This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
File:                     jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json)
Hash identifier:          3RryCPA4QLaVaMrmuvMC9g5+Azk8+niNdlzXLj4EUW0=
Subject key identifier:   A9:7A:C7:C4:26:C8:53:F7:00:B1:E8:E7:5D:31:F2:68:90:98:4D:53
Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5
Certificate issuer:       /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
Certificate serial:       34FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
Manifest number:          34F5
Signing time:             Thu 18 Dec 2025 15:03:37 +0000
Manifest this update:     Thu 18 Dec 2025 15:03:36 +0000
Manifest next update:     Thu 25 Dec 2025 15:03:36 +0000
Files and hashes:         1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: xv/AP0IPDcd+s2GUIYkdOLjEUdUvp/qFaulJINmzKus=)
                          2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: END/X8NWEnYQqU51TlQvCrkCaUczqULOOoxx1HVtbaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl
                          rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13566 (0x34fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
        Validity
            Not Before: Dec 18 15:03:36 2025 GMT
            Not After : Dec 25 15:03:36 2025 GMT
        Subject: CN=694417c9-0747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:b7:b2:32:06:f1:d1:da:b5:47:9c:b8:70:
                    9b:bd:2f:72:21:f8:c4:56:c2:b4:c1:95:d8:59:ff:
                    4c:de:a2:b4:18:db:7f:48:e6:f7:31:b0:e5:12:34:
                    38:d1:c1:c6:51:3d:4c:87:ee:1a:0a:a6:93:83:65:
                    4a:bd:3d:0b:9c:1d:a2:02:2c:3b:3f:0b:c3:7e:e7:
                    d9:79:cb:a7:5f:a1:6f:76:a0:ed:af:b6:c9:f5:34:
                    28:13:fd:47:50:05:06:5c:a2:dd:5e:00:c2:f7:7d:
                    ed:18:6e:c8:5b:3c:89:ec:b8:1b:79:4d:5c:36:df:
                    30:c6:83:9c:56:d4:b1:36:1c:c0:96:26:95:77:e5:
                    17:a6:40:2e:2c:4c:49:35:5e:1a:62:20:35:35:d4:
                    04:52:27:d8:48:90:f9:55:22:85:7f:73:e6:ab:de:
                    a6:c2:96:15:51:dd:d2:e1:b6:ad:0c:d2:18:98:68:
                    db:16:7e:63:11:1d:d3:e9:a1:5b:b8:07:5b:12:e6:
                    eb:4b:1b:26:e6:51:6d:dd:31:96:d2:62:25:79:d6:
                    fe:d0:82:0b:54:33:ca:8b:05:09:ce:2b:94:22:b8:
                    02:55:ba:69:aa:83:95:ae:d0:8f:cc:05:84:cb:74:
                    67:79:d1:62:85:c7:7b:8d:c6:76:2b:15:bc:cb:b1:
                    3a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7A:C7:C4:26:C8:53:F7:00:B1:E8:E7:5D:31:F2:68:90:98:4D:53
            X509v3 Authority Key Identifier:
                keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:11:1c:81:51:4e:44:1a:d0:01:cb:1d:2c:e6:fd:d5:e2:89:
         db:f8:26:6f:38:8b:26:67:9f:22:57:01:2a:99:18:b9:0f:a3:
         ca:b5:69:f3:10:74:05:7e:19:74:e9:bf:c1:ed:7a:ad:4e:65:
         5a:7a:3d:91:32:35:0d:32:07:9f:86:8f:b4:3d:40:e1:c0:f0:
         04:35:57:96:b6:9d:e4:8e:ce:b9:29:c3:21:d7:43:c9:04:98:
         e5:fc:1b:58:c8:4f:ae:04:70:c0:d7:21:91:72:c9:2c:cd:64:
         b9:bf:6d:c0:11:11:66:94:5f:96:d2:a0:a0:50:f6:39:99:4c:
         14:68:2d:16:0e:9f:f7:5c:d9:b6:66:6e:cc:4b:c0:e1:54:be:
         0c:a7:20:7c:4c:46:3f:38:26:53:b2:5b:8c:75:6a:8e:8b:8c:
         cf:6a:e0:a4:13:71:33:23:23:f3:01:cc:7b:9a:b5:ed:89:9c:
         e4:99:0b:7a:1a:33:77:11:ac:f7:4d:e7:28:71:f3:ea:10:31:
         25:13:cd:7c:eb:f2:28:d1:a8:36:7d:86:fb:01:59:35:15:ed:
         e5:8a:d7:31:5b:d2:c9:30:35:23:fd:63:f7:a1:fc:f7:db:2d:
         39:95:cc:98:d4:0b:3b:b1:92:cd:e7:e4:7f:b5:a0:01:7a:a8:
         60:e2:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:47:55 2025 by rpki-client