This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft
File:                     JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft (raw, json)
Hash identifier:          4PNIsN2z9U3E6hS9sfr1xjraT9976++0FIIgVaL2pKk=
Subject key identifier:   F7:BB:F7:7E:46:BB:A3:F4:3A:6E:6B:E3:81:15:85:39:5F:C6:4F:CC
Authority key identifier: 24:B0:FC:18:C1:A7:AF:F5:3F:83:CA:B2:60:62:53:5D:2C:C5:EE:6F
Certificate issuer:       /CN=A9150A9C/serialNumber=24B0FC18C1A7AFF53F83CAB26062535D2CC5EE6F
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft
Manifest number:          0970
Signing time:             Thu 18 Dec 2025 19:41:58 +0000
Manifest this update:     Thu 18 Dec 2025 19:41:58 +0000
Manifest next update:     Thu 25 Dec 2025 19:41:58 +0000
Files and hashes:         1: JLD8GMGnr_U_g8qyYGJTXSzF7m8.crl (hash: lmULAreNtXPZCcikOkykMj56dWw5RmXfRQlsXF9izX0=)
                          2: 9DBC04A4C03111F0BF336D44C4F9AE02.roa (hash: 65DL3htHlm3ywbHFa+HqVmlDLA0jqm55uY5b/WINFag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.crl
                          rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A9C, serialNumber=24B0FC18C1A7AFF53F83CAB26062535D2CC5EE6F
        Validity
            Not Before: Dec 18 19:41:58 2025 GMT
            Not After : Dec 25 19:41:58 2025 GMT
        Subject: CN=69445906-9452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:3f:16:fa:56:12:b5:ad:18:33:b8:49:37:
                    85:a2:6c:ef:39:85:59:de:38:36:5a:0b:86:9f:20:
                    25:45:c0:d3:92:0a:52:85:59:c3:f0:f6:99:ad:43:
                    67:dd:46:19:3d:b4:46:b2:13:03:9b:2f:b2:00:a5:
                    5b:94:84:d7:8e:1a:39:cf:3a:67:e7:c0:fb:9f:20:
                    97:ba:b3:23:94:17:c9:13:60:51:1c:77:41:db:42:
                    f6:6c:10:0f:7a:b8:19:c9:16:e4:68:f4:a1:53:bd:
                    30:ab:79:a2:15:85:35:1b:fc:f6:c5:30:40:24:ea:
                    ee:38:61:ae:f1:b3:6e:2d:0f:0f:4f:0c:37:3d:25:
                    d9:e4:a7:35:00:67:9a:34:17:35:6d:c6:69:0f:70:
                    fc:53:d0:b3:4e:08:b5:e1:c4:a4:31:a9:63:3c:29:
                    e4:52:21:c1:3d:47:42:b4:1a:33:bb:cc:d9:b7:94:
                    52:63:0a:f6:2f:92:fe:08:5b:46:9b:17:12:b1:7c:
                    4e:b7:73:88:07:5f:f6:77:4a:cd:52:c5:57:ef:4f:
                    6c:76:5c:3f:1b:4e:84:9d:f9:73:47:9c:f0:fa:8c:
                    2f:5c:ca:de:78:ec:4f:6d:b3:8c:5a:53:fc:22:b6:
                    46:bb:29:5f:d2:de:ff:a4:da:aa:52:a4:af:75:e0:
                    4a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BB:F7:7E:46:BB:A3:F4:3A:6E:6B:E3:81:15:85:39:5F:C6:4F:CC
            X509v3 Authority Key Identifier:
                keyid:24:B0:FC:18:C1:A7:AF:F5:3F:83:CA:B2:60:62:53:5D:2C:C5:EE:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:43:c3:d7:05:51:45:22:88:6d:f3:89:3e:4c:e0:2e:b7:0b:
         4c:6c:f4:64:60:7c:db:7d:a9:1d:0b:5b:e0:c3:ec:0e:6e:d7:
         b2:1e:01:64:9d:f6:d6:58:fa:7c:85:c7:84:d2:5e:9f:35:6a:
         74:a6:22:d1:b5:d6:18:da:4e:68:06:7d:cc:3c:90:75:fc:07:
         8c:e2:97:a9:c4:27:b1:fb:69:d4:22:8c:24:9b:c8:1d:21:9b:
         8b:4f:88:a2:17:21:6f:5b:87:bf:68:a0:41:42:54:ee:31:0c:
         96:dc:5a:37:26:10:16:94:ec:0a:cd:21:90:4e:81:bf:5f:5d:
         9d:57:2a:7a:c4:8a:b8:22:ca:77:1b:2f:ca:37:46:f6:05:0c:
         80:50:82:bf:1b:e1:60:52:ba:e8:26:28:06:05:f5:3e:f9:31:
         ea:f6:7e:d5:2d:84:b7:76:56:00:a3:eb:e0:99:da:3f:fe:2f:
         16:57:36:8d:04:01:2f:e6:96:26:f7:27:da:6e:e5:f8:1e:2f:
         9a:58:d7:7e:81:d8:3c:c3:d9:4c:7b:8b:f1:bf:ba:19:47:ea:
         c1:84:44:54:25:37:96:28:c3:e4:2d:a9:16:39:54:fb:9d:26:
         6c:eb:4b:ce:00:6b:2d:f0:32:fe:58:c6:f8:42:13:ef:66:6c:
         eb:1e:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:42:09 2025 by rpki-client