This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
File:                     Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft (raw, json)
Hash identifier:          eBP/GXftMAZwLlToahHlZqcZnr4pSwp2gBvwk3Y+vPA=
Subject key identifier:   AB:DB:63:04:B6:43:21:BA:E0:37:A7:A5:0B:83:74:F6:A3:94:01:3B
Authority key identifier: 26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26
Certificate issuer:       /CN=A919C7D0/serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
Manifest number:          15
Signing time:             Fri 19 Dec 2025 06:47:10 +0000
Manifest this update:     Fri 19 Dec 2025 06:47:10 +0000
Manifest next update:     Fri 26 Dec 2025 06:47:10 +0000
Files and hashes:         1: Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl (hash: Rbjy3rXqsxVN1R36mJJHWP0Tg9vBdudfXYFX6dV1eVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl
                          rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7D0, serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
        Validity
            Not Before: Dec 19 06:47:10 2025 GMT
            Not After : Dec 26 06:47:10 2025 GMT
        Subject: CN=6944f4ee-0db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:6e:e6:8c:07:49:13:8c:14:77:a4:66:4f:
                    bb:87:ed:ba:98:d5:bf:95:d8:a2:4a:06:8a:69:c1:
                    28:9f:d6:2a:a8:e2:e9:21:e6:02:50:2d:97:6e:45:
                    2c:45:8a:27:58:7d:52:0f:06:a6:96:9f:d0:f3:59:
                    77:83:81:56:5e:b7:a7:db:b5:21:6f:38:28:76:4a:
                    d6:ac:fe:4f:2d:a1:37:f3:94:6f:ec:2a:9a:a4:c8:
                    fd:f4:76:65:0f:8b:73:a4:36:a9:f8:1d:5b:fa:ff:
                    7c:80:18:67:24:11:01:f2:c7:1c:77:7e:63:8d:40:
                    21:3c:61:1d:0e:75:3d:c5:4c:82:a6:26:dd:64:b3:
                    25:68:0d:3f:5b:26:ea:06:da:38:5a:e2:53:1c:ef:
                    a3:f3:0e:24:4a:c9:5a:af:fa:3d:60:1e:01:ec:1b:
                    e3:c3:87:03:f1:a6:ea:68:fc:fe:16:5f:fd:b9:c5:
                    86:53:97:d1:a3:3f:af:3e:86:74:4c:e3:c4:6e:7d:
                    30:e1:e0:42:a0:db:c3:a8:39:ab:ae:f6:dc:a6:cf:
                    90:86:11:14:1a:68:9b:47:a9:04:5b:c8:5f:e4:d8:
                    21:cf:93:ac:c1:75:62:18:6d:f7:73:ab:bf:b0:61:
                    6e:99:9e:ea:ed:5b:40:e2:8a:44:7e:63:96:95:06:
                    77:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DB:63:04:B6:43:21:BA:E0:37:A7:A5:0B:83:74:F6:A3:94:01:3B
            X509v3 Authority Key Identifier:
                keyid:26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4d:b7:60:e7:95:3f:6b:f6:62:e6:cc:59:1f:42:73:3f:05:
         e9:4f:c4:cb:5f:5d:9e:c7:dc:3e:c5:b5:a6:af:41:97:b7:03:
         ab:83:94:2d:85:53:07:52:22:ec:a4:63:d5:b9:d1:d9:6b:b2:
         59:03:e6:8f:cb:fa:8f:26:67:8a:e0:15:2a:46:dd:ad:92:08:
         14:71:3e:74:dd:e8:e0:f8:7d:96:74:e6:fd:79:88:b7:4e:87:
         df:d6:59:58:27:a7:3b:69:a7:45:6a:7b:ea:5f:ee:b3:1d:96:
         cd:8c:74:af:bf:b0:9b:9f:79:c2:49:54:84:f5:14:9a:63:2b:
         1a:ec:8c:8e:76:b3:06:74:2b:a8:3b:a7:8e:0a:90:9f:ad:59:
         53:35:69:0e:10:0e:d7:4b:da:59:df:8c:57:cd:6f:16:92:ac:
         94:32:50:d1:e3:a2:0d:a3:12:7a:fd:75:38:b7:86:27:33:d6:
         9c:af:57:fd:d7:c5:0c:89:3f:1c:f6:72:86:12:ae:fb:1a:f5:
         c1:06:63:df:ef:e2:bd:43:e4:6f:e7:20:e3:78:79:1f:fc:cc:
         cf:0d:be:d9:a3:08:ca:32:51:89:0d:9a:fd:85:9e:18:d7:66:
         23:4f:6f:7b:18:a6:db:9b:dd:de:24:6d:8b:73:3b:70:d6:1a:
         6c:a1:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:45:45 2025 by rpki-client