This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
File:                     jBwU3BZ027aLSUMBWHs9L5jtcBs.mft (raw, json)
Hash identifier:          60Pu/bGJKVzKKM7FwbuN9sg/6/H4pbOyXRlEpEZ78JM=
Subject key identifier:   E6:D2:D3:A5:14:90:21:9D:DC:66:24:38:7F:E8:7F:FE:C5:10:32:79
Authority key identifier: 8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B
Certificate issuer:       /CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
Manifest number:          0147
Signing time:             Fri 05 Dec 2025 02:26:33 +0000
Manifest this update:     Fri 05 Dec 2025 02:26:33 +0000
Manifest next update:     Fri 12 Dec 2025 02:26:33 +0000
Files and hashes:         1: jBwU3BZ027aLSUMBWHs9L5jtcBs.crl (hash: 4C/5k639BnzJLTdH19C9lSP+4PaP78knKQL2tFS84MA=)
                          2: 24241410E2A211EEBFC9412EC4F9AE02.roa (hash: /HUgZFHQdOKqVGsoyIo8SC7cdtj7Z66CHfzRpJ6gBOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl
                          rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912ECA4, serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
        Validity
            Not Before: Dec  5 02:26:33 2025 GMT
            Not After : Dec 12 02:26:33 2025 GMT
        Subject: CN=693242d9-5a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:51:46:d2:ed:79:3b:f8:d0:53:62:97:8a:
                    76:fc:dc:2f:c4:90:fe:0a:e8:c0:44:b8:c2:f1:16:
                    1e:d1:03:4f:d9:14:f1:51:0b:d0:c7:7a:ae:85:0b:
                    14:a8:8a:fa:76:3e:eb:57:06:39:41:fd:df:37:95:
                    0d:59:16:e2:8d:af:e2:6e:03:f7:34:cc:71:63:3a:
                    d3:6f:30:10:42:9a:b3:7f:70:2e:12:42:2e:56:8a:
                    08:46:55:30:40:1a:c0:6d:f9:b9:5a:67:60:f4:ab:
                    83:42:a4:94:4e:ce:e9:07:e0:fc:a4:88:d3:33:f3:
                    7e:4d:85:2f:b3:6e:72:b1:1f:aa:4b:2d:05:84:0a:
                    3a:88:24:31:3d:35:ad:7a:ce:79:c8:bd:51:93:38:
                    5e:50:e7:b9:d0:c1:29:a0:4e:56:5c:4b:6a:de:49:
                    4c:97:0a:8f:19:09:4d:db:e4:51:3a:e9:a2:eb:bd:
                    4b:bb:97:a8:fa:2c:71:07:d9:da:8b:1b:55:db:a3:
                    62:18:2b:54:3b:1c:ab:12:2b:07:51:6c:af:a5:9d:
                    e0:ae:fc:ef:1c:85:06:71:3d:3a:41:30:de:80:db:
                    a8:4a:b2:36:39:ed:48:9b:4e:21:7c:7f:e6:e9:c0:
                    4b:65:0f:1c:ec:aa:80:11:9f:87:d4:30:d1:d9:49:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D2:D3:A5:14:90:21:9D:DC:66:24:38:7F:E8:7F:FE:C5:10:32:79
            X509v3 Authority Key Identifier:
                keyid:8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0d:ed:f9:bf:26:39:25:4b:6d:7e:94:49:5a:25:b2:3d:08:
         dc:eb:3f:47:b7:7e:ad:43:3d:2c:5e:d5:b5:06:7b:d5:b2:5f:
         b9:91:bd:cb:ea:6a:5e:69:0c:ed:0d:b8:84:14:88:a9:34:9b:
         c9:a8:d1:2f:eb:71:0a:cf:70:cd:0b:cc:bf:ce:fe:b6:17:48:
         f8:52:32:b0:45:8a:f4:95:b8:57:27:f0:e9:a8:a1:d1:4a:23:
         cc:78:e9:76:da:11:df:f2:17:16:eb:d2:18:dc:98:97:83:50:
         40:82:0c:c3:4b:9c:c0:e5:17:80:0e:63:cf:77:7a:13:68:b7:
         ed:56:d8:2c:c1:e0:79:bb:4a:6d:32:cc:11:59:2e:65:78:d0:
         26:bc:9e:a4:b9:fe:9d:85:45:f3:ee:b5:47:81:33:f1:ff:0a:
         ad:18:05:41:6c:76:1f:49:6f:b7:45:40:63:a8:9f:01:c4:01:
         7f:8d:13:22:e0:66:e3:7b:cb:74:8b:e2:48:d8:15:10:a6:86:
         8c:5e:f1:92:f0:98:2e:a8:5e:e6:d3:86:f5:e8:3e:e0:5b:ab:
         bb:2d:d9:a2:b9:37:e0:cf:6f:8a:af:45:96:89:a7:6d:f5:6d:
         57:b2:71:85:d3:09:7e:41:5c:20:1d:ca:71:ae:b8:96:bc:19:
         46:3e:30:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:43:43 2025 by rpki-client