This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
File:                     js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json)
Hash identifier:          myfV7nqb13pTWk3b3UG4MR7zmLCBiY4ZGGrs9CJ4XvY=
Subject key identifier:   C8:05:B8:30:F9:F0:AF:D0:BC:C2:AF:FF:EA:0D:F6:70:9D:72:1F:65
Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
Certificate issuer:       /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Certificate serial:       0313
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
Manifest number:          0304
Signing time:             Thu 04 Dec 2025 23:34:06 +0000
Manifest this update:     Thu 04 Dec 2025 23:34:06 +0000
Manifest next update:     Thu 11 Dec 2025 23:34:06 +0000
Files and hashes:         1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: YGJTm9/f/9qs/wfv16eZTNFnZ4EaW8voh+U6bPuAfN8=)
                          2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: Z1+2srjHcffoSnsNHW/6kMtu1QEBMk8cg+vN7B6fKN0=)
                          3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: b/uz4uUGbldWv98MGi9g31ZiA1AfDx60qTlS76qiVkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
                          rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136592, serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
        Validity
            Not Before: Dec  4 23:34:06 2025 GMT
            Not After : Dec 11 23:34:06 2025 GMT
        Subject: CN=69321a6e-2c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:38:e7:a5:9b:fa:2d:37:73:68:9b:2a:41:21:
                    9d:ed:58:51:a6:3b:fa:25:00:e7:e6:2e:84:fb:2c:
                    13:b3:8a:e5:d1:e2:76:47:1e:bf:57:d4:06:b2:65:
                    75:17:f9:59:fb:28:da:74:11:41:bb:af:2c:44:66:
                    1f:a3:67:f7:00:ec:22:ce:fe:6c:54:8e:8a:6c:bc:
                    e9:f7:88:8b:17:b5:ee:7a:a2:b8:60:b3:64:e1:2a:
                    ca:bb:75:2a:52:a7:42:d2:5e:ae:ac:03:c5:97:c8:
                    b4:dc:c4:c7:44:de:da:8b:f6:08:12:a1:f5:36:a2:
                    f6:eb:41:4b:3d:5f:6d:49:91:8b:8a:22:33:38:16:
                    3b:0c:39:3a:b8:6a:b6:e0:a2:e2:f0:db:e2:a2:de:
                    ec:c4:49:23:b8:a2:fd:e0:42:ea:b4:02:4a:d4:95:
                    49:8f:ce:ed:aa:f0:6b:9c:54:ee:0e:aa:8e:31:de:
                    70:7c:4c:cf:c9:44:4d:fe:4e:b4:f7:91:73:70:a4:
                    92:b4:49:c3:c9:65:10:33:29:bb:d1:1d:b1:9b:77:
                    1e:55:e9:3c:53:22:dd:a2:4d:da:48:65:1a:03:ee:
                    78:88:50:6f:dd:d5:43:36:49:f6:ed:59:68:30:ae:
                    1e:a0:99:73:5f:75:55:ad:de:bf:af:b4:32:03:57:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:05:B8:30:F9:F0:AF:D0:BC:C2:AF:FF:EA:0D:F6:70:9D:72:1F:65
            X509v3 Authority Key Identifier:
                keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:fd:b5:1f:73:65:af:3f:02:c0:e7:45:7f:74:79:a1:c5:50:
         25:ae:6e:42:43:26:d0:e6:2c:0e:ef:24:b7:6e:e7:17:2a:40:
         d7:3a:d7:35:f3:73:d7:9d:5a:f8:22:c9:52:34:38:5c:23:00:
         13:a1:c6:0e:73:49:9a:e6:43:e3:32:4f:4d:8c:21:6b:3d:42:
         24:32:79:a0:12:d9:83:ce:c5:56:21:c5:b7:e2:0e:da:f1:d3:
         78:b0:3f:00:6a:70:6e:ff:ff:9d:46:ad:cb:30:4d:b2:d5:2c:
         43:44:cf:29:4d:bf:42:bf:4f:b4:bc:f0:a1:b8:5b:6a:f2:7b:
         13:19:79:1f:7c:ae:69:e2:4f:19:ea:73:ec:5d:fd:36:4a:15:
         97:13:a2:56:d5:f8:ad:d5:25:6e:43:e4:93:b9:35:82:71:49:
         d9:c8:28:7d:1d:f8:eb:88:93:27:22:0a:3d:ef:31:10:64:34:
         7d:c0:36:3d:70:78:bb:5f:64:c3:37:01:98:5b:cb:ad:f5:fa:
         fc:15:e8:12:76:d6:7a:b4:2c:98:ff:c9:21:38:23:62:00:85:
         3b:a9:ca:88:90:7a:d5:bc:39:23:f3:55:a8:40:54:d9:62:f0:
         e4:f9:1c:ac:ee:9f:51:4b:8f:ca:b9:dc:48:9e:cd:15:f1:0f:
         e8:a8:96:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY1OTIxMTAvBgNVBAUTKDhFQ0Y5RkFFNDNGN0QxQ0Q2RTEyMDI4MzRDMEY0MUFD
QzFCRTFDMzgwHhcNMjUxMjA0MjMzNDA2WhcNMjUxMjExMjMzNDA2WjAYMRYwFAYD
VQQDEw02OTMyMWE2ZS0yYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1TjnpZv6LTdzaJsqQSGd7VhRpjv6JQDn5i6E+ywTs4rl0eJ2Rx6/V9QGsmV1
F/lZ+yjadBFBu68sRGYfo2f3AOwizv5sVI6KbLzp94iLF7XueqK4YLNk4SrKu3Uq
UqdC0l6urAPFl8i03MTHRN7ai/YIEqH1NqL260FLPV9tSZGLiiIzOBY7DDk6uGq2
4KLi8Nviot7sxEkjuKL94ELqtAJK1JVJj87tqvBrnFTuDqqOMd5wfEzPyURN/k60
95FzcKSStEnDyWUQMym70R2xm3ceVek8UyLdok3aSGUaA+54iFBv3dVDNkn27Vlo
MK4eoJlzX3VVrd6/r7QyA1eXNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgFuDD5
8K/QvMKv/+oN9nCdch9lMB8GA1UdIwQYMBaAFI7Pn65D99HNbhICg0wPQazBvhw4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjU5Mi9EOTE1MzFCNkZF
QzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBjMXVFZ0tEVEE5QnJNRy1I
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pzLWZya1AzMGMxdUVnS0RUQTlCck1HLUhEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjU5Mi9EOTE1MzFCNkZFQzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBj
MXVFZ0tEVEE5QnJNRy1IRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCz/bUfc2WvPwLA50V/dHmhxVAlrm5CQybQ5iwO7yS3bucXKkDXOtc1
83PXnVr4IslSNDhcIwATocYOc0ma5kPjMk9NjCFrPUIkMnmgEtmDzsVWIcW34g7a
8dN4sD8AanBu//+dRq3LME2y1SxDRM8pTb9Cv0+0vPChuFtq8nsTGXkffK5p4k8Z
6nPsXf02ShWXE6JW1fit1SVuQ+STuTWCcUnZyCh9HfjriJMnIgo97zEQZDR9wDY9
cHi7X2TDNwGYW8ut9fr8FegSdtZ6tCyY/8khOCNiAIU7qcqIkHrVvDkj81WoQFTZ
YvDk+Rys7p9RS4/KudxIns0V8Q/oqJaR
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:21:24 2025 by rpki-client