This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
File:                     JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json)
Hash identifier:          Ros3H3ZgHdqRLoxl9qggaBi4t1KXLIcQKad++DnGoEk=
Subject key identifier:   05:14:C2:54:7A:68:DB:02:77:76:98:A0:F6:9B:6D:76:48:85:E5:30
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Certificate issuer:       /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
Manifest number:          0110
Signing time:             Fri 05 Dec 2025 03:00:24 +0000
Manifest this update:     Fri 05 Dec 2025 03:00:24 +0000
Manifest next update:     Fri 12 Dec 2025 03:00:24 +0000
Files and hashes:         1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: 5/KCVibHfIKA1IV65axBwKNq9/CG6lc18sFdiw0gPoE=)
                          2: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: dFNn3jO43SdP+6Z3qx4suVU/JHAZ4DSHsOgrTOhwaUU=)
                          3: 1381259CCA3811F0B890C35CC4F9AE02.roa (hash: 2AIbsNw95CGEUCI+hzWilcZK30P6hAcxR4zxP/RQzJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
        Validity
            Not Before: Dec  5 03:00:24 2025 GMT
            Not After : Dec 12 03:00:24 2025 GMT
        Subject: CN=69324ac8-652f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:d0:79:c2:11:4a:9b:93:8f:df:1a:33:10:
                    39:ed:4a:93:32:3b:47:24:49:0c:f4:b3:07:f0:47:
                    5a:34:9f:b7:7e:8f:87:8c:54:28:f3:39:60:39:db:
                    43:3c:09:ab:eb:90:9c:15:14:a0:95:59:db:b6:e4:
                    e7:41:57:c7:62:2c:a4:36:f7:a1:aa:3c:72:49:60:
                    30:42:54:d6:b1:36:d2:b3:28:14:81:d0:18:c9:ad:
                    ff:a7:78:3f:ed:4f:98:1c:dc:ce:e4:35:ed:d5:8a:
                    f9:fe:ee:50:78:18:b9:12:06:f9:68:b4:cb:41:bc:
                    c4:a4:15:8d:57:5a:2a:a9:f9:20:b5:32:e8:ed:9a:
                    9a:9b:23:7c:c8:32:2b:d0:cd:30:81:81:95:c9:f2:
                    05:f3:12:31:97:2f:9b:db:6d:2c:ad:ed:6d:60:2f:
                    63:19:40:bc:a5:84:d3:b8:03:bd:ab:1e:1c:cd:e5:
                    7e:5c:6f:cc:1c:5f:1a:5f:31:e3:52:e9:27:ce:44:
                    10:51:35:2b:22:c5:be:c1:22:dc:99:14:09:e0:8f:
                    b3:e2:05:4c:82:e7:22:a0:4e:38:70:c4:0f:56:9b:
                    52:b3:9c:eb:a0:0d:df:55:94:d5:29:c4:72:36:d0:
                    dc:94:4b:af:7f:85:51:5e:5b:e3:a3:4e:b5:27:eb:
                    ab:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:14:C2:54:7A:68:DB:02:77:76:98:A0:F6:9B:6D:76:48:85:E5:30
            X509v3 Authority Key Identifier:
                keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8b:7c:08:68:e6:1b:cc:85:0c:5a:bb:90:3c:fc:c7:c6:3b:
         eb:1b:26:07:d3:13:44:e0:b0:c8:63:ff:44:2f:19:f3:ee:21:
         03:65:01:66:16:8d:46:ab:9e:7d:98:c0:d1:08:4a:02:9a:94:
         1d:3c:a7:15:e5:60:04:f9:ad:70:aa:ca:2d:36:29:50:e4:34:
         29:ca:8e:32:aa:4f:a8:92:17:9c:e0:81:ce:00:4d:e5:89:6e:
         e4:f1:29:26:e2:70:0d:22:19:45:79:ba:12:22:c0:09:c2:91:
         2c:0e:e5:9e:ad:31:c7:ba:7a:7d:3f:be:8f:ee:aa:8f:2c:d1:
         8f:20:fb:8a:d9:1a:59:b0:8e:83:5c:ec:5d:c9:b0:22:91:fb:
         03:74:0a:c6:dd:05:d7:86:13:e6:7a:8d:aa:da:c7:7a:14:d3:
         01:14:78:70:91:e3:91:ef:77:1e:58:a6:04:26:34:f1:25:d5:
         8b:a4:c4:c0:6d:60:d6:74:ca:f2:4c:42:a3:be:b4:ab:b3:73:
         a7:f4:b6:12:72:dd:ac:61:5a:ad:4a:db:d3:32:76:f5:ee:5b:
         82:d9:ec:1e:2a:b3:ee:25:14:1f:cf:ff:71:eb:ea:0f:b8:49:
         63:cf:85:0a:c3:fb:e1:11:b9:c0:30:6d:37:a0:72:87:e2:89:
         37:4f:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:29:43 2025 by rpki-client