This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
File:                     mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft (raw, json)
Hash identifier:          lvAW7WFd1FiLXOmz68ncdfupCDUnbebfOvrqgmC8KdE=
Subject key identifier:   AF:60:AB:69:AA:27:68:3A:B0:64:A7:1D:29:F5:85:5E:A7:2C:EB:B2
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
Manifest number:          37
Signing time:             Wed 17 Dec 2025 07:33:02 +0000
Manifest this update:     Wed 17 Dec 2025 07:33:02 +0000
Manifest next update:     Wed 24 Dec 2025 07:33:02 +0000
Files and hashes:         1: mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl (hash: paSu0yxJNuIXS+GrJCN7Yo6mYmImcwMBvXhB4gdTsB0=)
                          2: 5537463AC91911F0AFA34C6DC4F9AE02.roa (hash: yoL3EzYooRWeprtTC3zU7L7b1cT/XHQ/zGKxRBGUmLI=)
                          3: B2F27AFAC92411F09F068126C4F9AE02.roa (hash: DtE4Gub6HXNOtAF1R9QWTavpwFvcacPl8V38z7ZHdcg=)
                          4: 9E825176C91A11F0876AC673C4F9AE02.roa (hash: C9zxlmppcqgvN9kMFuhGoxlegcOeqD3KVMdKppsyxnI=)
                          5: 576F51B8C91911F0AB974C6DC4F9AE02.roa (hash: IB2q7pBY7tiWYmmMufMjNcggqg1Dv4TLNZ3XaMRxv3I=)
                          6: B3994B8CC92411F0928E8126C4F9AE02.roa (hash: AH7IPsSFFEPRn+zV12YskMymoNAR9h6j8zf44NNZ4tM=)
                          7: 336F66ECD4C011F0A4EAFB34C4F9AE02.roa (hash: u5c87bpH/v0n77/1kuGY2HxPC8dYBbIrlXqxgYtZaD8=)
                          8: 56F1C6BCC91911F08B394C6DC4F9AE02.roa (hash: sq2FH3KxuzVCERwQzUbxosanTt/57fQSY7WjnEZYE9A=)
                          9: 9F196B2EC91A11F0AAB4C673C4F9AE02.roa (hash: A0BIKZWnnoXyCWoiUzYWJD9AJntPcwDJG9Ku+oPkh0Q=)
                          10: 57F3E1BCC91911F083BE4C6DC4F9AE02.roa (hash: jJXT7Vo6Xui3neNH5mn3y9zT7Dwin+uruwOajavMv80=)
                          11: B40A9A4EC92411F09FAB8126C4F9AE02.roa (hash: MIjlw2AczUDY3cA2K0ShhfW4ijFo/ptiKrc7rq/4vDM=)
                          12: C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa (hash: yB/rbr3KTa0Lv4V6moKe6PwRrOT5DlgZwzbNGvZk4fU=)
                          13: 1C2DE6A6D4A311F08D323E54C4F9AE02.roa (hash: dqDrrtigHPKnUREo4Hovs3ow0vpivipCVp2qxyLqYJ4=)
                          14: 55B2771AC91911F0BA7D4C6DC4F9AE02.roa (hash: +Lyza8h2/Z4uXs2d+lFs1I7p0cxofH7YS5tzMbCiLyc=)
                          15: 7D679C84C92511F09CF68054C4F9AE02.roa (hash: 7etvoXAGwyYEYpaGBfDwDld33O7lKbrVTucALnOeq/Y=)
                          16: 230E492ECB6711F0991B7E4FC4F9AE02.roa (hash: M7DPbOG45eZHQqrP0j+lb07O1Ass56QxDbwI6RBmTIw=)
                          17: 9E1FAF62C91A11F08AC0C673C4F9AE02.roa (hash: EYJuj7Ys2yn/Y3ogPFCOzhRA1x4eMfO+KUjbme3Rfpk=)
                          18: 9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa (hash: ZT5u+LiwEwXLyRnjvq/L61qw+MNZgpjnIsJ8w3vDTcA=)
                          19: 58EF9BECC91911F080D34C6DC4F9AE02.roa (hash: j1lbvHYehq+WgCpoOKiItpNlLY8XBd6+Fc/mlE4o5Wc=)
                          20: 567E4552C91911F0BB194C6DC4F9AE02.roa (hash: ckqlJh190Z78TnMGe9Si/aLYThzKpCI7qGyR/k/KtyY=)
                          21: 20151124C8EE11F0BD2FFA4CC4F9AE02.roa (hash: IVcqyVphDBj8NjJzKEcLhgljJS7gLCls1Em+kdKrq9M=)
                          22: B4B21A80C92411F099228126C4F9AE02.roa (hash: 8u4dud3avbhQgE5CopYuEjp9f5QzWDBwOaQ9kBXQeOY=)
