This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
File:                     JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json)
Hash identifier:          yg5BLXfx5ZAyKyVYLAw7px+cerPJc4ihvdHQM+OApEA=
Subject key identifier:   01:C5:19:67:EB:F6:1A:0E:0B:57:07:91:79:01:F5:AD:91:0E:98:85
Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
Certificate issuer:       /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Certificate serial:       070E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
Manifest number:          06F5
Signing time:             Mon 22 Dec 2025 21:16:05 +0000
Manifest this update:     Mon 22 Dec 2025 21:16:04 +0000
Manifest next update:     Mon 29 Dec 2025 21:16:04 +0000
Files and hashes:         1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: fpyBE0aii/4ogsfIOLHIRGGNalIXIA+BYqTq5X1S5ps=)
                          2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: +e3HUlovKDRpOXqB7/PZlzff1isIhCZMYZe5Pc4VAfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl
                          rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1806 (0x70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197227, serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
        Validity
            Not Before: Dec 22 21:16:04 2025 GMT
            Not After : Dec 29 21:16:04 2025 GMT
        Subject: CN=6949b515-e507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:a2:26:90:26:f4:57:a3:73:58:95:5e:7e:
                    e1:e1:74:3b:58:c0:d3:49:26:fe:4c:3b:7a:4f:c8:
                    45:43:cb:5d:ad:d9:81:0b:be:87:46:b6:70:90:c3:
                    3c:31:7e:c1:af:4a:21:f8:1b:6d:f9:80:e2:29:8a:
                    0a:26:f2:01:84:cc:de:30:36:26:6f:09:b3:a2:ad:
                    c0:76:9e:16:cf:2d:59:d1:84:a9:a3:ee:30:72:b5:
                    fe:b9:9c:33:cb:a8:02:70:5e:42:40:88:74:fa:9c:
                    ac:54:0e:38:0a:11:66:9b:e9:ab:55:00:e8:a4:d7:
                    ac:08:93:37:76:90:99:7d:97:cc:19:7f:7d:fd:14:
                    16:60:ba:50:e0:8e:49:fb:22:5d:1c:8f:a1:c7:67:
                    8f:92:d6:01:ae:50:a0:ef:cf:81:29:ce:6a:3d:27:
                    23:64:66:7d:2a:a8:19:c6:af:ce:2a:d8:0a:82:56:
                    0c:e9:b0:44:ff:fd:6d:e3:86:74:07:bd:8c:e7:90:
                    e1:d6:a2:84:f1:28:63:0e:c7:0c:84:f5:26:ff:80:
                    c8:8c:44:fd:16:5a:2a:fd:54:6d:32:d5:ae:82:06:
                    02:4e:88:22:88:02:64:2b:1c:ef:fd:1b:03:64:eb:
                    74:58:f9:5b:d2:85:1e:e4:d2:7e:6b:86:b9:08:59:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C5:19:67:EB:F6:1A:0E:0B:57:07:91:79:01:F5:AD:91:0E:98:85
            X509v3 Authority Key Identifier:
                keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:aa:13:f5:27:ad:fb:05:46:14:0b:c8:e3:c1:15:f1:97:5f:
         4a:7c:b4:a3:e1:f9:dd:4e:5d:10:c8:08:4a:44:27:2f:e5:64:
         f0:5a:ff:8a:fd:7a:43:61:e3:9f:1f:af:bf:bb:7a:a5:54:3d:
         78:95:18:cd:b5:6f:44:56:6a:39:b0:61:b3:09:8c:e0:c2:9d:
         79:bb:a5:e3:af:01:17:0e:17:29:39:01:de:14:5a:6e:a9:1d:
         db:69:c8:3f:08:9b:44:af:82:5f:c0:e4:8d:83:75:24:46:5f:
         0b:f9:a6:4d:27:e1:f4:3a:4c:51:8f:9a:ee:df:16:93:61:74:
         56:cd:62:56:7d:9a:b2:bb:3d:34:90:66:85:e3:bb:22:2a:68:
         b1:f4:37:58:e0:9c:b9:6d:d0:e8:57:68:83:7e:8f:97:ca:65:
         44:de:d0:00:e0:71:a5:01:7e:bf:b6:ff:77:7a:31:7c:3d:88:
         88:8a:00:16:48:60:b9:e5:c6:57:9b:c9:01:e2:07:a8:cd:9f:
         dc:31:c1:b0:a0:33:f7:8a:35:dd:37:e0:4b:63:34:97:31:fd:
         6e:cd:55:be:04:8c:cc:b8:0e:7c:9c:4e:04:4f:b6:e4:90:e2:
         fe:f2:2e:95:35:1b:cb:9b:88:50:6b:96:6c:80:f3:53:a3:4c:
         cb:83:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:45 2025 by rpki-client