This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
File:                     JSwA6X56eGlZOIzyBKTH5kVYDGg.mft (raw, json)
Hash identifier:          z92oDDaamw4guGhF7MGiz3H+1jmbBR28URN8pVqbr0o=
Subject key identifier:   58:9E:D0:79:87:8E:3C:28:BD:34:05:DB:1D:36:08:18:49:E4:37:92
Authority key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
Certificate issuer:       /CN=A919DA26/serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
Manifest number:          CE
Signing time:             Sun 21 Dec 2025 01:20:11 +0000
Manifest this update:     Sun 21 Dec 2025 01:20:11 +0000
Manifest next update:     Sun 28 Dec 2025 01:20:11 +0000
Files and hashes:         1: JSwA6X56eGlZOIzyBKTH5kVYDGg.crl (hash: evZjcSa+YauJWjC9DMfJWqn1KWBjRDowvyE33vy3W1U=)
                          2: F17996F2B21C11EFBDB2BA25C4F9AE02.roa (hash: Ze1T47AivqwEiqsuxqeYxl8UpGN8xGhxkmK8W5sniC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl
                          rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 01:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA26, serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
        Validity
            Not Before: Dec 21 01:20:11 2025 GMT
            Not After : Dec 28 01:20:11 2025 GMT
        Subject: CN=69474b4b-1606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:ab:69:e9:60:e1:d7:92:2f:e0:5c:27:ad:
                    96:e5:ec:71:fe:c7:58:10:4b:7f:2c:c8:9b:0b:3a:
                    ae:db:f8:5e:6f:9f:9f:d5:69:cb:bf:9e:b5:aa:52:
                    87:76:3c:f7:c8:c3:4b:d2:0a:b4:a7:70:ec:24:3e:
                    a8:35:e6:30:05:84:3b:b6:be:5f:f4:1a:c5:fd:8e:
                    68:52:a4:e1:70:24:1e:f0:43:78:d7:6b:13:ba:22:
                    dc:4f:48:6f:07:b2:bd:c8:43:8d:68:65:3e:3a:06:
                    cd:93:0e:9c:12:1f:0e:d8:ee:31:52:80:40:0e:22:
                    02:90:10:14:5c:e8:f3:07:7e:a9:64:87:d7:9b:5c:
                    49:4c:b1:12:f4:96:45:9e:0a:67:48:48:45:00:69:
                    74:ee:a8:5d:96:20:e6:12:d1:78:1b:b4:b9:f4:af:
                    f0:8d:c1:96:d1:0b:d2:bc:d1:3e:c0:d0:52:30:c7:
                    35:78:96:11:8c:f6:64:a1:33:cc:dd:bf:26:15:b1:
                    0a:68:0c:d1:bf:ab:70:7f:41:bb:01:c3:ac:78:98:
                    5c:3e:cc:9a:3a:80:a1:39:2c:7a:77:c2:84:71:12:
                    c3:d2:68:dd:d4:29:87:79:79:8c:b4:25:a8:af:55:
                    d2:3b:8e:e5:b1:23:ed:ff:b0:87:83:80:d8:4f:8c:
                    1f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9E:D0:79:87:8E:3C:28:BD:34:05:DB:1D:36:08:18:49:E4:37:92
            X509v3 Authority Key Identifier:
                keyid:25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ed:93:eb:34:6a:28:3b:c5:d2:fc:9e:a1:b2:b7:7d:c9:57:
         fb:13:14:a2:52:2b:a1:9f:41:0b:19:02:f1:da:cc:56:50:9c:
         a3:e9:8a:32:b1:31:5d:69:27:97:67:7e:90:32:55:c4:68:0e:
         e2:6a:9c:d0:32:9f:c7:09:7b:08:75:ad:df:71:f8:d4:9f:a9:
         3a:74:d6:de:7b:82:c3:a2:47:f0:1d:60:77:e7:f8:fc:eb:5a:
         99:71:fb:84:e6:bd:f1:d9:29:f0:d1:ad:b7:82:05:60:18:25:
         08:d7:7d:94:e0:19:69:36:ed:be:f7:58:cf:6e:4e:04:bc:42:
         3b:55:85:a4:a8:64:18:ca:a6:6c:dd:e1:a6:49:0a:c4:57:c9:
         80:96:95:e8:1c:b0:8f:6f:95:5a:90:00:71:c5:b9:18:ac:e7:
         44:3c:6d:e7:9d:47:fc:d8:29:50:ab:2d:17:6d:40:91:c2:d0:
         3c:32:c5:f6:9c:e3:57:ec:9a:92:8f:6e:7e:42:83:ba:28:70:
         b4:b1:e0:4a:3e:3d:13:5c:f6:b5:9b:87:2d:2e:ab:be:db:3c:
         e6:c9:37:21:2f:8a:1f:30:29:f5:3d:4c:06:71:c8:19:91:1e:
         11:f5:42:bb:6b:e4:ca:09:24:e7:1b:90:40:1b:ea:63:32:7e:
         fa:bc:2c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:34:29 2025 by rpki-client