This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
File:                     SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft (raw, json)
Hash identifier:          HtFK62j1p3eCcSo9e1PFWO1FjuzhwZrobM0StN9gn6M=
Subject key identifier:   2C:E8:68:03:48:07:B4:A6:AF:45:3F:F9:99:E2:AF:43:90:08:6F:2C
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Certificate issuer:       /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial:       0E7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
Manifest number:          0E69
Signing time:             Sat 20 Dec 2025 17:26:41 +0000
Manifest this update:     Sat 20 Dec 2025 17:26:41 +0000
Manifest next update:     Sat 27 Dec 2025 17:26:41 +0000
Files and hashes:         1: SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl (hash: LW/sORy5KgJZLNLlzlxhfuXp8RnFeuD95HjutOUq16k=)
                          2: AE14DBAA997711EAB12AD74CC4F9AE02.roa (hash: iA04EyF3JdExva3/idlBuWytZyJRag874pO7pySXwJg=)
                          3: DB87E692ADB211E99AAEE879C4F9AE02.roa (hash: 2kXWl4Cs1R/aPiAdtvMJLAsl+3ClYTwwDDVh+n0Dv2Y=)
                          4: 28BC5490487F11EAB8C7545FC4F9AE02.roa (hash: S4AV+hD7m9juwu/JMpkYcCbzUHhn99B0UXH2YVYLeEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3711 (0xe7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
        Validity
            Not Before: Dec 20 17:26:41 2025 GMT
            Not After : Dec 27 17:26:41 2025 GMT
        Subject: CN=6946dc51-c844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:1e:e6:0d:c9:f8:d2:8a:e2:43:28:75:d3:
                    ed:79:09:5e:d5:e2:78:bd:89:01:fb:3b:8d:9f:77:
                    ad:b4:11:c9:f1:1b:c0:cb:32:a7:a1:36:88:10:00:
                    81:ac:49:64:de:88:9c:8d:cf:04:a0:c2:16:38:5b:
                    99:4a:58:b7:13:63:a0:c3:c1:96:82:c9:a0:da:b0:
                    79:e9:cc:d4:91:3d:23:7f:26:c3:e3:60:4a:a8:a5:
                    96:2c:6c:ba:01:1a:36:b3:d7:98:46:36:eb:f9:a9:
                    e0:d0:12:21:56:0b:08:d2:77:38:48:de:57:62:02:
                    52:5b:dc:95:2f:9f:60:ff:0d:68:dc:14:1e:9b:13:
                    3b:10:48:f0:95:63:a0:8c:cb:7d:e8:87:36:60:af:
                    ee:e2:49:3d:ef:e6:6d:ec:15:bf:b2:85:35:59:04:
                    b4:90:01:f6:19:c9:0e:39:34:17:36:e0:8b:88:f0:
                    d7:0b:07:cc:1f:fd:9a:63:81:98:18:95:e9:33:19:
                    40:9a:d0:e6:fb:e0:b7:3d:65:ab:7e:eb:51:89:0d:
                    db:f3:36:8a:17:43:a7:ad:3f:c2:a5:91:13:0a:ad:
                    24:66:4a:23:f8:c3:b4:11:29:be:24:b2:64:ab:ed:
                    10:87:bc:b4:61:b5:d3:76:1b:07:ed:a1:ea:75:2c:
