This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
File:                     j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft (raw, json)
Hash identifier:          5Y0MZcvFrnfphfZMEizC2akyaoTlx+zcVhGd9lPOuZg=
Subject key identifier:   09:92:1B:BB:CE:FC:AA:A7:9C:C7:28:DA:D4:E6:90:99:F3:2D:80:7C
Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E
Certificate issuer:       /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
Manifest number:          013C
Signing time:             Fri 05 Dec 2025 02:33:51 +0000
Manifest this update:     Fri 05 Dec 2025 02:33:51 +0000
Manifest next update:     Fri 12 Dec 2025 02:33:51 +0000
Files and hashes:         1: j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl (hash: bBuskjHGzP/QDg/eXbnqcwghwJDP8YBov3Wyp3s6B1g=)
                          2: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (hash: Ux7MrDkQdEj+Gtfnp0Wmpu2t6Z1MtA7yxD7lmndlZrU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl
                          rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF1D, serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
        Validity
            Not Before: Dec  5 02:33:51 2025 GMT
            Not After : Dec 12 02:33:51 2025 GMT
        Subject: CN=6932448f-e4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:61:ed:3d:75:99:de:34:5e:0e:11:07:e7:
                    ea:8f:09:23:f2:40:a5:89:84:00:a5:87:6b:52:80:
                    22:c7:0a:09:39:88:b7:74:50:2c:f9:04:da:8d:a0:
                    2c:58:cc:40:4f:44:b6:ff:a7:58:16:be:78:7d:64:
                    c6:7e:31:8e:9e:94:58:ff:c4:39:36:21:79:79:b9:
                    fc:ae:e3:ad:37:a4:a3:6d:d1:70:48:9d:14:32:77:
                    cb:c9:32:a2:9e:d1:e9:ac:87:8a:d9:61:c0:b2:52:
                    7c:04:84:d1:6a:94:16:80:46:a3:37:5b:46:ed:ce:
                    65:6b:8c:13:01:16:a5:94:df:2e:da:ba:c2:c4:41:
                    12:cc:23:b9:93:70:29:67:c6:2b:f9:27:06:05:e7:
                    ae:fa:18:ba:86:35:cd:1b:82:a1:4c:ed:33:22:05:
                    7a:48:91:e9:bf:fd:a5:85:de:ec:61:a8:f7:2d:b3:
                    13:c2:07:5c:92:86:3f:d0:3c:d1:8b:11:60:0c:c3:
                    4b:d7:18:61:82:be:5f:8e:39:db:e5:1e:ba:7a:ca:
                    c8:0b:0a:d2:ff:41:19:ca:2a:d9:6e:2b:06:fe:4a:
                    46:e6:89:1e:51:97:e4:b0:86:16:86:c4:cc:3c:b5:
                    e8:0a:53:4f:6a:07:51:45:c8:3b:4e:51:0f:60:51:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:92:1B:BB:CE:FC:AA:A7:9C:C7:28:DA:D4:E6:90:99:F3:2D:80:7C
            X509v3 Authority Key Identifier:
                keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:23:3b:4d:dd:f6:e9:66:b5:a3:5c:b7:5a:59:50:54:63:a3:
         24:1a:01:94:6f:19:c1:82:1f:33:af:7b:f6:b7:c1:95:db:6e:
         08:7d:d5:73:b2:2e:55:9c:fb:55:29:8d:c4:6a:c4:e9:4f:4e:
         52:ce:29:70:a6:b9:a3:e3:c7:d5:b7:e1:ea:99:b1:79:1e:23:
         48:d4:4c:ed:14:ea:af:0f:b7:6a:ff:08:7f:e7:9e:8c:da:c9:
         fc:c0:b0:98:25:7f:60:1a:9a:9a:4c:79:c7:2c:6f:e5:ba:4c:
         84:8c:67:e3:92:9d:9c:e9:fe:b3:23:3d:ae:80:59:dc:ac:8d:
         13:b3:72:52:4d:38:2e:33:d4:c8:3e:03:20:63:bf:ee:e6:8f:
         ac:86:3c:e2:68:23:0f:89:5d:96:2c:c2:6a:16:28:96:fa:dc:
         fb:52:e2:ac:57:02:a7:66:fa:e5:aa:e4:04:2d:14:9b:4c:cd:
         d1:72:9e:ab:c4:cb:d8:47:66:4a:a6:a3:16:fa:0c:fb:76:28:
         c5:35:51:50:09:9c:34:c9:a6:2c:64:99:db:bf:00:a6:37:19:
         d5:a2:9d:0a:9a:3e:e1:16:2b:0d:e9:66:c3:2b:be:1a:fe:5e:
         69:a4:39:2b:fd:d9:c3:f3:5e:7a:5f:54:24:a6:48:c2:cf:df:
         c4:0e:e8:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VGMUQxMTAvBgNVBAUTKDhGRTVBN0M5OThGQjhCNzhBQzMzMUVBRTgzQkMxNzg2
MjNFRTNDOUUwHhcNMjUxMjA1MDIzMzUxWhcNMjUxMjEyMDIzMzUxWjAYMRYwFAYD
VQQDEw02OTMyNDQ4Zi1lNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZ1h7T11md40Xg4RB+fqjwkj8kCliYQApYdrUoAixwoJOYi3dFAs+QTajaAs
WMxAT0S2/6dYFr54fWTGfjGOnpRY/8Q5NiF5ebn8ruOtN6SjbdFwSJ0UMnfLyTKi
ntHprIeK2WHAslJ8BITRapQWgEajN1tG7c5la4wTARallN8u2rrCxEESzCO5k3Ap
Z8Yr+ScGBeeu+hi6hjXNG4KhTO0zIgV6SJHpv/2lhd7sYaj3LbMTwgdckoY/0DzR
ixFgDMNL1xhhgr5fjjnb5R66esrICwrS/0EZyirZbisG/kpG5okeUZfksIYWhsTM
PLXoClNPagdRRcg7TlEPYFECKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmSG7vO
/KqnnMco2tTmkJnzLYB8MB8GA1UdIwQYMBaAFI/lp8mY+4t4rDMeroO8F4Yj7jye
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUYxRC9CQTlDRDhBQ0VD
RTYxMUVFQUFFOUU4MUVDNEY5QUUwMi9qLVdueVpqN2kzaXNNeDZ1Zzd3WGhpUHVQ
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2otV255Wmo3aTNpc014NnVnN3dYaGlQdVBKNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUYxRC9CQTlDRDhBQ0VDRTYxMUVFQUFFOUU4MUVDNEY5QUUwMi9qLVdueVpqN2kz
aXNNeDZ1Zzd3WGhpUHVQSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCbIztN3fbpZrWjXLdaWVBUY6MkGgGUbxnBgh8zr3v2t8GV224IfdVz
si5VnPtVKY3EasTpT05Szilwprmj48fVt+HqmbF5HiNI1EztFOqvD7dq/wh/556M
2sn8wLCYJX9gGpqaTHnHLG/lukyEjGfjkp2c6f6zIz2ugFncrI0Ts3JSTTguM9TI
PgMgY7/u5o+shjziaCMPiV2WLMJqFiiW+tz7UuKsVwKnZvrlquQELRSbTM3Rcp6r
xMvYR2ZKpqMW+gz7dijFNVFQCZw0yaYsZJnbvwCmNxnVop0Kmj7hFisN6WbDK74a
/l5ppDkr/dnD8156X1QkpkjCz9/EDuiL
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:42:36 2025 by rpki-client