This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
File:                     JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json)
Hash identifier:          5ZVH0VfOv3VBc8/A69Tc++RlxsE/5U59QgtP74d7KhQ=
Subject key identifier:   6B:DF:D0:B6:EE:F4:1B:DF:AC:AB:9E:4E:5E:5A:5F:8A:1C:C2:FB:C6
Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB
Certificate issuer:       /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
Certificate serial:       0DAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
Manifest number:          0DA1
Signing time:             Sat 06 Dec 2025 17:20:46 +0000
Manifest this update:     Sat 06 Dec 2025 17:20:46 +0000
Manifest next update:     Sat 13 Dec 2025 17:20:46 +0000
Files and hashes:         1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: 8u2rhg5RpRoyuSulA5Sj6RhdzVxE8vo4NVgU0EY2RZs=)
                          2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: amV+0EsydUDHLdsh+us/wn9ioz7T7Kc6SJn5/ZtPF4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl
                          rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3500 (0xdac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
        Validity
            Not Before: Dec  6 17:20:46 2025 GMT
            Not After : Dec 13 17:20:46 2025 GMT
        Subject: CN=693465ee-553b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:e2:3f:29:9b:66:9c:ef:e9:2b:b0:17:92:
                    eb:6a:01:cb:a0:4a:d5:d5:ba:93:2b:4b:0d:ad:36:
                    3b:15:e0:3d:9c:18:af:41:e0:91:b2:84:33:4a:c6:
                    db:0f:21:cd:2e:6e:38:c4:96:50:8b:49:e0:48:4d:
                    63:51:9c:f5:b6:ff:09:d4:93:17:19:4c:31:4f:26:
                    6f:fd:b2:49:54:20:97:3e:55:b3:07:fd:6a:70:78:
                    5f:93:c5:1d:f7:93:99:26:10:0d:74:da:b1:18:93:
                    c6:36:69:9e:13:45:8f:ea:5b:b1:af:5f:d6:c2:c8:
                    0d:25:1b:e5:5f:ce:47:2a:be:24:cc:b1:b8:e1:4b:
                    df:39:dc:f6:00:c9:0a:62:56:c3:aa:00:92:99:9d:
                    29:17:e2:b4:17:63:1b:83:87:62:8a:f9:39:f2:41:
                    ff:cb:81:76:61:d4:6b:14:af:93:1a:d8:15:4f:6d:
                    bf:46:ee:da:60:d5:23:e7:71:30:1c:45:f7:51:2c:
                    76:ec:dd:3e:71:78:55:45:cd:8b:cc:30:f2:c9:17:
                    e4:f6:63:94:65:52:ed:95:0c:44:c6:57:e8:3d:76:
                    84:3c:1a:87:d4:6e:27:5a:82:40:99:05:24:33:e0:
                    a4:1f:7c:06:87:b0:21:ac:1f:09:8c:8c:b4:f5:e9:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DF:D0:B6:EE:F4:1B:DF:AC:AB:9E:4E:5E:5A:5F:8A:1C:C2:FB:C6
            X509v3 Authority Key Identifier:
                keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ac:2d:71:55:72:55:2a:f1:69:f6:f5:34:1e:4f:72:07:a8:
         f2:c5:ae:f1:90:d5:76:b2:f1:22:ca:34:d8:4e:4e:c5:19:60:
         1c:4f:7e:ac:67:51:6b:51:b9:bd:2a:44:63:c5:5f:08:ce:3b:
         db:4e:34:a3:39:10:7a:ba:39:6d:22:3d:95:e2:76:d6:c4:1e:
         0b:90:ab:86:22:f2:54:bb:ca:94:64:6a:6c:3d:41:e2:1a:b6:
         c8:41:5b:9c:77:b3:a9:82:5c:f7:9d:e3:70:8a:d5:db:c9:e0:
         fb:3c:86:23:48:39:bc:eb:b5:b4:80:f4:bc:5d:cc:13:79:fd:
         94:49:00:49:0a:d5:77:f1:8d:d9:b7:36:d3:9a:32:72:a4:83:
         85:69:1a:e4:bd:87:12:85:92:92:17:ec:ea:3d:cc:57:69:c4:
         0c:e9:66:0c:ed:b2:18:6f:2b:bb:db:fa:8e:3d:68:82:b2:a9:
         1e:eb:04:b8:00:1e:8c:f0:f1:de:38:4f:ff:af:73:28:5e:e1:
         ee:48:5b:b1:1c:82:9b:6d:a7:64:18:02:76:7e:7c:2b:a6:14:
         d0:d3:2a:d5:00:b7:a3:74:d9:8f:db:d4:2e:7c:7d:4b:99:b2:
         d8:42:de:be:65:c9:cb:48:f3:6c:a7:34:4c:28:15:cf:71:a8:
         27:57:3f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:05 2025 by rpki-client