This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
File:                     JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json)
Hash identifier:          umJYscqifyRpU6f932P/HIWD6V2Fm7UsCudh7QSsf4Y=
Subject key identifier:   04:6B:98:15:78:7C:BF:5C:E7:E8:62:08:64:8F:15:91:E6:BA:27:5E
Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
Certificate issuer:       /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
Manifest number:          01A3
Signing time:             Sun 21 Dec 2025 02:31:28 +0000
Manifest this update:     Sun 21 Dec 2025 02:31:28 +0000
Manifest next update:     Sun 28 Dec 2025 02:31:28 +0000
Files and hashes:         1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: 2O6huK4XRGn54uM729lfRlUuHuDtptv6wdNrkA9/vww=)
                          2: 06BD1FD4D76F11F0A9A4AAFE78D3641D.roa (hash: ewWeev4YUI3dE6otxnE32uUrvsrjdS3y026oghavMGU=)
                          3: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: gKjXag0sfARiLyE6YNWzcV2bYu/wNp5XI3N1jUN8tAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
                          rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175911, serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
        Validity
            Not Before: Dec 21 02:31:28 2025 GMT
            Not After : Dec 28 02:31:28 2025 GMT
        Subject: CN=69475c00-00bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:85:fe:3d:79:bf:fc:7f:14:6b:40:cb:9c:
                    cf:65:f8:f8:91:cc:ce:cd:ae:53:bf:a7:28:cf:74:
                    72:7f:08:56:3c:84:a5:a9:c0:44:4d:94:d6:c7:a4:
                    07:98:f8:07:ea:bb:f1:2b:b3:5a:c9:a9:10:75:00:
                    36:b7:41:4b:b1:9a:67:bd:40:46:70:1f:c3:b3:0b:
                    0f:0f:3e:6c:ea:db:e3:61:ef:58:5a:71:f3:05:21:
                    97:58:d9:13:3a:7e:87:6d:9d:28:31:6d:d8:38:d9:
                    b9:be:32:8c:93:36:7a:80:1f:48:5b:0c:e1:93:7b:
                    e9:dc:19:63:ee:9f:d9:ae:77:62:0f:66:b1:10:12:
                    9d:7b:f5:f1:22:00:9b:8c:27:d6:34:e3:5f:aa:da:
                    38:ef:4e:37:0e:77:66:0f:d2:22:ed:de:7c:98:bf:
                    87:b9:52:66:9f:6d:00:76:ab:29:5e:4b:6e:fb:f3:
                    60:6b:87:4c:b1:d2:f4:6e:44:de:c7:c2:ea:8d:80:
                    d5:d4:d1:2c:c5:cd:7e:a1:53:06:26:8a:4d:20:6a:
                    d0:fb:5d:ca:ce:60:e3:c7:18:4f:10:50:bd:d3:94:
                    69:c8:ae:ce:62:2b:11:57:af:59:78:39:97:6b:de:
                    34:cd:ba:f2:db:f8:43:e9:dd:7a:c3:6d:cb:5c:e8:
                    16:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6B:98:15:78:7C:BF:5C:E7:E8:62:08:64:8F:15:91:E6:BA:27:5E
            X509v3 Authority Key Identifier:
                keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5a:92:f7:59:31:1a:95:26:97:f8:d0:98:ae:44:a2:ad:b0:
         a2:b8:ac:80:d0:d5:da:79:6c:39:fd:35:c8:87:b6:5c:b0:06:
         75:5a:88:a6:cd:86:d3:c6:a3:b9:0e:e3:34:d0:a3:50:ef:92:
         7a:de:7f:cb:d3:64:e0:80:a7:e4:de:fc:46:d6:23:bb:f8:35:
         f9:02:e2:a2:31:d9:4b:a7:b5:8b:1c:ae:9c:fd:1b:40:64:54:
         7b:f3:87:d7:1a:92:5f:48:ee:17:ce:b3:7f:ef:02:e5:05:45:
         79:90:0b:37:61:da:9d:76:c5:a8:cb:cf:ed:4d:5c:68:3e:cb:
         98:f0:72:07:10:20:04:4c:63:a8:fb:21:a8:0b:1b:64:18:56:
         c5:41:14:d9:88:1f:58:db:f4:d7:3b:76:be:fb:f6:b6:4a:48:
         0a:a7:b0:b6:88:6c:5b:94:3f:c2:47:a9:73:8f:56:3c:af:0c:
         c3:33:4d:32:f0:08:31:21:9d:22:61:00:f3:53:a3:ae:97:4e:
         3a:73:1b:54:09:b9:36:db:8e:cd:54:8e:b5:df:b0:88:70:f0:
         fa:50:65:74:4d:5f:fd:4b:9e:7a:d2:22:b2:8c:14:bd:df:8d:
         b1:b7:e6:18:51:03:73:62:b5:40:22:ca:c8:c1:c1:de:a9:d8:
         3a:c2:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:01:33 2025 by rpki-client