This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
File:                     J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json)
Hash identifier:          bH//nFoL3dq6hr7DMUkqWxYwfQEK+i1yr4eQKde0i0E=
Subject key identifier:   69:4D:A8:B6:8D:4F:3F:F3:FB:CE:1F:C0:0B:DF:4D:FE:CC:92:26:92
Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
Certificate issuer:       /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Certificate serial:       0C9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
Manifest number:          0C8A
Signing time:             Sat 06 Dec 2025 17:50:23 +0000
Manifest this update:     Sat 06 Dec 2025 17:50:22 +0000
Manifest next update:     Sat 13 Dec 2025 17:50:22 +0000
Files and hashes:         1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: avnIsfc3X08N5oRujtibDtr4iWwAG/LAIHf9jGsFMEA=)
                          2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: fPyMz9KhC5TO2GXmYwuNL/8fF1nSLqleV8d4Bv+swGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
                          rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3226 (0xc9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
        Validity
            Not Before: Dec  6 17:50:22 2025 GMT
            Not After : Dec 13 17:50:22 2025 GMT
        Subject: CN=69346cdf-07f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:07:b3:e7:c0:ba:27:d3:43:3e:5b:5e:29:
                    5a:6c:6e:5d:5b:11:d3:3f:f4:24:8b:b8:e2:32:6d:
                    ce:d1:ad:91:fa:09:85:0b:c0:c5:7e:36:00:b6:ba:
                    0d:41:ad:f4:d6:92:60:c6:3c:34:a1:c6:51:59:e8:
                    1e:ba:2d:bd:a5:49:e2:46:0e:c2:d3:38:6d:79:33:
                    d6:62:57:43:41:0b:88:e1:1b:ec:66:d6:86:2b:85:
                    a3:5b:f7:f7:50:5b:f2:20:f2:fb:b7:33:5d:7b:d7:
                    e2:31:4b:da:b8:f1:91:1a:4b:ec:ee:97:de:f1:96:
                    e9:8a:66:3c:33:4b:6d:31:34:be:7b:98:da:5a:6b:
                    b6:88:89:3a:62:07:51:4f:f6:0f:23:73:45:d8:a0:
                    9f:4f:8d:02:c2:6e:62:2a:15:9d:b6:d4:49:05:ff:
                    d9:50:71:30:cd:be:e4:e8:85:24:6f:15:54:4f:e3:
                    49:dc:52:d4:88:92:dc:ac:55:a6:83:fa:1d:5d:41:
                    b5:e4:0d:a8:09:86:cf:6a:82:40:9f:ee:2e:c9:c3:
                    37:87:8b:49:61:23:bc:ec:42:c7:05:ff:9d:93:44:
                    cd:a4:bd:8e:f2:3c:40:6d:24:64:c5:88:34:35:c6:
                    d7:b2:6e:85:89:2b:6b:f6:38:d6:dc:b3:d6:00:7a:
                    9e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4D:A8:B6:8D:4F:3F:F3:FB:CE:1F:C0:0B:DF:4D:FE:CC:92:26:92
            X509v3 Authority Key Identifier:
                keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:18:76:9a:b0:2c:84:9b:0a:f8:e2:6f:9c:94:72:38:24:da:
         e1:30:88:21:93:a0:29:21:60:4c:54:e0:9d:ff:26:55:be:b6:
         16:56:29:d7:53:48:47:7e:43:60:99:73:1f:6f:40:b5:b6:65:
         74:3f:90:91:f1:ad:fc:e4:fb:ec:8b:ab:aa:e7:59:7a:c4:6e:
         b1:f9:ce:25:a1:34:e6:5c:2e:5a:4d:30:28:d0:b6:54:92:9a:
         bb:75:02:43:a4:f9:b3:a7:32:43:64:78:4e:60:ec:66:e1:95:
         e6:2a:85:8e:c2:50:6e:6b:80:5e:84:20:4c:c6:cd:05:2e:3a:
         29:58:ff:bd:a7:b1:6f:16:1c:65:2a:91:6d:51:90:f5:25:c7:
         e7:3c:70:28:a5:72:1c:63:be:f7:08:39:7e:dd:ef:21:3e:47:
         d2:5c:79:13:80:ef:0b:ad:7d:1d:ec:de:e9:17:e5:a0:4b:fe:
         d9:ff:6b:b4:37:27:73:46:81:da:70:63:42:4f:7c:b2:56:42:
         cb:55:4f:59:5d:1a:83:bb:14:e2:0f:6e:18:54:d8:cb:35:a8:
         4c:ce:f2:2c:8f:b8:cb:7d:26:75:36:18:cf:92:68:55:73:e6:
         a5:f8:78:06:33:1b:1f:81:75:f8:2b:bf:d4:46:55:9c:28:91:
         b9:52:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:21 2025 by rpki-client