This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
File:                     jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json)
Hash identifier:          I2dRed3l3fcqtge/iJcIIp8d+Z5hIbqnsIFnaGk5pI8=
Subject key identifier:   CA:62:F1:71:98:31:37:68:8E:D1:5D:BE:3D:20:A5:A5:97:45:F3:DB
Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5
Certificate issuer:       /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5
Certificate serial:       051E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
Manifest number:          0512
Signing time:             Sat 06 Dec 2025 22:22:30 +0000
Manifest this update:     Sat 06 Dec 2025 22:22:30 +0000
Manifest next update:     Sat 13 Dec 2025 22:22:30 +0000
Files and hashes:         1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: /NgxDVI9yi4pFYxviK+Gb5xi37GBFBRiuXyPVp97YtQ=)
                          2: 17A5A8400EC811F088512D41C4F9AE02.roa (hash: tVHP7vE09ih639kPT+zHjlRDQm6GDfHkbd/XlPHcK/0=)
                          3: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: 8OgnHoASF/UsFAo8WcuH4tg18eHyDNchCEmDTI3RcYo=)
                          4: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: Egnw+r9qbejML3EvsCqcWRH67VrUmMQV/ILZahM9IPk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl
                          rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120AC1, serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5
        Validity
            Not Before: Dec  6 22:22:30 2025 GMT
            Not After : Dec 13 22:22:30 2025 GMT
        Subject: CN=6934aca6-c795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:fa:18:22:84:13:7a:c1:61:08:40:76:54:
                    f6:13:29:4a:d0:c8:59:72:e6:69:8d:6d:f4:29:46:
                    69:58:ad:1e:58:dc:3a:a2:bc:28:89:db:dc:a0:75:
                    6a:2f:cf:15:bb:c1:f4:18:83:39:4f:58:3b:9a:85:
                    b8:ec:d0:af:30:05:cc:87:5a:4a:0b:40:79:f8:7c:
                    04:6d:e5:f1:24:55:e2:1f:4f:fb:89:ac:97:6d:b2:
                    9c:8c:20:8e:bf:aa:8a:4d:a8:16:68:d8:55:81:42:
                    01:d1:2e:d4:ae:b1:4c:14:41:37:33:82:bb:bd:58:
                    1a:06:ce:c4:5c:0c:f7:6e:3f:f9:d1:1e:bc:95:7b:
                    48:96:76:6e:f7:41:f4:f6:2c:42:b1:a6:e0:ab:e1:
                    08:69:b2:1b:5b:37:9a:a8:2e:4c:67:62:ea:92:46:
                    e5:b3:71:8e:ae:df:ff:5e:be:54:b2:14:9c:9e:84:
                    2e:f4:d9:7f:84:2f:35:91:73:43:45:d8:6a:e3:d7:
                    5a:4f:3a:94:ad:bb:1b:b3:2b:92:6c:64:15:a4:9f:
                    32:3a:1c:0c:25:f1:cd:09:29:e1:18:19:ac:cd:5a:
                    50:e2:1a:d3:3b:3e:27:ac:be:3b:df:06:d0:fc:33:
                    f0:63:87:fe:18:cd:d6:75:5e:3e:3d:65:0a:57:2c:
                    c8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:62:F1:71:98:31:37:68:8E:D1:5D:BE:3D:20:A5:A5:97:45:F3:DB
            X509v3 Authority Key Identifier:
                keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:89:6b:c6:53:5c:42:cd:5c:32:1b:31:b5:8b:5d:9c:5c:58:
         b2:a4:21:7f:c9:98:a9:98:11:fc:83:fe:3a:0f:f8:6c:c5:51:
         8a:3b:c0:03:19:c0:ea:c3:58:71:0d:08:c0:df:0d:c6:82:f0:
         68:49:06:f2:41:ba:39:a5:92:3f:c7:1e:f5:bb:25:c4:f4:a5:
         d6:1d:84:72:7b:56:82:df:00:74:0a:f2:50:d8:64:b7:b3:82:
         05:99:78:65:ed:8d:7a:42:f4:3b:ca:71:3f:5d:48:75:5a:f2:
         63:f2:d6:42:b5:ec:79:b2:5f:fa:68:76:e4:ef:d5:0c:6d:a6:
         7d:73:ca:01:cf:51:bc:69:63:29:c8:f1:33:b1:45:ac:a0:a3:
         f5:8c:7c:8c:5d:00:23:f9:e8:08:9b:f4:1d:b1:c0:eb:d5:fa:
         13:3b:62:60:66:a7:46:a0:a5:27:6e:62:37:48:a0:08:3c:95:
         de:fb:b2:19:9d:20:d7:51:5f:78:9a:64:68:46:c5:2e:74:04:
         cd:b6:b6:87:6d:66:e5:50:43:88:75:9d:da:e2:9c:ee:87:5f:
         ec:18:dd:f1:b7:f1:4e:48:6a:5e:2f:3e:bb:ca:45:83:1c:e4:
         cc:b4:a0:61:19:b1:3b:9f:46:8b:1c:e5:66:af:1e:69:91:b1:
         08:47:53:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBBQzExMTAvBgNVBAUTKDhGMkJENEMxMjYzNkYwMDU5QjQwOEQwNzE2QUYzMkM4
RjU0MDY5QTUwHhcNMjUxMjA2MjIyMjMwWhcNMjUxMjEzMjIyMjMwWjAYMRYwFAYD
VQQDEw02OTM0YWNhNi1jNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnRf6GCKEE3rBYQhAdlT2EylK0MhZcuZpjW30KUZpWK0eWNw6orwoidvcoHVq
L88Vu8H0GIM5T1g7moW47NCvMAXMh1pKC0B5+HwEbeXxJFXiH0/7iayXbbKcjCCO
v6qKTagWaNhVgUIB0S7UrrFMFEE3M4K7vVgaBs7EXAz3bj/50R68lXtIlnZu90H0
9ixCsabgq+EIabIbWzeaqC5MZ2Lqkkbls3GOrt//Xr5UshScnoQu9Nl/hC81kXND
Rdhq49daTzqUrbsbsyuSbGQVpJ8yOhwMJfHNCSnhGBmszVpQ4hrTOz4nrL473wbQ
/DPwY4f+GM3WdV4+PWUKVyzIPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpi8XGY
MTdojtFdvj0gpaWXRfPbMB8GA1UdIwQYMBaAFI8r1MEmNvAFm0CNBxavMsj1QGml
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS80ODAxN0QzODMw
OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhBV2JRSTBIRnE4eXlQVkFh
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p5dlV3U1kyOEFXYlFJMEhGcTh5eVBWQWFhVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEFDMS80ODAxN0QzODMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhB
V2JRSTBIRnE4eXlQVkFhYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA5iWvGU1xCzVwyGzG1i12cXFiypCF/yZipmBH8g/46D/hsxVGKO8AD
GcDqw1hxDQjA3w3GgvBoSQbyQbo5pZI/xx71uyXE9KXWHYRye1aC3wB0CvJQ2GS3
s4IFmXhl7Y16QvQ7ynE/XUh1WvJj8tZCtex5sl/6aHbk79UMbaZ9c8oBz1G8aWMp
yPEzsUWsoKP1jHyMXQAj+egIm/QdscDr1foTO2JgZqdGoKUnbmI3SKAIPJXe+7IZ
nSDXUV94mmRoRsUudATNtraHbWblUEOIdZ3a4pzuh1/sGN3xt/FOSGpeLz67ykWD
HOTMtKBhGbE7n0aLHOVmrx5pkbEIR1MC
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:13:13 2025 by rpki-client