This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
File:                     Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json)
Hash identifier:          pHT/tmwPLbVwq75SP11FLiMqqi4IdBNmKGN9XoGvntQ=
Subject key identifier:   03:9E:64:63:C2:28:F1:42:2B:A9:CA:17:33:FB:81:52:92:8D:0A:24
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Certificate issuer:       /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial:       05F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
Manifest number:          05EC
Signing time:             Sat 06 Dec 2025 21:48:09 +0000
Manifest this update:     Sat 06 Dec 2025 21:48:09 +0000
Manifest next update:     Sat 13 Dec 2025 21:48:09 +0000
Files and hashes:         1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: 9GvldM6QW3rmyk0Mr8+eS9doHISf63xxa6jo9JrFBZY=)
                          2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: GHWxrMyj8cTLBR3x3Zxqpb0ny9iM0klScYyqOL/kuUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
                          rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1526 (0x5f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
        Validity
            Not Before: Dec  6 21:48:09 2025 GMT
            Not After : Dec 13 21:48:09 2025 GMT
        Subject: CN=6934a499-4bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:f8:c2:46:f6:5f:25:e8:55:48:72:af:ef:
                    d7:36:c3:80:66:0a:0c:3c:74:2d:1c:67:59:dc:06:
                    42:db:de:78:a8:57:f9:bc:63:66:3d:d2:f6:b6:04:
                    34:c6:29:6d:19:49:16:ed:48:d0:8e:0d:68:a1:eb:
                    16:de:33:36:83:e3:f8:54:01:72:12:bb:2b:12:4e:
                    96:da:fe:a5:f2:74:60:45:f4:a8:5e:67:a9:d9:82:
                    af:a8:06:e3:64:2f:47:2b:d7:e5:97:30:8b:e4:82:
                    05:ba:1f:e6:b0:b1:29:dc:49:1c:0e:04:79:03:36:
                    b1:64:cb:4f:88:f0:6e:50:ac:cf:ea:63:ff:8d:af:
                    43:5a:51:f6:89:f4:63:a3:a3:f9:3b:40:cf:0e:ca:
                    db:ee:a2:0d:f0:4c:72:32:33:20:83:16:06:3a:3f:
                    35:c0:69:a6:4c:b3:08:57:d1:a9:23:bc:52:4f:a2:
                    28:25:16:ac:95:8a:e8:fe:bb:67:15:31:3a:1f:11:
                    16:d7:a0:6e:9d:af:42:8b:fe:22:0b:f0:79:90:6e:
                    48:3b:04:21:7d:ce:d3:d6:2a:92:46:94:3b:84:dd:
                    a6:cb:07:d3:37:b9:f8:ec:af:1d:bb:93:92:aa:4c:
                    fe:70:d0:4a:7d:09:a2:1f:c6:36:0f:58:a9:c0:10:
                    88:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9E:64:63:C2:28:F1:42:2B:A9:CA:17:33:FB:81:52:92:8D:0A:24
            X509v3 Authority Key Identifier:
                keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:18:7b:a3:16:57:e2:de:92:fa:8c:b7:0f:48:4e:58:6e:bd:
         1c:a0:49:ed:e1:29:07:40:e4:f6:8f:66:cb:56:3b:7f:96:12:
         b7:18:89:0f:09:ee:72:30:2f:bd:d8:76:8e:0c:06:06:c6:17:
         c6:dc:68:63:84:8f:e6:5a:ee:2c:ee:4e:52:06:4b:e0:51:c4:
         0c:cb:13:4b:1c:da:91:04:02:2a:8f:53:d4:ea:8f:61:5a:a4:
         64:c1:65:88:71:af:4e:63:fc:20:9a:d7:1a:29:49:a1:4c:ae:
         82:15:94:46:91:d6:ac:e1:5f:c7:a8:bf:6e:85:e0:d1:e3:f7:
         dd:63:cf:0c:4b:a6:e9:ce:f3:32:71:b9:7b:69:2f:fb:57:b5:
         c8:78:50:cb:6b:28:aa:b9:0c:b8:8f:70:d7:3f:3f:36:17:33:
         a5:4e:4a:37:68:b1:9c:d7:45:cb:c7:8b:84:a8:1f:4d:ad:0a:
         15:a4:59:57:29:df:ea:72:6d:76:cf:8b:cc:9f:37:ad:c8:f1:
         72:05:84:61:b5:10:de:98:f5:c4:d1:dd:39:ea:38:29:b7:74:
         f2:94:9a:8c:c6:db:fd:e7:84:7d:d4:bb:0d:c0:85:80:8e:84:
         05:9a:60:e0:4e:60:52:47:31:1f:8b:0b:1a:21:e9:cd:82:c9:
         11:41:3e:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3
M0NGQkY0REYwHhcNMjUxMjA2MjE0ODA5WhcNMjUxMjEzMjE0ODA5WjAYMRYwFAYD
VQQDEw02OTM0YTQ5OS00YmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxBH4wkb2XyXoVUhyr+/XNsOAZgoMPHQtHGdZ3AZC2954qFf5vGNmPdL2tgQ0
xiltGUkW7UjQjg1ooesW3jM2g+P4VAFyErsrEk6W2v6l8nRgRfSoXmep2YKvqAbj
ZC9HK9fllzCL5IIFuh/msLEp3EkcDgR5AzaxZMtPiPBuUKzP6mP/ja9DWlH2ifRj
o6P5O0DPDsrb7qIN8ExyMjMggxYGOj81wGmmTLMIV9GpI7xST6IoJRaslYro/rtn
FTE6HxEW16Buna9Ci/4iC/B5kG5IOwQhfc7T1iqSRpQ7hN2mywfTN7n47K8du5OS
qkz+cNBKfQmiH8Y2D1ipwBCIfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOeZGPC
KPFCK6nKFzP7gVKSjQokMB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4
QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzlDNC84Qjg5QTQyQUQ4QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0
VGFfT3QwRHpsdVZ6ejc5TjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCGHujFlfi3pL6jLcPSE5Ybr0coEnt4SkHQOT2j2bLVjt/lhK3GIkP
Ce5yMC+92HaODAYGxhfG3GhjhI/mWu4s7k5SBkvgUcQMyxNLHNqRBAIqj1PU6o9h
WqRkwWWIca9OY/wgmtcaKUmhTK6CFZRGkdas4V/HqL9uheDR4/fdY88MS6bpzvMy
cbl7aS/7V7XIeFDLayiquQy4j3DXPz82FzOlTko3aLGc10XLx4uEqB9NrQoVpFlX
Kd/qcm12z4vMnzetyPFyBYRhtRDemPXE0d056jgpt3TylJqMxtv954R91LsNwIWA
joQFmmDgTmBSRzEfiwsaIenNgskRQT46
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:30:42 2025 by rpki-client