                          23: D008EA4AC92211F0AD92BA21C4F9AE02.roa (hash: 4PFl+djOCvc8xGyc3NA3mOXdB4cbVSoZGtyLfcbiQvA=)
                          24: 9DA31C0EC91A11F0AEDEC673C4F9AE02.roa (hash: xTLF64HiFnl4Ua3DqFhX3rQXHABClSMIShrBUqKCQDg=)
                          25: 9F9D4E9EC91A11F08745C673C4F9AE02.roa (hash: yDVSc2+F6J/qBiAoUaI9aYB4F42z0AMiAWD72TYkXo8=)
                          26: A0000D2CC91A11F08D74C673C4F9AE02.roa (hash: 3apnTYZUuA7N2cNukLCN12qI42VG+eaxv1WLiU5/scg=)
                          27: 2486E3E0D4B011F0A4E6361AC4F9AE02.roa (hash: PFk1mSnoqV2B8nNi8/2CP9saQFwyA5WBQtUNoxuoSj0=)
                          28: B1E31BF6C92411F087908126C4F9AE02.roa (hash: Yz3B628v+Zuwc3iSweZDybyNZNxIugyujdSDXvZHFHU=)
                          29: B2815168C92411F0B6E88126C4F9AE02.roa (hash: +uKZk71p6xoGxSkkGPJRZ/3fiUO3ZyZAyRc1mBvILaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Dec 17 07:33:02 2025 GMT
            Not After : Dec 24 07:33:02 2025 GMT
        Subject: CN=69425cae-1bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:e9:34:35:98:ef:aa:d9:f0:d0:49:ba:07:
                    37:99:9b:a2:66:a1:95:b6:fe:52:73:e1:1e:d9:b1:
                    35:b7:b5:f5:be:ba:48:42:6f:93:46:c5:6f:80:f3:
                    40:5e:61:53:3c:65:7b:7a:c8:c2:21:39:18:41:7c:
                    78:7a:98:1a:b9:d0:56:a0:ad:25:52:8e:b3:b9:01:
                    58:38:17:75:ea:3e:d0:bb:46:9e:09:c2:18:06:40:
                    de:7a:02:28:0e:d8:0d:4c:66:a8:9f:36:a8:91:da:
                    b0:66:c1:35:8d:9a:f4:3f:75:d0:ca:3b:a6:cd:b9:
                    fc:10:94:e1:6b:f7:b8:05:b9:87:d1:37:16:e4:9c:
                    cf:92:ae:18:77:b3:71:fc:c8:35:be:2b:c0:33:48:
                    3c:7b:21:fc:65:64:6d:84:51:25:5f:cf:47:e3:0a:
                    5f:c0:d8:b6:a4:97:4d:79:d1:9a:e1:d2:2f:e3:c5:
                    44:48:d4:a9:4d:a4:c7:35:e0:91:a5:f9:24:f0:c8:
                    bf:d2:4c:d2:10:ed:4a:65:7b:2d:5e:83:aa:b6:d3:
                    c9:0d:33:5e:28:14:f8:ce:34:84:4c:c6:c7:30:de:
                    2e:b8:5a:c5:ec:18:37:82:a3:3a:30:e4:95:7d:01:
                    0c:7a:51:4c:8f:c6:71:59:eb:d2:0a:79:96:c0:9b:
                    7f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:60:AB:69:AA:27:68:3A:B0:64:A7:1D:29:F5:85:5E:A7:2C:EB:B2
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:da:40:38:ea:cc:dc:5e:7e:58:e9:67:2b:36:ea:5d:57:b9:
         31:ef:fa:18:d0:ce:c3:a5:4e:00:95:96:80:cf:70:04:21:c9:
         a5:02:d6:88:d5:b4:90:94:de:1e:f0:50:34:d8:a5:d2:09:61:
         56:0c:08:b2:7b:45:b5:e1:fb:4e:34:c7:01:93:4f:c1:20:3f:
         ac:02:3d:78:90:a9:07:aa:9d:02:5e:a7:68:af:79:5d:38:86:
         90:9e:b7:96:0e:a7:f1:24:5f:a4:12:ba:5b:88:ea:b1:9f:6b:
         be:1c:21:d6:9f:e0:b4:c6:57:c2:7c:76:85:40:f4:6c:c3:cd:
         b1:f5:1f:a6:60:0c:6a:ee:7c:fb:5d:74:02:b6:e7:54:9f:17:
         69:43:5c:06:0a:2d:37:f0:93:9d:1e:98:59:72:28:3d:cf:26:
         48:71:cf:ed:fe:3b:3a:89:64:2d:77:96:d7:7c:fc:5d:f6:cb:
         8a:3c:54:11:b3:ca:9d:29:43:e4:d4:bd:21:05:79:63:30:d8:
         d9:b0:72:51:f9:ed:13:0c:63:19:6d:b1:d8:01:37:ad:a1:cb:
         ac:10:d6:82:e9:4d:cf:8d:7c:c2:4b:cb:44:40:ec:d1:e3:26:
         76:e0:49:a5:a4:02:9e:df:5f:ad:f8:86:bb:23:78:63:58:bf:
         35:15:7f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----