This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
File:                     jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json)
Hash identifier:          HKVzHBu8995dg2l/GA4kTnbUw90/5Zi8bTo+KVKfLzE=
Subject key identifier:   A9:EE:FA:13:76:3C:6F:F9:92:EA:FD:AB:C2:4D:8C:E0:A2:EC:A8:C2
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Certificate issuer:       /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
Manifest number:          BE
Signing time:             Tue 23 Dec 2025 04:55:50 +0000
Manifest this update:     Tue 23 Dec 2025 04:55:49 +0000
Manifest next update:     Tue 30 Dec 2025 04:55:49 +0000
Files and hashes:         1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: p0fpPcfvCHQ/ZqgJE/zzsutMj5nzXl7UmGg/s5DoAxs=)
                          2: A1FE9790C1B111EFACAB4071C4F9AE02.roa (hash: nTebHJ2nY/z4pA9GR9Zium43gwzyk8WFga213syhwvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
                          rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
        Validity
            Not Before: Dec 23 04:55:49 2025 GMT
            Not After : Dec 30 04:55:49 2025 GMT
        Subject: CN=694a20d5-892e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:74:9b:39:91:c5:e2:06:50:05:74:32:d2:
                    01:33:80:ca:bc:48:15:57:4d:10:f7:49:9e:74:d2:
                    9a:20:7e:78:1d:65:1d:a0:7a:a3:eb:44:f3:f2:63:
                    f8:0e:5d:4e:d4:29:63:2e:ff:5d:97:6d:56:21:dd:
                    03:56:1e:4d:c1:d5:0b:8b:ba:74:61:a9:2f:a4:05:
                    39:c9:ae:db:c1:64:3a:c3:f9:0b:d1:00:55:7b:f9:
                    f6:ec:b0:6b:d2:a3:3e:da:bf:64:04:21:da:32:8c:
                    47:91:57:af:34:53:a3:b8:91:68:9b:01:5a:01:28:
                    84:5c:8d:9f:48:cc:db:3f:ed:84:61:31:26:67:f9:
                    fd:98:07:e4:eb:f3:2f:ad:66:50:af:37:d2:38:47:
                    91:66:06:2c:eb:c5:3a:68:3e:b8:da:8a:71:7a:73:
                    76:de:c2:23:79:8d:06:7b:94:61:aa:22:c8:be:a3:
                    5a:db:b6:56:49:85:1d:a7:4e:03:ef:83:11:62:7b:
                    63:51:89:c7:82:c8:21:6d:38:e5:b4:bd:31:e6:19:
                    e3:d2:72:ef:37:94:ca:ec:26:5f:28:be:eb:a9:53:
                    66:26:a5:bd:c2:49:b0:3c:9f:b9:ef:aa:22:a2:13:
                    d5:e1:7b:94:1b:fb:17:f4:0b:d5:22:b3:d5:21:73:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EE:FA:13:76:3C:6F:F9:92:EA:FD:AB:C2:4D:8C:E0:A2:EC:A8:C2
            X509v3 Authority Key Identifier:
                keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1e:70:d7:31:fb:c1:0f:0c:58:82:21:41:c8:c5:51:74:b2:
         b6:7f:57:1f:12:16:43:33:f4:cf:8d:7b:6c:78:5c:e2:da:41:
         23:e1:7a:bc:b3:97:ef:a0:a9:c0:b0:d1:4b:7c:23:a1:9e:0b:
         1f:8f:d5:0e:1d:63:6f:cb:bd:f6:11:70:86:c5:91:a1:81:7e:
         5c:ed:95:d6:5e:41:b9:b4:70:22:62:95:fe:be:73:f3:b3:80:
         8a:bd:78:c7:aa:ba:52:ff:3e:dd:f7:4b:7e:4c:19:02:59:df:
         5b:0f:eb:4e:e9:1f:93:f6:f1:8c:94:ea:92:4f:e9:f0:e4:93:
         41:4d:5e:e1:8e:33:07:39:ae:0b:8f:fd:d2:17:33:34:b1:f8:
         6c:15:1d:b1:e8:1a:ac:01:a5:53:78:d5:42:22:7c:39:b2:01:
         b5:f5:1b:27:59:6c:96:ee:74:67:01:3d:a7:35:4a:68:97:28:
         ea:46:36:e7:69:13:fb:4d:30:5e:48:5f:7a:9b:d0:7f:62:11:
         71:a8:c6:2c:c8:1e:7b:02:cb:34:fc:bd:3f:63:11:45:50:71:
         00:55:45:70:cb:24:f9:32:02:84:7b:59:17:48:0e:16:f0:3b:
         35:25:e4:e7:87:fd:c0:47:3e:6c:4a:27:bc:62:fc:cb:93:47:
         62:09:40:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:45 2025 by rpki-client