This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
File:                     JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json)
Hash identifier:          +csrY1+G04AyXlpIcVI1mLgSbIanHmggO4OA/QVwi5I=
Subject key identifier:   D0:74:DA:BB:D0:6E:9D:F7:D4:F8:CD:AF:06:27:FD:12:1E:2F:EC:A8
Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
Certificate issuer:       /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
Manifest number:          0127
Signing time:             Fri 05 Dec 2025 02:45:22 +0000
Manifest this update:     Fri 05 Dec 2025 02:45:21 +0000
Manifest next update:     Fri 12 Dec 2025 02:45:21 +0000
Files and hashes:         1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: gc3LznqGuEuHjMnjqKRv/ApkCA2KhTA9nVR65ZWEU6E=)
                          2: 37241BF4757911EFB0F87073C4F9AE02.roa (hash: OOJ1+VUkBTXiPH6FI49m6U+9LsJszz3rE5lM11lv5ng=)
                          3: 55778AA0757911EFBDEE9A73C4F9AE02.roa (hash: XneMA7PZ1D1omHGzokuwA1vpjnnJXi3JuOuinXeIdkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
        Validity
            Not Before: Dec  5 02:45:21 2025 GMT
            Not After : Dec 12 02:45:21 2025 GMT
        Subject: CN=69324741-7335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:13:39:2f:62:17:67:98:36:fb:fc:6b:59:
                    98:97:d7:a4:c8:aa:56:2a:1d:65:26:86:ef:38:d9:
                    11:01:3f:61:23:0f:73:3b:98:79:f6:13:cc:93:9c:
                    57:b0:b3:55:3d:6e:92:4e:5a:91:5c:05:4c:13:da:
                    f2:85:6a:88:0c:dd:d0:8a:61:86:cc:5e:22:af:8a:
                    4b:ee:58:86:ea:a1:8d:f1:7b:3c:53:ad:3f:dc:87:
                    31:f3:71:80:db:9a:95:cf:90:c3:00:d0:88:de:a8:
                    b6:eb:12:ad:a0:57:39:df:a0:ba:ec:fd:05:5f:42:
                    c9:55:88:43:fb:11:14:e0:56:a3:05:58:54:37:b6:
                    3e:f5:35:a5:aa:09:72:60:b1:bc:66:83:04:d9:b5:
                    1f:9f:70:6c:2a:2c:eb:5b:a3:2d:81:d7:bd:d0:a4:
                    67:ca:35:03:62:69:78:35:a9:78:e3:86:b1:ff:e6:
                    ec:1f:ac:47:a1:b4:a6:07:ed:bf:54:77:49:8f:05:
                    87:9d:4b:5b:34:9c:d8:63:bf:53:ab:d1:14:57:3f:
                    c6:43:bb:23:6e:6f:8c:ea:c0:2d:1c:c4:c5:bb:a4:
                    8a:1b:ea:3d:19:c7:07:e7:c5:70:ed:0d:fd:d2:6b:
                    e0:a2:0b:70:7e:77:b0:2f:1e:2b:ad:cf:af:fe:a8:
                    42:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:74:DA:BB:D0:6E:9D:F7:D4:F8:CD:AF:06:27:FD:12:1E:2F:EC:A8
            X509v3 Authority Key Identifier:
                keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:1b:4a:89:bf:42:6e:70:af:fb:2e:b6:e7:bd:a9:0f:e4:aa:
         78:65:9c:9f:f8:3c:a2:50:1a:a8:ca:3d:28:6e:07:cb:ed:4f:
         b8:14:8d:24:ca:7d:f9:45:53:8a:11:e8:80:6f:f3:92:f0:40:
         43:1e:3a:63:74:e0:87:2a:f9:5b:ed:d4:f2:b6:3b:36:93:29:
         44:1d:e2:90:6c:40:76:47:a7:6c:82:1b:7e:b7:19:b9:95:38:
         c8:55:d4:41:71:21:8e:db:65:43:84:c0:92:4d:ce:98:0d:be:
         bb:02:63:f8:3c:6d:d7:7c:8e:b7:7c:56:d5:38:5b:19:7e:0f:
         d7:32:fc:ba:f2:3e:de:04:f3:4d:a8:ed:99:a5:f5:ba:4c:37:
         36:a3:0e:e2:e1:c9:2a:35:65:00:da:cf:92:b0:b8:81:d4:93:
         8b:f2:57:27:90:a3:93:d6:fb:6b:39:d2:d2:69:d8:9b:fc:20:
         eb:60:91:b2:e1:45:e8:f0:13:8c:b5:1b:f5:2b:dc:b3:98:2e:
         10:cb:4a:03:ad:3b:f2:97:63:48:af:7a:83:57:5d:fd:a2:6e:
         22:72:68:e9:a4:ec:82:2a:39:f5:39:74:72:a0:4a:4e:e6:a5:
         f2:1e:0c:dc:de:c6:3a:a4:b6:51:ec:f3:56:b5:fe:b1:0d:b7:
         a7:a3:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:42 2025 by rpki-client