This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
File:                     cljf1W-lpIfw1KzGnK2xvqwvlw4.mft (raw, json)
Hash identifier:          hKDbyViNPolYaBo1um5KouS7ODehguoaZZrF/aO7rBk=
Subject key identifier:   48:89:12:10:1C:57:BF:ED:56:67:4D:FA:F2:E7:C3:B8:7B:9F:95:39
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Certificate issuer:       /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
Manifest number:          AC
Signing time:             Fri 19 Dec 2025 05:18:32 +0000
Manifest this update:     Fri 19 Dec 2025 05:18:31 +0000
Manifest next update:     Fri 26 Dec 2025 05:18:31 +0000
Files and hashes:         1: cljf1W-lpIfw1KzGnK2xvqwvlw4.crl (hash: IoeQXwjdrI3zZMKz2802yJZGAPj58M7XJwLf/Yytz7w=)
                          2: 9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (hash: cBCbayG35pbvXFF84Ac3SexGmqWa/cegNEnjqBSTQ7c=)
                          3: 99AB65EEDA2C11EFAC53882EC4F9AE02.roa (hash: LfZGAfyu1X1XJTr/vcwjFbw+uPCbKT4FYiAcrfY1D/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
        Validity
            Not Before: Dec 19 05:18:31 2025 GMT
            Not After : Dec 26 05:18:31 2025 GMT
        Subject: CN=6944e028-7015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3f:a9:62:b4:2d:4d:2a:3c:cc:78:bd:76:58:
                    40:17:43:9c:34:3a:f9:87:28:a4:9a:48:f6:61:ac:
                    be:a1:7f:c9:c7:f0:52:00:19:69:d0:c2:a4:a3:48:
                    48:45:e1:84:0b:fb:8f:35:31:be:da:93:85:90:c1:
                    5c:01:86:d9:86:7b:69:33:5d:8a:08:e5:44:90:5d:
                    e4:83:6c:2a:cd:9f:4d:31:b5:54:56:d4:f3:90:06:
                    cb:a6:25:42:8d:59:ba:b5:f8:9f:23:4b:10:83:43:
                    15:e1:18:80:c3:91:56:b8:99:4e:96:cc:41:2d:18:
                    cb:15:c0:c1:d3:66:07:9c:07:89:67:1d:7f:1c:d5:
                    65:53:37:8a:8f:a6:91:35:54:ae:29:f7:2f:a1:8d:
                    cc:67:4c:f0:ef:6d:e4:c0:2b:7b:f1:b4:5a:92:49:
                    92:a9:2e:10:b8:c4:be:9f:e6:b6:a1:10:63:ce:fd:
                    b6:05:74:1c:53:65:e2:3f:f2:73:5a:77:09:28:5d:
                    68:38:1c:f0:ba:68:8c:bc:24:ed:2d:23:42:f7:ec:
                    6c:a5:25:84:d1:e2:2a:39:e8:fa:de:93:07:23:c4:
                    ba:82:85:08:28:34:ce:2d:88:c4:a8:a0:ac:1c:0d:
                    86:56:10:98:20:b6:a9:d3:31:4b:9e:f5:c6:c4:00:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:89:12:10:1C:57:BF:ED:56:67:4D:FA:F2:E7:C3:B8:7B:9F:95:39
            X509v3 Authority Key Identifier:
                keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f8:29:61:64:35:f8:16:fe:c5:c4:d3:45:d5:ff:11:14:eb:
         71:0f:69:f9:26:8c:25:42:12:ca:d2:79:56:16:4d:c0:ed:48:
         53:f1:cf:f2:dd:81:09:e7:d4:eb:45:f2:a7:c6:28:f6:e0:7d:
         31:e7:28:42:6d:7f:e2:cf:4c:33:42:d7:e1:3a:e7:bc:d4:27:
         d5:1f:f0:18:2e:c6:a4:87:a5:3d:0e:ca:38:2c:8b:df:fd:b5:
         c9:40:0d:43:d7:1d:ad:32:fc:58:46:e7:1f:91:e8:e6:38:9a:
         e8:9f:9f:84:1f:85:5b:99:fa:43:ea:c0:04:cb:58:8b:70:94:
         1e:20:a4:45:49:02:20:2e:3f:3c:48:ac:2f:9e:2f:f1:75:9a:
         b7:1a:43:a3:af:e1:70:a3:71:e5:3d:e4:7a:ba:c2:b4:69:6e:
         7a:76:bf:78:2d:c1:a9:39:71:93:ef:c3:22:fe:a4:f8:ed:e4:
         d7:17:05:4e:49:24:36:ef:53:00:fe:2e:68:34:74:7c:73:52:
         2c:2d:c8:9f:4f:60:f9:e4:28:c1:45:26:b3:c2:57:90:ef:ba:
         4d:9b:3b:2c:90:a2:28:cf:9c:3a:6b:73:d5:d1:44:4e:9f:64:
         82:2c:59:0a:7d:0d:fa:d9:2c:51:97:92:fb:b7:e0:4a:4a:31:
         03:61:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:07 2025 by rpki-client