This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
File:                     j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json)
Hash identifier:          XJDcUilzQrnoEGMSikaso8Ys/npE/PqP7vEx2r2NdcY=
Subject key identifier:   F2:20:8F:0D:B7:61:79:33:5B:F4:52:A5:8A:F2:91:10:B0:0F:81:DF
Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
Certificate issuer:       /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Certificate serial:       080E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
Manifest number:          0806
Signing time:             Thu 18 Dec 2025 20:29:55 +0000
Manifest this update:     Thu 18 Dec 2025 20:29:54 +0000
Manifest next update:     Thu 25 Dec 2025 20:29:54 +0000
Files and hashes:         1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: +jaPppC9Ja/LhVQ3DCxV2sn6o2yBf2rnxqaf/sgfzzI=)
                          2: C3A97C9405FD11EBA6C82784C4F9AE02.roa (hash: dBsQTbyo2ik4WtMZ8qhDnVJ6kQlfuadQJdvgtMFFBas=)
                          3: AFDBAB82BAE911F09182A92BC4F9AE02.roa (hash: 4ad2KsQtQ7oQbTseUTyHmJEH6qXqt4tAEtkjxZ0LpO0=)
                          4: 97786014BAE711F08A930863C4F9AE02.roa (hash: lIZ1JFst73NRdkB40lIoSQcXkiFhk83jwCngt6frCUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
                          rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2062 (0x80e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
        Validity
            Not Before: Dec 18 20:29:54 2025 GMT
            Not After : Dec 25 20:29:54 2025 GMT
        Subject: CN=69446443-aa52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8b:ca:65:ba:26:82:06:f3:14:73:3e:11:41:
                    06:ba:64:f5:c9:e2:a6:22:e4:fa:13:55:c6:26:6b:
                    a0:a5:4d:88:6f:b9:4d:d6:4a:85:b3:ac:fd:c0:cd:
                    c4:a5:6c:31:ea:c3:e3:96:2b:a9:00:3e:83:78:b8:
                    8a:0b:f6:73:80:d0:16:65:65:bd:26:96:25:2e:20:
                    f4:18:b4:d3:2d:6c:70:3c:fe:15:d8:b5:99:1e:a9:
                    3d:f6:da:6c:38:39:7e:99:c7:81:8e:f0:f3:d6:00:
                    28:39:09:af:84:b0:e1:f1:45:4d:5e:9c:d8:3d:fc:
                    f8:2a:f5:ee:06:cf:f6:9f:ed:71:95:45:ae:6e:a1:
                    4f:7d:ed:ef:2d:b2:8f:dc:a3:85:38:8b:c5:47:12:
                    b9:5b:5c:cc:aa:02:2f:b7:37:36:49:a4:a1:fd:b6:
                    8e:d4:11:c8:ab:5a:44:e7:c5:e6:65:ca:99:1f:e3:
                    c2:9d:3e:68:66:d6:b7:2e:e0:22:12:cd:e8:61:7e:
                    02:51:e9:8f:fe:b2:94:99:75:6a:f4:35:2a:93:24:
                    3c:51:f2:99:8e:65:e7:7c:85:85:e0:96:42:32:17:
                    14:7d:49:b6:7b:e5:a2:fe:26:8c:89:54:96:b8:00:
                    be:9f:47:df:e1:ca:42:37:1e:a5:1d:26:40:b7:79:
                    a3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:20:8F:0D:B7:61:79:33:5B:F4:52:A5:8A:F2:91:10:B0:0F:81:DF
            X509v3 Authority Key Identifier:
                keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b7:e1:e9:cf:36:43:30:ea:b9:1d:f9:51:d2:41:35:3f:72:
         a8:82:05:5d:c7:6b:63:6d:9c:8e:e9:44:7d:d7:a4:14:32:58:
         92:f9:82:c5:29:63:f2:3b:0e:b7:5e:b7:a4:86:f5:2a:8c:ff:
         bf:6b:e6:05:62:60:64:25:8e:8c:87:29:66:c6:5e:da:f6:9a:
         da:f7:e1:49:f6:67:92:cb:b7:fb:5e:7f:9e:7c:2c:79:40:b1:
         b5:ec:46:0a:6b:41:39:51:86:8b:14:8f:5b:8a:c4:8b:e1:ce:
         20:37:31:6f:3b:70:ef:80:5f:f5:08:64:e0:21:b6:75:58:b6:
         89:cd:82:82:68:c1:bc:9a:f4:f5:80:47:ea:dd:71:c8:24:d4:
         83:3a:79:d6:24:76:af:b7:cf:f4:81:a5:75:2d:0b:28:11:2f:
         5e:3b:d6:e9:6d:ab:c7:91:b8:d3:fd:8d:d8:1b:f8:9d:a7:6c:
         8f:38:23:06:3a:4f:d5:d6:2a:ce:77:af:bd:16:69:69:34:44:
         ce:10:1b:ff:32:44:94:94:ff:6b:84:04:2b:75:60:08:6e:b8:
         d4:b6:22:27:ad:27:0b:dd:3c:40:5b:60:85:7a:ab:e6:e9:b4:
         c0:5f:9a:a5:25:7a:38:a4:c6:68:47:42:5b:58:73:ca:d9:a5:
         f9:6a:57:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:51 2025 by rpki-client