This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
File:                     J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft (raw, json)
Hash identifier:          MNDxO8cjuZh/VgvnFFuEu5KnFyjN6eJa2Hk+skzrCUQ=
Subject key identifier:   62:6B:89:45:28:00:4F:4A:BB:70:40:FB:A9:55:0B:5E:8E:D1:E7:E1
Authority key identifier: 27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95
Certificate issuer:       /CN=A915F55C/serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
Manifest number:          024A
Signing time:             Mon 29 Dec 2025 00:52:01 +0000
Manifest this update:     Mon 29 Dec 2025 00:52:00 +0000
Manifest next update:     Mon 05 Jan 2026 00:52:00 +0000
Files and hashes:         1: J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl (hash: tlDqkjbZhWlYf2T8C5vtScWmhMh892teCkV2OCdpOGI=)
                          2: 35C34054633911ED97F86846C4F9AE02.roa (hash: Ig8a1AFnXSki3ZJ7EoxDrLnednOmb0T7taRKJZuJWIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl
                          rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 00:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F55C, serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195
        Validity
            Not Before: Dec 29 00:52:00 2025 GMT
            Not After : Jan  5 00:52:00 2026 GMT
        Subject: CN=6951d0b0-e75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:f9:f6:57:76:28:99:a7:74:b1:be:43:70:
                    da:6e:a8:d2:97:8b:0d:f2:f5:2c:5f:dd:52:a6:a0:
                    79:6b:ee:15:86:65:91:ef:5d:8b:0e:28:5e:fb:10:
                    1b:fe:35:7e:d1:da:a1:38:7f:38:97:59:dd:35:88:
                    0b:dc:e5:aa:78:ac:29:c5:f3:32:5b:59:91:29:d7:
                    f3:80:e8:43:8c:84:11:b3:57:24:af:cf:93:a3:18:
                    6e:3a:4a:7e:f9:c7:7a:83:66:46:01:d5:35:88:f1:
                    f6:7c:4d:63:26:d6:75:2a:e9:79:dc:54:4e:c0:df:
                    e1:dd:6f:d2:8f:14:15:c8:f3:b7:ea:ae:d4:ff:de:
                    9a:a9:7f:a2:ca:c5:af:13:e4:ba:83:f6:80:57:2b:
                    ad:5f:92:a0:2c:6a:08:60:6f:e1:37:b0:b1:34:6c:
                    2c:5a:5e:8e:47:e7:16:56:89:49:44:5b:e7:06:65:
                    95:7c:0c:cb:67:3a:f0:75:45:b7:b2:ba:70:6d:f5:
                    31:f2:af:bc:bc:9b:58:f5:d1:89:8c:72:a4:29:d1:
                    7e:2d:05:6e:30:4c:5b:be:d5:00:46:36:08:cd:69:
                    09:13:57:c1:fe:ab:75:21:f8:72:89:37:3a:6d:92:
                    1a:1a:b3:0b:92:0d:7a:1a:f6:5b:88:8e:90:91:94:
                    b2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6B:89:45:28:00:4F:4A:BB:70:40:FB:A9:55:0B:5E:8E:D1:E7:E1
            X509v3 Authority Key Identifier:
                keyid:27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2a:7b:a0:34:f3:2b:5d:35:98:82:03:ce:35:ff:52:0a:36:
         47:cb:dc:f0:e3:51:63:4d:7a:e7:6e:15:4f:e9:54:3b:15:8e:
         18:db:5d:c0:61:8e:71:19:da:df:f1:bc:2e:95:32:a0:cc:0e:
         8f:66:d3:68:01:2a:53:96:6c:1a:80:99:4c:a7:b3:f3:16:f8:
         b0:69:27:39:dd:3b:6c:26:58:f3:98:65:4d:cb:a9:f2:45:5e:
         d5:52:df:d7:a2:00:fb:a7:44:33:0c:c5:7b:aa:78:7a:75:9c:
         77:f3:18:b3:62:41:cc:e0:bb:86:88:7b:d7:f8:63:70:95:12:
         94:e0:b4:d0:53:02:ca:65:49:3d:31:1b:e7:31:25:5d:56:de:
         5b:98:e1:64:22:fe:66:83:20:d1:34:33:0d:9a:4e:d2:f7:ac:
         cf:3b:ee:42:0b:84:d4:61:02:8f:bf:d1:29:48:6e:72:c0:53:
         31:3b:44:56:72:04:db:8a:94:67:3a:f1:84:97:62:02:6d:3b:
         43:7c:f7:69:59:a5:8a:c1:4c:6e:85:4a:39:7a:6a:23:ee:d7:
         60:27:57:63:91:f9:67:bf:ad:14:25:85:64:f3:78:f0:42:c6:
         25:a5:12:ec:ab:57:dc:bf:ef:a5:c7:32:fb:50:50:9e:26:27:
         e2:db:f7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 17:42:34 2025 by rpki-client