifier:   23:50:BC:CE:5A:50:FE:69:69:80:1C:4F:9F:79:90:B1:5D:A5:B6:27
Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
Certificate issuer:       /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53
Certificate serial:       0260
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
Manifest number:          0257
Signing time:             Fri 19 Dec 2025 00:54:12 +0000
Manifest this update:     Fri 19 Dec 2025 00:54:11 +0000
Manifest next update:     Fri 26 Dec 2025 00:54:11 +0000
Files and hashes:         1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: Mwk5ljskf7eQHJDE/80Yj58aNjjCHBAoQeVkdFSKpnc=)
                          2: 5D0766AC28B411F0A1AE5A68C4F9AE02.roa (hash: IyWwjIStMD7CLHAYI80G9u0bSfl+ZxcEcIIy1oHhXzo=)
                          3: 5D8FF85028B411F0A1AE5A68C4F9AE02.roa (hash: cQgwz6VDyiOHU3CVFbp+dck6b+15ezgPGKxe1LIqxfA=)
                          4: 5E73EF1028B411F0A1AE5A68C4F9AE02.roa (hash: egVVNLsPdwUoef36phQTdD6372WDtBPUXE4iD/r+2cc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
                          rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53
        Validity
            Not Before: Dec 19 00:54:11 2025 GMT
            Not After : Dec 26 00:54:11 2025 GMT
        Subject: CN=6944a234-d0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5b:3d:2e:59:ff:63:55:70:57:20:e0:22:ea:
                    75:0d:8d:45:fa:df:bc:a9:18:45:b9:e0:a1:7f:41:
                    95:38:db:8a:6b:69:43:2b:de:7a:52:2a:47:72:23:
                    00:01:8d:14:02:03:f9:db:cc:50:da:5b:86:3b:8d:
                    e1:d3:fd:2c:12:ae:bf:75:cb:56:8c:79:b5:c5:e9:
                    9b:9b:93:ee:ca:83:59:02:7e:66:6a:8c:f5:eb:c8:
                    e3:4c:1b:35:4a:20:e8:86:86:c8:e5:d2:7e:1b:bc:
                    33:c4:f5:73:a8:a2:27:c0:3f:44:fa:0c:66:b1:fc:
                    d9:1d:47:0d:97:89:7d:45:be:6b:a5:b9:5f:47:56:
                    60:94:14:90:e4:fa:26:27:46:55:7b:d2:b3:4a:47:
                    ba:71:8f:fb:9d:9e:6b:2c:a0:df:2d:de:9a:43:45:
                    52:0b:10:e5:c6:50:fe:2b:f6:89:2b:15:a5:11:8f:
                    af:59:14:29:0c:5a:a4:8d:36:3a:64:36:32:f3:b8:
                    48:62:19:ac:f5:c5:8b:82:c1:e1:37:e2:d9:87:b7:
                    11:6c:7d:dd:f3:dc:dc:19:eb:b6:d6:8a:03:b4:ee:
                    0d:30:11:36:7c:93:c1:b6:15:32:e6:8a:a4:a0:3b:
                    59:c1:a8:a7:f0:e4:60:d2:7c:ff:f2:3d:1b:e2:01:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:50:BC:CE:5A:50:FE:69:69:80:1C:4F:9F:79:90:B1:5D:A5:B6:27
            X509v3 Authority Key Identifier:
                keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:66:5f:47:97:a0:c8:50:dd:36:49:d2:a1:66:10:24:b2:7c:
         91:81:7f:57:4f:a0:ab:6a:e6:ab:f1:81:65:37:1a:f8:2f:59:
         20:ed:37:01:52:ef:1d:6e:0c:05:e5:ca:5c:b2:cc:a9:6d:01:
         72:a0:9b:90:a9:41:d2:3e:a3:0b:49:c0:61:26:36:36:59:8f:
         2c:a8:61:e5:b5:ec:af:da:1e:e4:7a:4a:e6:6e:cb:50:9b:8d:
         cb:41:cb:16:da:59:c9:13:f9:26:fd:44:72:da:27:0d:74:0b:
         ad:d3:bd:e4:1a:22:04:99:ca:4e:ed:9e:1d:fe:52:e6:c6:a9:
         41:3a:12:3a:fb:33:fe:3c:9d:fb:46:b8:86:28:17:dc:53:30:
         52:5a:a1:b9:2c:cd:55:35:6a:ef:3f:6c:88:96:03:e6:52:e1:
         60:66:84:25:b7:dc:29:46:dc:f6:91:2d:8e:0d:38:85:b4:ba:
         fd:5e:9e:fa:77:72:e3:aa:18:10:0d:0e:32:0b:07:29:1f:06:
         b8:eb:17:e9:f2:3c:7f:80:cf:60:c4:82:13:9b:b4:4e:aa:c2:
         93:b6:83:40:bc:ee:32:1d:8d:70:95:ac:62:63:8a:d9:ae:dc:
         a2:af:bd:4d:ca:4f:28:b5:39:ab:41:a6:9c:7d:26:92:07:07:
         39:1b:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:27:24 2025 by rpki-client