This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
File:                     j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft (raw, json)
Hash identifier:          jX6VRRafgzAjkBgtl8pxGYt5+OSrF90U4oLuXyCMQZE=
Subject key identifier:   95:55:61:1C:13:0E:00:35:CD:9B:2E:6A:1E:39:A9:4B:77:19:3B:0F
Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E
Certificate issuer:       /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
Manifest number:          0143
Signing time:             Fri 19 Dec 2025 03:31:50 +0000
Manifest this update:     Fri 19 Dec 2025 03:31:50 +0000
Manifest next update:     Fri 26 Dec 2025 03:31:50 +0000
Files and hashes:         1: j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl (hash: 4UBgW0lZIT9Xmg9UHtGDJGuYN+93jMNGv4pSsWsoJ+Y=)
                          2: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (hash: Ux7MrDkQdEj+Gtfnp0Wmpu2t6Z1MtA7yxD7lmndlZrU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl
                          rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF1D, serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
        Validity
            Not Before: Dec 19 03:31:50 2025 GMT
            Not After : Dec 26 03:31:50 2025 GMT
        Subject: CN=6944c726-20dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:0c:a4:d5:88:52:86:33:b4:25:02:7f:4b:
                    11:8a:27:cf:a8:21:45:e7:71:6f:79:a5:ed:4c:a4:
                    7b:ab:d7:d6:bf:b0:44:de:08:d4:23:57:93:19:f6:
                    f0:41:73:dd:fa:66:0a:d4:61:5d:77:6d:4d:8f:c5:
                    11:ee:99:69:eb:de:0f:6d:38:25:1b:31:dd:ef:05:
                    5e:86:7c:94:ab:8b:90:b7:c4:f8:68:6d:af:8c:4a:
                    e6:3e:e7:0e:3c:46:78:26:51:e4:ef:66:89:f7:66:
                    e2:9c:65:0f:7e:6e:3c:05:5c:e9:9d:69:04:de:35:
                    de:67:ad:d0:2d:8f:0b:d4:0d:56:be:63:53:e8:68:
                    b0:3d:c2:4f:be:34:45:d5:08:25:12:56:d7:9e:8a:
                    ae:f1:4c:6e:3d:1d:6f:60:6a:54:46:ac:eb:5e:21:
                    64:a6:b6:80:00:c4:22:e3:6e:b9:c4:36:44:8d:42:
                    49:85:c7:b5:d0:27:9f:ac:1a:68:04:3e:48:9a:b5:
                    41:3d:5f:1b:87:a4:55:9c:0f:a2:fc:90:39:7a:6a:
                    44:82:1d:94:0f:42:85:18:c0:2c:5d:50:2f:58:f0:
                    23:17:3e:49:65:81:b3:23:58:3a:c5:38:53:04:99:
                    6f:32:7c:23:78:df:87:08:ba:b1:4e:5c:11:9d:bd:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:55:61:1C:13:0E:00:35:CD:9B:2E:6A:1E:39:A9:4B:77:19:3B:0F
            X509v3 Authority Key Identifier:
                keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:4b:55:d7:4d:86:12:a8:cf:21:33:c9:64:b4:40:75:06:f2:
         16:53:27:d2:b9:41:24:02:db:2c:af:fd:fd:01:95:11:a7:6a:
         f0:31:26:91:26:09:61:d9:78:6e:7c:9c:c4:96:85:62:68:46:
         8c:39:87:14:6d:44:a3:f8:58:88:a1:81:8c:dc:26:45:83:10:
         87:16:44:6f:c6:c3:e1:e5:c1:a1:19:08:47:24:d9:52:48:0f:
         a7:26:33:31:1f:7c:14:be:15:24:45:bd:25:65:d8:06:c2:7e:
         ab:73:c2:79:a3:b5:31:ac:49:d8:e4:a4:5d:eb:76:ed:38:ff:
         88:cb:5b:1e:36:71:35:85:69:a4:d0:7d:d6:5d:d3:1c:74:65:
         0e:bc:a2:d5:57:88:32:be:ef:a9:cf:ce:52:00:b1:49:e7:88:
         cf:90:14:0d:ba:79:f8:5e:c2:91:c7:c3:d4:f6:4d:6d:4e:d5:
         7a:73:9e:fc:61:18:a0:ae:bc:96:44:db:a8:af:f0:c2:8f:51:
         35:ee:11:ec:48:5f:44:f7:8c:99:f5:4e:4e:51:b4:30:0c:33:
         03:60:95:2f:b5:bd:fb:75:96:5b:3c:94:fd:46:79:6c:b5:45:
         34:d0:1d:e7:2e:81:22:9c:10:a4:3a:90:a3:66:0d:fb:57:e8:
         be:6e:8d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:52:40 2025 by rpki-client