This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
File:                     jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json)
Hash identifier:          VY0NfZkKPFFg3viTjMWV5eWtQ6tlQbHmW0xzbV2msts=
Subject key identifier:   34:33:E4:F5:B9:38:20:80:7A:E8:4A:8B:0C:18:F7:5D:00:31:E9:65
Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
Certificate issuer:       /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Certificate serial:       0747
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
Manifest number:          0742
Signing time:             Sat 20 Dec 2025 21:03:30 +0000
Manifest this update:     Sat 20 Dec 2025 21:03:30 +0000
Manifest next update:     Sat 27 Dec 2025 21:03:30 +0000
Files and hashes:         1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: jW6CQnB57blO7HIGl0Ev8idewX1AIZ5uvTF0kliS8zU=)
                          2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: W1YtTgfcUQgVCMN18bivEJ+sBWqdB/GL1VhO0Gs0eBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
                          rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
        Validity
            Not Before: Dec 20 21:03:30 2025 GMT
            Not After : Dec 27 21:03:30 2025 GMT
        Subject: CN=69470f22-e636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:0f:a7:85:2e:a9:71:e1:1c:08:63:7e:f1:
                    ca:ba:b2:42:51:2e:15:99:9d:07:54:63:2e:f1:3c:
                    11:3e:36:ac:42:39:b1:4b:a3:6e:df:44:19:45:68:
                    a8:02:c0:bd:66:52:d4:be:04:63:a3:a8:53:4d:9d:
                    e1:ed:a4:a8:65:c9:31:0a:6a:1c:ed:bf:ad:65:93:
                    f5:b5:91:3c:78:47:2b:ed:18:eb:69:b0:10:57:e8:
                    8f:6a:4d:bd:36:15:16:c4:84:37:7c:bc:a4:12:7f:
                    f4:a5:b1:11:48:3c:70:0e:d8:71:be:18:c6:a2:5c:
                    95:0e:de:d4:83:7d:7a:08:3c:c1:f6:56:29:64:f7:
                    50:68:b7:5f:d2:3b:19:28:58:9d:6d:d9:b0:b8:09:
                    90:01:2b:27:0e:21:b0:42:d3:d6:53:00:a2:b3:48:
                    4d:a7:46:ce:d9:87:2b:06:dc:d5:95:cb:34:6b:95:
                    6f:f6:c9:5a:9d:dc:95:93:e8:61:ec:e5:dd:1f:65:
                    14:16:67:20:a2:d8:a3:b2:93:3c:18:3a:54:ee:7e:
                    07:fd:e5:59:2e:6b:bc:3e:36:97:e4:33:dc:63:55:
                    85:f3:fa:81:90:90:b1:dc:87:45:2f:ab:c1:e1:eb:
                    9e:43:f5:9e:69:bd:8e:18:6a:df:ac:bb:9c:ba:61:
                    e0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:33:E4:F5:B9:38:20:80:7A:E8:4A:8B:0C:18:F7:5D:00:31:E9:65
            X509v3 Authority Key Identifier:
                keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:50:ba:52:bb:24:cb:4f:96:66:3c:2f:1a:65:de:d4:de:48:
         95:32:c1:5b:0c:29:40:90:f5:c5:9d:fc:34:d3:28:c3:00:41:
         7a:d9:4e:08:c8:9a:74:cc:31:73:78:89:bb:a5:c9:66:67:59:
         2c:1b:25:51:41:7f:af:0c:62:9a:97:b1:14:bd:05:9f:b5:aa:
         ed:79:59:20:4d:fe:8e:88:40:c9:77:3d:54:31:26:14:0a:95:
         63:67:58:62:0c:2a:3b:61:e7:76:70:de:d6:22:4e:67:0f:80:
         f3:19:7c:af:41:d0:41:17:89:1b:5e:6d:c2:22:39:8b:f8:e6:
         79:9d:4e:d1:2f:05:05:3f:2b:ae:2d:47:3c:81:c4:03:dd:12:
         fb:0d:60:60:55:2f:19:dc:a2:50:7b:e2:f8:2d:07:ee:1f:6d:
         32:83:e9:89:aa:f2:b5:fe:03:86:af:9d:6a:a3:71:87:4c:49:
         83:4d:6e:3b:3a:80:67:85:54:87:51:c2:a5:b0:f5:01:f4:ee:
         3e:0f:12:7f:3f:49:2f:a0:13:43:4c:03:0f:f8:13:d3:2a:27:
         b6:c0:e0:0d:ce:4f:88:67:7c:69:db:c2:3f:7c:6d:79:38:a2:
         b4:41:a7:ed:de:1e:81:86:bc:b0:30:0a:3f:9e:cf:9c:21:25:
         97:8d:53:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:41:35 2025 by rpki-client