This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
File:                     jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json)
Hash identifier:          yiWNQCX4WglgHq4enTbP7mLUMB1g+ZyP98uGI+8KbUY=
Subject key identifier:   E0:C0:E5:F9:5D:65:8D:09:2C:13:EC:30:6E:3A:5D:43:D0:09:BC:78
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Certificate issuer:       /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial:       3512
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
Manifest number:          34FD
Signing time:             Sat 20 Dec 2025 14:35:47 +0000
Manifest this update:     Sat 20 Dec 2025 14:35:47 +0000
Manifest next update:     Sat 27 Dec 2025 14:35:47 +0000
Files and hashes:         1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: e8U+wDia/N2to69G65fi6HWs3YTAp37Z9Fl5sWJy0E8=)
                          2: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=)
                          3: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=)
                          4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
                          rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13586 (0x3512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
        Validity
            Not Before: Dec 20 14:35:47 2025 GMT
            Not After : Dec 27 14:35:47 2025 GMT
        Subject: CN=6946b443-d1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:38:b1:38:e9:6b:ff:ee:ef:38:db:66:47:
                    4f:19:1c:6d:0b:7e:80:b6:f3:7f:da:e7:21:11:be:
                    93:c0:12:b8:20:e4:07:ed:5b:93:0b:19:b3:b0:17:
                    29:e0:ba:97:30:57:22:8d:e7:36:f0:72:8a:a8:56:
                    60:81:ed:89:de:f5:a7:a6:5c:db:00:8d:22:8b:ed:
                    55:2c:55:02:56:4c:81:dc:80:90:df:9d:5b:d6:32:
                    7d:ee:9f:91:04:5b:8a:83:55:da:99:7a:a2:3f:9e:
                    2a:97:a5:b7:bc:2f:77:68:db:ff:10:0f:9e:29:ec:
                    1d:de:ef:56:1e:7a:07:6f:f9:68:97:e3:b2:f1:29:
                    67:2b:39:81:5a:a4:01:d6:26:3b:ee:b1:f3:93:0c:
                    7d:79:17:20:ad:90:5f:e6:1a:3d:87:5e:d8:76:d7:
                    5c:5f:31:ed:6e:a2:23:fa:72:d4:3a:6a:6e:b2:6a:
                    b4:7f:d4:36:7a:76:ff:1f:c8:7f:1c:33:96:7d:43:
                    63:10:bc:c3:3d:3f:a2:62:21:99:35:e2:28:11:af:
                    41:5d:86:d7:d9:94:03:56:af:c7:26:96:61:20:4e:
                    ed:0d:13:3d:d4:a9:45:a0:25:da:1c:55:22:d8:f0:
                    a3:30:ca:38:2b:05:30:3a:ad:27:ca:31:2e:f6:7b:
                    b2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C0:E5:F9:5D:65:8D:09:2C:13:EC:30:6E:3A:5D:43:D0:09:BC:78
            X509v3 Authority Key Identifier:
                keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:78:4c:21:8a:00:45:bb:6a:9d:9b:2c:e8:aa:70:4b:7c:f8:
         b9:a7:a8:a7:e2:ca:d0:59:07:c4:19:ba:f4:33:d6:35:fd:bf:
         6e:76:8c:6a:39:8e:37:6b:33:a4:71:c3:67:0c:47:03:68:1e:
         1a:38:af:1e:d1:30:ea:7e:ba:fa:1f:f7:8b:91:09:41:56:13:
         aa:50:0b:3e:75:f4:e5:7c:b1:65:97:65:5d:40:d3:c1:8a:9d:
         b7:5b:42:5d:9b:f1:0e:22:ff:2a:2f:78:a9:59:c5:02:fa:fb:
         c3:ca:1f:01:a0:7f:96:87:4e:eb:f6:42:f4:6d:dd:a3:56:f2:
         d9:ba:26:33:47:a8:9b:80:0d:ce:df:17:6d:37:20:73:59:34:
         62:a8:98:38:a7:3b:79:28:b5:fc:6e:9c:61:7d:5d:f2:29:7d:
         ed:79:f5:85:fc:c9:2d:8a:74:5d:00:d7:98:9e:77:77:2d:26:
         a3:de:55:3f:0e:13:e9:44:66:79:18:4d:50:3c:60:29:c4:05:
         33:f2:cc:ef:1e:5e:27:d3:47:d5:4b:d9:b3:84:bd:62:30:65:
         38:9f:91:f1:20:4e:c7:37:b3:be:f1:de:7e:4e:4a:5b:51:fd:
         77:05:f3:7c:f2:86:88:60:67:1e:b9:31:9e:af:46:4a:c0:bf:
         c0:71:86:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 20:03:22 2025 by rpki-client