This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
File:                     jBwU3BZ027aLSUMBWHs9L5jtcBs.mft (raw, json)
Hash identifier:          7V50xNBX84tDx35hTpnX593Hy0SIM6pYnwwA29YoIiA=
Subject key identifier:   2C:7B:01:BC:64:C3:6C:22:AE:0E:ED:8F:62:C1:73:99:03:11:C4:F1
Authority key identifier: 8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B
Certificate issuer:       /CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
Manifest number:          0151
Signing time:             Thu 25 Dec 2025 03:17:24 +0000
Manifest this update:     Thu 25 Dec 2025 03:17:24 +0000
Manifest next update:     Thu 01 Jan 2026 03:17:24 +0000
Files and hashes:         1: jBwU3BZ027aLSUMBWHs9L5jtcBs.crl (hash: MBCzxAB3V6+SYD7AynZEMgAl1f/At767/aI9WSNzAMI=)
                          2: 24241410E2A211EEBFC9412EC4F9AE02.roa (hash: /HUgZFHQdOKqVGsoyIo8SC7cdtj7Z66CHfzRpJ6gBOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl
                          rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 03:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912ECA4, serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
        Validity
            Not Before: Dec 25 03:17:24 2025 GMT
            Not After : Jan  1 03:17:24 2026 GMT
        Subject: CN=694cacc4-fbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:b5:13:be:4b:e9:e8:2d:cd:d3:cf:8a:f3:
                    23:c3:e9:e4:54:4a:3b:f2:59:34:6a:29:3c:c7:17:
                    85:56:0b:ad:3a:c0:ac:04:0f:de:41:15:65:f7:8f:
                    b4:d2:24:9e:cb:28:ea:e8:69:ef:82:97:73:07:e7:
                    0d:57:0a:05:07:b3:10:06:c2:b0:b3:5b:86:ab:82:
                    e0:e0:5b:af:72:9c:c7:9d:a3:ad:2b:fe:eb:12:72:
                    17:da:06:6a:f8:9c:3c:35:e0:09:a8:e3:c5:16:e4:
                    26:d2:72:a3:ee:5c:0a:c2:7d:22:25:e0:57:72:8f:
                    09:d3:e2:20:2e:6b:8e:e7:d4:ad:ce:71:cb:d7:6b:
                    03:0f:bb:cd:32:54:e6:48:62:f3:70:87:74:a6:64:
                    f1:d1:83:cc:8c:43:a5:75:ff:6f:31:c2:b2:ae:cc:
                    80:f6:2b:cb:9c:1b:06:50:c0:52:66:bc:9b:08:9d:
                    50:72:b7:14:b2:20:a4:c9:d5:08:08:c3:77:fb:69:
                    66:27:c8:18:b9:fc:b9:55:06:79:72:cd:84:c3:bc:
                    0d:e8:7c:3a:80:ad:c8:9a:a7:de:10:b5:65:0f:6e:
                    3f:88:27:e8:e2:98:d0:7d:68:e4:c2:1b:c5:ea:8d:
                    5b:ef:fa:a7:e5:53:8a:c2:7d:1f:da:73:ae:23:d1:
                    eb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7B:01:BC:64:C3:6C:22:AE:0E:ED:8F:62:C1:73:99:03:11:C4:F1
            X509v3 Authority Key Identifier:
                keyid:8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:fa:4f:5f:3b:65:ad:72:d4:3a:57:83:f3:69:ea:5e:ed:
         99:76:56:73:6b:74:1e:d9:39:34:5c:7f:36:ac:dd:b8:76:88:
         a0:79:3f:f2:ac:4a:25:ef:02:d1:02:22:3b:e6:3c:eb:2f:69:
         52:21:c8:98:cb:59:04:47:84:46:eb:5c:ec:ce:50:82:53:95:
         2c:f3:74:d0:75:63:a0:6f:b9:d5:9e:fb:9e:8d:bf:cf:ef:e5:
         a2:7c:ea:af:63:88:57:f7:66:ae:b2:d4:41:54:29:84:b8:1e:
         fe:61:1e:21:60:79:eb:d3:d6:c9:6d:08:16:71:90:80:55:b5:
         19:db:70:e5:66:66:aa:c9:39:a4:5e:57:a7:e2:b2:31:aa:7f:
         22:fc:4c:4a:e6:04:65:c7:7e:2c:d6:24:0a:e6:e2:6f:c5:d0:
         0c:dd:cc:61:8f:3d:74:99:83:e2:e5:76:73:95:73:5c:6c:0a:
         c2:1a:2b:96:c3:91:b9:cf:a8:b5:a8:a1:bf:21:27:ad:cf:3d:
         04:3d:2e:1f:08:73:67:3c:02:25:d6:34:88:63:2d:07:35:11:
         5e:19:e9:b1:b4:69:d0:84:04:3e:2a:9f:fd:2e:3d:fb:85:b3:
         e9:e0:f6:ea:29:a0:b9:e5:43:36:0d:0c:de:a5:a8:9c:67:dd:
         ef:c4:64:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:45:00 2025 by rpki-client