This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
File:                     jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json)
Hash identifier:          gO0fBr1H4M5AjyLXog7cGkm8SG+E6IpjJX2bq1nAmjw=
Subject key identifier:   D9:FD:76:92:27:AA:31:FB:7A:24:81:5A:EB:0F:D5:A3:4C:BE:5B:8E
Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
Certificate issuer:       /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
Manifest number:          0258
Signing time:             Sun 21 Dec 2025 00:54:27 +0000
Manifest this update:     Sun 21 Dec 2025 00:54:27 +0000
Manifest next update:     Sun 28 Dec 2025 00:54:27 +0000
Files and hashes:         1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: kkNz/FACPIbAjSOnBRdFoR9hFHMotgnj9578luwijV0=)
                          2: 5D0766AC28B411F0A1AE5A68C4F9AE02.roa (hash: IyWwjIStMD7CLHAYI80G9u0bSfl+ZxcEcIIy1oHhXzo=)
                          3: 5E73EF1028B411F0A1AE5A68C4F9AE02.roa (hash: egVVNLsPdwUoef36phQTdD6372WDtBPUXE4iD/r+2cc=)
                          4: 5D8FF85028B411F0A1AE5A68C4F9AE02.roa (hash: cQgwz6VDyiOHU3CVFbp+dck6b+15ezgPGKxe1LIqxfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
                          rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 00:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53
        Validity
            Not Before: Dec 21 00:54:27 2025 GMT
            Not After : Dec 28 00:54:27 2025 GMT
        Subject: CN=69474543-73f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:30:c7:c5:40:c3:c8:54:50:e2:b7:cb:41:
                    56:63:55:9e:51:94:e2:21:1b:b2:d2:ca:e0:99:33:
                    2c:39:01:80:90:96:24:a2:43:58:3f:45:f2:95:69:
                    e3:c4:94:ba:21:9e:89:98:a6:9b:52:d9:bc:ad:9f:
                    df:60:2c:f1:b3:64:2a:32:7c:2c:f4:42:cd:cf:a8:
                    ee:db:ed:32:3c:81:d1:90:b8:2d:2b:15:ae:f7:02:
                    1d:ee:b9:38:87:03:f8:21:ee:0c:7f:f3:c8:38:5f:
                    1d:38:9b:84:18:43:f0:57:fd:04:10:17:85:03:ee:
                    44:ed:24:ec:92:1a:75:09:f7:af:27:ef:eb:04:ce:
                    6f:56:31:e3:82:8a:01:e0:33:44:ac:ae:49:3e:8f:
                    6a:02:50:f0:78:16:c9:c9:5b:0c:d3:f4:85:6f:b7:
                    13:29:57:38:71:a7:5d:69:0a:64:ab:bf:10:09:88:
                    c9:d7:f1:b9:c0:ce:94:d8:65:26:58:cd:16:a3:36:
                    2d:94:34:87:1e:67:03:ca:a0:e9:e1:13:62:87:21:
                    d3:fe:09:90:80:55:80:2e:18:94:8d:44:0d:75:6b:
                    0e:df:7b:f6:d0:94:08:c7:9a:29:f5:0c:69:67:3e:
                    69:91:a0:dd:db:91:26:f5:2b:48:2a:af:10:06:6e:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FD:76:92:27:AA:31:FB:7A:24:81:5A:EB:0F:D5:A3:4C:BE:5B:8E
            X509v3 Authority Key Identifier:
                keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ce:e3:bd:7d:54:c1:e1:1f:bf:b5:2e:50:7a:55:dd:1f:91:
         20:81:05:d0:7a:4e:f0:8c:a1:23:ea:5a:7d:bf:21:34:e9:05:
         b4:e7:74:5c:b5:5a:49:ba:a9:a9:5e:45:b8:d0:6b:68:25:9e:
         57:ef:2b:8f:a2:b9:67:cb:db:ea:c9:35:2b:16:44:92:55:8b:
         77:98:91:ce:40:0a:34:e4:39:4e:59:61:38:63:67:90:d5:e7:
         57:91:d0:03:95:65:d1:eb:0d:bb:f7:fa:d7:6b:32:6f:70:cc:
         0c:61:b3:cf:3b:d9:33:bf:0b:3f:9e:12:d5:19:f3:5b:3f:09:
         52:1d:8f:b3:79:e9:56:cd:c0:58:ac:cd:c0:cf:45:8a:12:cf:
         36:5e:9a:65:24:ca:f2:43:b4:3e:9a:66:e5:35:fb:3a:0c:a6:
         fa:f9:7c:6e:00:07:b8:04:91:2a:d7:ad:db:81:9b:0b:45:b9:
         db:89:d1:25:e8:5d:19:64:50:06:a0:a2:eb:43:ba:c3:27:7a:
         f3:30:a5:14:61:e4:ef:9b:64:f7:58:7d:36:f2:31:0a:7c:22:
         be:be:3c:6c:c2:58:ca:f2:9e:67:f5:be:50:67:79:5e:4c:a6:
         7d:5e:f4:83:a5:92:f1:e1:ca:c1:39:ff:59:78:9a:b3:46:8d:
         fc:dd:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:01:03 2025 by rpki-client