This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
File:                     jqgV0DpRxRztXr5f2ZNStjdrVX0.mft (raw, json)
Hash identifier:          sJdKbsNkPVdl4MziDRU8w8fWcujeuvO6Fr25KjKFKc8=
Subject key identifier:   28:90:C7:CC:93:5B:93:36:C4:E7:15:AB:5B:B3:35:4B:10:2F:E9:C6
Authority key identifier: 8E:A8:15:D0:3A:51:C5:1C:ED:5E:BE:5F:D9:93:52:B6:37:6B:55:7D
Certificate issuer:       /CN=A9136067/serialNumber=8EA815D03A51C51CED5EBE5FD99352B6376B557D
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
Manifest number:          05
Signing time:             Fri 19 Dec 2025 07:00:50 +0000
Manifest this update:     Fri 19 Dec 2025 07:00:50 +0000
Manifest next update:     Fri 26 Dec 2025 07:00:50 +0000
Files and hashes:         1: jqgV0DpRxRztXr5f2ZNStjdrVX0.crl (hash: PPObtFVIv3bHAxMOImolMvyTikqWybSwNDzuayO+H20=)
                          2: 902A638ED68011F0B036527A68D3641D.roa (hash: 2It0NfBqTerLdCUquomD/v4NX3dFAT9hIqZfvaAKNZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.crl
                          rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136067, serialNumber=8EA815D03A51C51CED5EBE5FD99352B6376B557D
        Validity
            Not Before: Dec 19 07:00:50 2025 GMT
            Not After : Dec 26 07:00:50 2025 GMT
        Subject: CN=6944f822-7f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:66:a6:c6:65:1b:88:bd:88:d0:1d:89:77:aa:
                    79:c0:5d:67:54:43:ac:82:4f:34:83:d8:e0:ec:81:
                    71:1f:4d:73:6f:d3:66:42:ff:3d:8b:11:ea:68:5e:
                    f7:72:a8:b4:5c:ff:58:c4:6a:5c:d6:88:b0:cb:6a:
                    77:c8:52:f8:b3:3f:5c:88:93:a5:55:e4:aa:d1:33:
                    4a:67:61:14:a5:12:73:0a:68:c7:b7:2e:be:fd:fa:
                    36:d9:6c:86:16:57:a2:7b:54:27:05:b5:e7:c7:94:
                    12:d9:79:f6:ac:f7:cb:14:26:2a:db:35:1e:7b:38:
                    14:4b:19:9b:97:af:41:1a:61:9c:ee:74:e9:9a:b5:
                    88:40:93:a5:c0:70:36:a3:a3:d6:49:11:3f:68:9c:
                    6e:14:5e:3c:a6:d4:30:9c:54:2b:a8:05:f3:9c:7f:
                    ff:c7:50:60:3c:dd:d7:1a:11:6d:5b:f8:15:fe:e7:
                    05:89:ab:bd:f9:12:c2:f9:29:f1:44:76:93:9b:3f:
                    7d:3a:1c:d3:ca:67:0b:8d:4a:27:86:69:75:cc:9e:
                    f1:ce:d9:96:2c:d0:47:e5:53:17:90:51:59:8f:2c:
                    46:36:5a:6b:63:69:9a:c1:b3:87:07:99:67:a9:0f:
                    52:be:5f:ce:5d:1f:65:03:42:93:0a:81:9b:40:15:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:90:C7:CC:93:5B:93:36:C4:E7:15:AB:5B:B3:35:4B:10:2F:E9:C6
            X509v3 Authority Key Identifier:
                keyid:8E:A8:15:D0:3A:51:C5:1C:ED:5E:BE:5F:D9:93:52:B6:37:6B:55:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:ae:bc:e3:8c:8c:8b:74:c6:b4:d4:2b:8f:ea:b8:70:ba:61:
         c5:59:7a:19:90:96:bc:e3:c5:52:48:fb:8c:f8:c0:40:58:6e:
         15:61:b3:8d:0d:99:f6:41:61:2f:18:0a:dd:47:84:41:1b:96:
         6f:26:92:03:15:76:8b:3a:fe:a4:1c:ee:47:ea:f0:88:40:e6:
         dd:c3:98:de:66:3e:a8:f0:a9:69:37:03:0f:dd:31:66:ee:b8:
         e7:98:aa:d9:ce:cb:8f:2d:f3:71:7f:d0:02:02:53:89:e1:9b:
         95:4d:35:95:9b:6d:63:60:c9:8f:85:54:d9:2e:c3:cb:ef:29:
         ea:ca:92:26:be:92:a4:2c:84:6c:0d:af:dd:e7:90:2d:fe:a3:
         9e:0f:76:3f:42:17:b8:ed:ec:62:9b:47:58:09:75:39:2b:cf:
         1d:c2:22:20:06:e5:73:9c:ea:99:a8:fe:15:05:cb:93:74:e3:
         68:0a:69:91:2a:a4:dc:7d:c2:15:14:39:aa:d2:8c:a5:10:0f:
         95:7f:13:81:75:a7:51:97:79:ec:0f:5a:9b:ff:8e:88:05:f3:
         9e:79:c5:7f:06:f8:34:bb:ec:6b:05:6d:07:18:f6:01:66:93:
         b5:87:c2:25:3e:76:95:aa:a9:2c:43:8c:15:f3:7c:b5:08:ff:
         20:0c:dc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:38:49 2025 by rpki-client