This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
File:                     jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json)
Hash identifier:          dIhsWzkbXq4H8Gi/L5FGPGI5iX71Xfd1Qw5mRVSLa5E=
Subject key identifier:   30:6F:E8:04:E6:35:4D:DD:F9:E0:C4:0B:ED:FB:42:FF:96:92:F8:69
Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07
Certificate issuer:       /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
Manifest number:          0160
Signing time:             Fri 19 Dec 2025 03:16:22 +0000
Manifest this update:     Fri 19 Dec 2025 03:16:21 +0000
Manifest next update:     Fri 26 Dec 2025 03:16:21 +0000
Files and hashes:         1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: y1pgH96DGIw8EQEO+uMWjDMA8i6jau9pV7idaQg4pfM=)
                          2: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: hDHi1gPuoYO8h6h8cGnKDVo4yTuh05LbS9LRcNViWNs=)
                          3: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: iEDYEWfoYMQVJJ00VYr7IBwUel6B4Ra9OcE7UNEl9qk=)
                          4: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: IHeuJXUBtMHC4lViJX3ZGo0Fkl0iqD4ifRHgtn92cpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl
                          rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
        Validity
            Not Before: Dec 19 03:16:21 2025 GMT
            Not After : Dec 26 03:16:21 2025 GMT
        Subject: CN=6944c386-7649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:ee:7b:80:ee:3b:0a:7b:ac:d7:76:02:4a:
                    d6:79:12:90:b1:dd:21:98:fc:8a:36:f4:bc:d0:7b:
                    d9:57:89:8e:c2:08:e2:9b:5d:55:6a:9d:74:44:69:
                    96:81:75:5c:0e:60:3f:34:5d:d3:8f:93:7b:0e:5d:
                    f5:da:97:7d:61:52:57:5c:87:26:84:6e:7c:c1:13:
                    c1:4e:5e:aa:c6:a6:ae:83:b4:a0:3b:08:89:46:ae:
                    50:43:c7:db:07:ea:de:f7:cf:08:07:3a:80:cc:e1:
                    03:8f:04:1a:e1:d8:f3:04:de:39:fb:95:35:f9:74:
                    27:85:de:e0:92:0d:5f:79:77:1f:2a:06:c4:bf:6f:
                    d3:98:8c:5d:99:a2:33:b4:4a:5e:0f:36:94:80:1b:
                    09:96:fd:70:36:53:fd:1a:a0:fb:1e:0a:ea:2b:e6:
                    da:47:a9:c7:59:86:6c:9d:45:95:2b:7a:b5:5e:46:
                    9e:52:87:23:4d:03:56:d4:91:a2:af:a3:8d:a8:56:
                    c9:37:4a:29:72:40:50:56:1b:b0:19:a7:98:26:61:
                    f5:7e:5c:6d:3e:53:88:08:6a:f9:26:fb:43:20:1f:
                    2f:89:37:c6:45:29:70:d5:c7:12:8f:d4:c6:0e:08:
                    86:68:b4:13:d3:e5:0a:b2:5b:a8:e8:cb:2e:8b:03:
                    00:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6F:E8:04:E6:35:4D:DD:F9:E0:C4:0B:ED:FB:42:FF:96:92:F8:69
            X509v3 Authority Key Identifier:
                keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:b5:46:82:4c:1f:77:41:08:ee:9f:e6:07:7d:5f:d4:31:
         4b:1a:4a:de:28:6a:9b:da:8f:fd:c3:e8:8a:64:47:89:ac:69:
         24:34:9a:d5:16:d1:92:67:fa:88:63:a3:bf:1a:d6:81:27:0c:
         fb:0d:ec:bf:a8:98:2d:e4:4a:a9:1a:1a:50:0b:f7:67:fb:b2:
         69:bb:b8:cc:c1:cf:6a:9b:7f:3e:c4:c0:ca:c2:89:81:df:64:
         a6:de:e8:d8:c1:6f:82:69:18:89:d1:46:72:df:b5:9c:7f:01:
         94:30:e0:8d:44:b6:64:81:7c:06:bc:30:53:fa:1f:9a:d4:18:
         02:50:1e:a8:a0:b1:aa:8e:d8:f5:11:d2:ce:e2:bb:69:25:26:
         39:ad:a6:31:61:df:54:c1:1c:ff:8e:e5:17:a3:e6:bd:e2:aa:
         3d:2d:f0:65:12:0c:cd:17:2a:83:26:33:ac:e9:d0:4a:d3:49:
         5a:4c:ac:ab:b7:a2:e2:c3:b7:c0:de:8a:c7:de:7a:03:47:13:
         7b:dd:f8:c0:c0:ec:6b:99:98:df:54:c6:22:16:66:a7:0d:ed:
         7a:9d:c3:27:e7:e5:5f:30:95:93:d2:8c:18:84:54:dc:58:37:
         8d:95:19:69:8d:a8:c9:9a:ae:14:17:8c:2b:49:0e:a1:38:12:
         81:3e:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:23:16 2025 by rpki-client