This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
File:                     JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json)
Hash identifier:          S2QTQZooMQNEEpK6kIOphhRiEWuLnxYKASeucjGvbkE=
Subject key identifier:   E1:27:69:40:E7:00:BE:96:53:05:D8:89:24:EA:EE:BE:2D:E8:D4:1E
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Certificate issuer:       /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
Manifest number:          020C
Signing time:             Fri 05 Dec 2025 00:36:20 +0000
Manifest this update:     Fri 05 Dec 2025 00:36:19 +0000
Manifest next update:     Fri 12 Dec 2025 00:36:19 +0000
Files and hashes:         1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: 6AS3gwDFkezVxoqboSNZoU3faRa+ux68AIIJhnqCQuU=)
                          2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: Dw2hET0XKkDZSavlAvohxfv8vlQxG1CLusRdITgzUP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
                          rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
        Validity
            Not Before: Dec  5 00:36:19 2025 GMT
            Not After : Dec 12 00:36:19 2025 GMT
        Subject: CN=69322903-1e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:46:2f:f3:20:ee:5b:17:47:16:92:6d:f9:
                    48:78:f0:00:e1:0d:11:6b:36:77:80:e9:ef:6d:41:
                    d6:36:6f:36:b5:b1:b9:59:55:12:60:93:1f:68:70:
                    35:34:35:c0:9f:0f:96:07:cf:60:0a:ec:d9:3d:1b:
                    51:75:da:4a:58:a0:5a:44:79:77:13:f6:de:87:62:
                    ad:30:e7:ba:1b:5c:2d:f2:6a:85:9b:78:23:86:f7:
                    85:c0:c3:82:51:36:4a:9a:f9:53:a6:07:cd:2e:4f:
                    a9:89:49:64:0b:8e:29:f8:ed:61:9a:7d:8a:3b:c4:
                    65:33:c2:2c:35:c9:00:a5:a8:16:a3:91:0d:b2:e6:
                    64:89:ca:32:ac:9a:8d:68:3b:b0:20:00:38:68:70:
                    1d:f8:05:99:ce:4d:a9:a3:84:19:8a:f5:9d:64:08:
                    d3:84:07:1f:a5:54:57:52:64:95:9d:da:73:1b:dd:
                    37:4b:bd:28:b5:0e:81:dd:19:75:6e:bd:ed:64:a6:
                    2e:f9:d4:c3:b2:cf:40:b5:38:5c:82:cf:e6:c6:e7:
                    03:8a:b2:e3:a4:40:6c:02:36:b2:2b:45:04:1e:0e:
                    53:d9:97:d8:2e:46:ff:02:7e:a1:d4:03:ca:79:de:
                    5d:52:93:fc:27:df:0b:42:03:5c:5f:f3:aa:43:80:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:27:69:40:E7:00:BE:96:53:05:D8:89:24:EA:EE:BE:2D:E8:D4:1E
            X509v3 Authority Key Identifier:
                keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f2:e6:03:bb:14:a7:e4:7d:86:62:21:fa:8f:9c:8a:9c:eb:
         25:5a:3e:6c:82:70:c3:a7:c2:b3:85:d1:2c:67:2c:6a:3f:18:
         27:0e:09:e4:56:6b:2f:42:32:2c:59:e1:2f:40:fe:f4:a6:ad:
         f3:5b:e8:4b:25:45:ce:c7:c7:38:ca:35:78:f2:6a:11:c7:72:
         ab:df:ba:1c:72:60:f6:87:10:54:38:a8:dd:59:a8:6d:b7:e7:
         9a:07:13:e8:55:b7:80:55:45:bd:a0:b5:53:b7:35:b7:56:95:
         b4:63:d1:d3:b9:e8:5b:35:21:f9:8d:73:80:ca:22:f6:88:a8:
         38:5a:d3:92:54:51:36:53:31:56:71:cd:ed:cb:f8:9a:ae:1c:
         17:0a:6e:77:50:b6:ff:69:b2:b2:ee:6f:85:40:3f:76:10:26:
         79:b7:21:bf:c0:21:92:8b:a8:48:5a:1e:8c:3d:08:fb:93:7f:
         49:44:8d:84:49:33:c1:d0:f4:0c:37:a8:95:cd:75:80:33:44:
         c4:f8:99:68:bd:ed:6c:63:39:ca:92:17:70:70:8b:d4:0b:62:
         9d:f8:5c:f2:64:ae:49:88:ee:b6:5a:d0:b2:06:90:e9:44:68:
         b2:47:cd:d7:9f:36:df:0c:7b:53:27:8c:0e:09:d3:80:97:29:
         38:dd:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:30:23 2025 by rpki-client