This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
File:                     JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json)
Hash identifier:          E2EzLxfjywxyfGHPSEqj9vMW/ZQkpp2TwW40iBpxv60=
Subject key identifier:   AD:34:AB:BD:1F:F5:42:A0:51:54:A8:40:23:C1:07:6B:77:7A:F8:8A
Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD
Certificate issuer:       /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD
Certificate serial:       0B74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
Manifest number:          0B6D
Signing time:             Wed 24 Dec 2025 18:42:01 +0000
Manifest this update:     Wed 24 Dec 2025 18:42:00 +0000
Manifest next update:     Wed 31 Dec 2025 18:42:00 +0000
Files and hashes:         1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: GboCBsFkCvGvx3x9MX7GCwho1R8ymnaLE+2Aad64CcM=)
                          2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: IB+34xalro/jHkO5e293QU71HFEZbQKkc7BC3RGNr7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl
                          rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 18:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2932 (0xb74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F5F, serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD
        Validity
            Not Before: Dec 24 18:42:00 2025 GMT
            Not After : Dec 31 18:42:00 2025 GMT
        Subject: CN=694c33f9-0e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:09:26:f6:31:5a:8c:09:bb:67:9f:53:4f:
                    e7:49:66:f6:7a:4f:08:f5:51:f7:16:19:b2:1e:f2:
                    14:c6:38:2c:1f:dc:e2:f2:e3:98:08:38:6e:ee:77:
                    2c:28:d8:2f:45:79:61:ec:67:37:37:56:94:95:08:
                    07:99:f4:17:aa:de:be:77:95:27:8b:e7:bb:03:fc:
                    0e:31:b0:e1:62:42:bd:b4:ca:9a:b4:da:65:34:26:
                    f4:96:22:ce:de:6c:c6:ec:78:a1:50:a4:3c:e6:59:
                    da:7f:63:4e:c4:c0:70:e1:7a:4b:ff:66:0f:c3:0d:
                    80:56:a4:fa:d7:89:01:25:66:fc:d8:28:0d:fd:fc:
                    92:12:80:05:ed:5e:e1:62:f2:9a:5b:e6:1f:a7:31:
                    64:8e:b3:38:98:3b:d3:df:3a:0f:4f:07:f7:66:cd:
                    31:72:91:0d:79:a7:6f:b0:7e:e7:67:59:5a:d8:fe:
                    0f:99:c0:75:9a:d3:b1:93:1d:80:71:9a:f0:02:3e:
                    33:48:57:60:e3:b4:c1:bd:b6:6e:da:a0:e0:ee:48:
                    7d:b6:88:57:99:b5:70:92:20:c9:c6:4d:5e:9d:54:
                    48:86:34:aa:9e:f9:25:62:8c:39:a9:12:84:55:f7:
                    e5:e3:3a:26:29:aa:28:e9:2c:9e:7a:91:78:8a:fe:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:34:AB:BD:1F:F5:42:A0:51:54:A8:40:23:C1:07:6B:77:7A:F8:8A
            X509v3 Authority Key Identifier:
                keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:86:47:cf:d2:28:56:4e:d3:97:00:14:ac:62:9d:00:d0:7e:
         b7:a4:fa:67:04:b4:89:2d:ac:e7:4c:e5:97:69:90:9b:33:19:
         0e:6f:0b:72:67:1c:87:f1:e3:2c:35:11:3e:8d:b9:70:11:95:
         e2:63:fe:79:0f:52:fa:6c:f0:90:76:da:42:93:e4:b3:04:ff:
         71:2d:cb:85:e3:74:76:96:ab:51:08:93:52:0d:4c:85:db:37:
         a9:de:7a:f5:51:12:e1:61:28:df:8f:1e:85:52:fa:02:fb:be:
         6b:f9:a5:25:52:6b:eb:a5:69:22:64:31:58:d4:b8:81:2e:44:
         a3:72:2d:01:0c:88:e7:e0:2e:fe:58:69:54:50:4e:76:24:49:
         99:be:5f:df:ae:a5:df:7f:06:0b:37:ba:6e:f5:12:c7:67:bd:
         5c:97:83:be:93:99:0a:67:4d:e6:c9:e6:f6:3f:f4:28:3b:59:
         da:75:ff:32:66:a6:24:d2:0d:45:e6:43:a6:59:d8:6b:55:0d:
         11:1e:5f:7d:9a:dd:96:f0:98:3a:a1:4a:dc:c5:ce:1a:02:41:
         3e:02:cd:49:1c:4e:95:82:44:04:4c:0d:c6:45:66:4c:57:6c:
         7e:e5:af:ce:9e:55:ee:9d:2f:a5:ee:4b:fa:18:a8:4c:9a:22:
         50:29:1f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 09:16:24 2025 by rpki-client