This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File:                     IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier:          4AWeRepslgy542ch61KLE5bpv3nA2fuJYnilz+l3jQM=
Subject key identifier:   0F:12:22:1D:FA:AE:B7:85:11:2A:0D:D6:F3:BF:34:88:18:DC:D5:41
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       094F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number:          0857
Signing time:             Fri 26 Dec 2025 20:42:59 +0000
Manifest this update:     Fri 26 Dec 2025 20:42:58 +0000
Manifest next update:     Fri 02 Jan 2026 20:42:58 +0000
Files and hashes:         1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: 74Ksn5chLW48j4R6ejmBueTUaJJJHTgs+Q8wdVZLV8w=)
                          2: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: lktIkPl22eqSwsqChqGX/PiBITeHZ0j0XKVggRutMPM=)
                          3: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: S9g/XqrkQ3EKwy6SH+loLjPtlBRwhe3c36A/g6yjOOI=)
                          4: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: lBS8kvbF9qc+MDE0imJFbA2HjjKTcdMHa+qxsQV+XxU=)
                          5: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: FezbKF9kO0jDnIHasf+ZGAxTpu3bLao4gPSsw3YsObk=)
                          6: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: ru4CDY9kB7xpZ7Gn5BJCqXlyrSix5gXPE9YTTMWfsno=)
                          7: 6B40A6762A4311EBBD69BE46C4F9AE02.roa (hash: cu/hrl9QOHrjIrKvHn9h0AfjeVMiF3XF5XO5n2p3i90=)
                          8: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (hash: eYqTvYLPgNnCsX8XZsOGNBvCb+uxIeIiPxmKdWTMhWU=)
                          9: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: o3tJcryC81c5rX1xhCkHjKVGZCjhtaRQoK8u6zdAIkI=)
                          10: 55493366013C11ED9864F33CC4F9AE02.roa (hash: anyPqCvlt+dub0m+upybD86mloI3z1ObTHZ5cOmKdEQ=)
                          11: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: pljZ5ks8zWLJ41xwtC7HEEzJ6OzoY7GJ/ohRRrP+jLs=)
                          12: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: YyMxfaGjaUTR1RTEiaJ/8xWo+/v0LKLkSrPTK2mFwLE=)
                          13: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: DxsPcmRyMvqxvilkvhZcPekY1GWFfShT1K4h6XO4HIU=)
                          14: 6D98103E938011F09B37C61AC4F9AE02.roa (hash: +cmqK92laWBeFdIJrciFQi+GRyC2GcrGz2l8HSig/fc=)
                          15: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: /NbIlZMNBHck/exxSqKy2xdIIBSuAAci2V/DM520lf4=)
                          16: 77439A048A3911F0AA9D4C75C4F9AE02.roa (hash: 4gOxRljY2ajSaw9L+py/l3Z65NBPVaVQD1LWDmNg++Y=)
                          17: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: ZOEl/EUL9Kcp7Oe2ySY5gCeqAoMs/cWZLqeYM9bpOY4=)
                          18: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: ANMNSNrxUbzfsYrPHlGwfWZQPT20tqofz6iu/oLsKk4=)
                          19: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: NNAqDSA6qZkwyXwW5LJm0ax1QL7uOfCZD/otvzKqxLc=)
                          20: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: X4XJ5Vg4GOFvVKCrXpY0V9iGok/qikvYBC+EwepyjvQ=)
                          21: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: GoONDGq2mntV4VCH8ruKRLPZW7gF389h40xYTQMS4WY=)
                          22: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: 5ouufnP7Ctej4xce5TMz+xAplrLrKCKTZMwQ7r/Y7pY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 20:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2383 (0x94f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Dec 26 20:42:58 2025 GMT
            Not After : Jan  2 20:42:58 2026 GMT
        Subject: CN=694ef353-4643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:62:ea:c3:dc:20:08:53:71:0f:36:1d:d5:b3:
                    58:98:c4:e6:d8:08:96:bc:4c:ec:3c:4a:dc:37:ca:
                    18:92:7b:92:c0:18:0f:8d:a5:35:af:24:28:26:0d:
                    a6:63:f0:da:af:73:70:87:7b:55:7b:06:dc:3c:d4:
                    c0:32:df:2b:98:ae:73:52:dc:b7:4e:9c:45:d7:04:
                    ec:a8:5a:86:6b:89:97:2f:34:22:54:c2:bf:5c:54:
                    f1:20:fc:0c:03:cd:9c:25:00:9a:f0:e5:d0:cc:46:
                    b5:64:27:d8:0b:ce:76:3e:1a:86:e4:e9:37:51:57:
                    22:ba:b8:33:c5:b2:cb:69:21:e8:d3:78:5f:fe:4f:
                    a6:52:2f:db:f0:7d:3f:3b:2d:b1:01:66:2b:92:34:
                    43:88:5a:41:41:9f:1a:67:99:eb:ba:59:b0:f7:c6:
                    09:21:d0:d3:9c:42:e3:73:b5:2a:bd:72:61:e2:bc:
                    aa:5e:67:98:df:da:c8:74:fc:22:60:0e:e6:e6:ec:
                    fe:8e:02:4c:2c:b0:af:a3:16:d9:d7:d2:23:f2:24:
                    26:a3:76:8e:33:04:c1:8d:07:64:37:9c:13:e0:3b:
                    f1:86:9f:83:e3:24:ff:e6:84:9b:c5:dd:17:fa:b7:
                    25:de:e0:d0:0b:6c:fa:c5:b6:d7:90:46:72:31:cb:
                    10:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:12:22:1D:FA:AE:B7:85:11:2A:0D:D6:F3:BF:34:88:18:DC:D5:41
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:17:6c:84:39:3f:12:b8:2f:c0:1c:fd:a4:5f:31:8c:2e:2b:
         30:2b:b7:18:80:2b:29:33:08:2a:4c:89:f1:c2:94:fb:0a:28:
         b6:84:2a:25:08:a0:63:ff:eb:6a:e3:88:6b:ee:fb:01:d5:3e:
         14:e8:e3:d4:9f:3c:d2:c3:4b:a6:15:a5:5d:e8:7b:2b:86:b4:
         67:1c:96:81:c4:93:d3:a9:25:23:7a:d9:fa:1d:b2:d6:2d:cc:
         9e:7b:5a:84:e3:d1:8c:cf:63:de:3d:48:3a:5d:0f:3f:f7:cd:
         dc:bb:71:2b:2c:a7:e5:6f:3e:a6:4a:4c:e0:7e:0f:06:e2:c5:
         62:43:87:23:dd:78:b5:43:82:f9:7b:36:7b:3a:1e:84:24:c0:
         a9:e6:01:01:46:ed:81:95:d3:1d:c9:f9:fa:8e:1c:35:9e:58:
         f7:b3:ef:09:30:6d:e8:9a:ae:9d:cf:5f:f5:bd:fb:74:3c:de:
         f9:6e:56:2d:85:85:a0:42:03:00:0b:db:58:c2:bc:9e:3b:5a:
         59:65:f6:61:fb:5b:71:ca:b1:54:55:1d:4f:56:84:48:02:4c:
         a7:41:04:ae:5e:a3:57:1f:87:3c:86:e9:8b:7b:93:18:69:b4:
         c6:46:01:06:26:45:12:87:aa:68:3d:56:9a:78:31:01:cf:6a:
         3f:7a:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 18:53:08 2025 by rpki-client