                    8b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E8:68:03:48:07:B4:A6:AF:45:3F:F9:99:E2:AF:43:90:08:6F:2C
            X509v3 Authority Key Identifier:
                keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:62:b2:0c:a4:ae:49:b4:89:65:61:5f:22:47:2d:78:f4:84:
         50:26:7e:1f:11:a1:2b:d9:7f:c7:c3:de:94:ad:ea:ad:93:ba:
         80:94:87:e8:18:b7:a3:80:00:5f:36:50:3a:7d:33:dc:e6:92:
         8b:d3:63:69:dc:25:79:8c:a5:35:c9:e4:4a:60:a9:7c:f2:23:
         a8:e4:25:11:ad:35:02:17:58:d7:ea:d8:71:5d:e6:09:39:89:
         38:97:d3:0c:b1:b6:83:a4:5f:12:38:40:f5:de:be:b7:78:5f:
         b4:27:72:e5:31:80:00:a4:9b:14:18:98:b7:40:91:fd:ed:f0:
         c5:52:88:b1:1e:75:f6:51:b9:e9:7a:5d:76:ae:9e:b4:cf:2e:
         ff:ce:43:2e:61:ba:16:04:82:14:3d:bb:18:96:37:99:de:73:
         a8:e9:56:18:e8:d4:39:e7:6e:3e:46:41:59:e1:c3:c0:8b:1c:
         12:37:cc:c2:9b:c0:ad:0a:fe:b6:c1:c8:89:c3:bf:6a:7b:72:
         66:2e:36:a2:a9:22:c9:67:4c:e6:7b:1f:ed:42:32:0e:1c:3c:
         04:3e:5b:6c:73:06:e1:61:ac:82:df:1a:9f:2c:08:6d:37:2b:
         b8:81:d4:18:77:04:c4:e4:40:3c:1f:20:cf:af:2c:2e:d8:f0:
         46:e3:53:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTMxNTMxMTAvBgNVBAUTKDQ4QzI3RkZGQjY0MjQ3MTJGQzZGQzYyODcxRDUzNkM1
MzFGRUYxOUIwHhcNMjUxMjIwMTcyNjQxWhcNMjUxMjI3MTcyNjQxWjAYMRYwFAYD
VQQDDA02OTQ2ZGM1MS1jODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr8Me5g3J+NKK4kModdPteQle1eJ4vYkB+zuNn3ettBHJ8RvAyzKnoTaIEACB
rElk3oicjc8EoMIWOFuZSli3E2Ogw8GWgsmg2rB56czUkT0jfybD42BKqKWWLGy6
ARo2s9eYRjbr+ang0BIhVgsI0nc4SN5XYgJSW9yVL59g/w1o3BQemxM7EEjwlWOg
jMt96Ic2YK/u4kk97+Zt7BW/soU1WQS0kAH2GckOOTQXNuCLiPDXCwfMH/2aY4GY
GJXpMxlAmtDm++C3PWWrfutRiQ3b8zaKF0OnrT/CpZETCq0kZkoj+MO0ESm+JLJk
q+0Qh7y0YbXTdhsH7aHqdSyL9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzoaANI
B7Smr0U/+Znir0OQCG8sMB8GA1UdIwQYMBaAFEjCf/+2QkcS/G/GKHHVNsUx/vGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzE1My84NjA3Nzk4MEFE
QjIxMUU5OERBRUM0NzlDNEY5QUUwMi9TTUpfXzdaQ1J4TDhiOFlvY2RVMnhUSC04
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NNSl9fN1pDUnhMOGI4WW9jZFUyeFRILThacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzE1My84NjA3Nzk4MEFEQjIxMUU5OERBRUM0NzlDNEY5QUUwMi9TTUpfXzdaQ1J4
TDhiOFlvY2RVMnhUSC04WnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCnYrIMpK5JtIllYV8iRy149IRQJn4fEaEr2X/Hw96Ureqtk7qAlIfo
GLejgABfNlA6fTPc5pKL02Np3CV5jKU1yeRKYKl88iOo5CURrTUCF1jX6thxXeYJ
OYk4l9MMsbaDpF8SOED13r63eF+0J3LlMYAApJsUGJi3QJH97fDFUoixHnX2Ubnp
el12rp60zy7/zkMuYboWBIIUPbsYljeZ3nOo6VYY6NQ5524+RkFZ4cPAixwSN8zC
m8CtCv62wciJw79qe3JmLjaiqSLJZ0zmex/tQjIOHDwEPltscwbhYayC3xqfLAht
Nyu4gdQYdwTE5EA8HyDPrywu2PBG41MO
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:13:43 2025 by rpki-client