This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
File:                     jhahBq30E6__xY8QEZJ09wDPpZM.mft (raw, json)
Hash identifier:          WIeTNuUIvCzQfPMEEo8RX8zOf+AlgpieVBsDxptbytI=
Subject key identifier:   20:8B:B2:2B:31:BD:15:D5:71:7A:29:FF:CD:1A:28:52:C9:15:CA:ED
Authority key identifier: 8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93
Certificate issuer:       /CN=A913EF8E/serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
Certificate serial:       02C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
Manifest number:          02C1
Signing time:             Thu 04 Dec 2025 23:48:20 +0000
Manifest this update:     Thu 04 Dec 2025 23:48:19 +0000
Manifest next update:     Thu 11 Dec 2025 23:48:19 +0000
Files and hashes:         1: jhahBq30E6__xY8QEZJ09wDPpZM.crl (hash: 0YFExdj9+onO8Ppq0z/YTFwf5CvFf+C0YVlU+95OYPc=)
                          2: 92F8EAF428F511EDA8D1655FC4F9AE02.roa (hash: g0WHVr1kPPMvFlHteDjphuuHkMNmIovAW1zjTKN/Axk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl
                          rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF8E, serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
        Validity
            Not Before: Dec  4 23:48:19 2025 GMT
            Not After : Dec 11 23:48:19 2025 GMT
        Subject: CN=69321dc4-5cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:e7:89:34:6d:25:99:45:8f:45:18:e3:38:
                    c0:47:b7:7c:b5:3c:f9:ab:bf:4d:57:b4:2d:e4:ac:
                    22:3d:8f:fe:e9:43:e9:df:4a:37:48:c1:b5:70:3c:
                    f4:c6:fe:3d:61:27:f0:d4:e5:36:e7:ca:b6:f3:21:
                    5e:35:0e:f0:c0:be:84:cb:d3:f0:cf:a2:c9:b2:9d:
                    6f:65:99:47:52:dc:b8:26:9b:55:5c:6f:7a:15:8f:
                    2b:5b:ce:91:18:4a:0d:8e:a8:39:b4:a4:ca:95:82:
                    8b:7e:d2:9d:11:6a:8c:a5:25:c6:7b:a3:fe:a0:d2:
                    87:14:67:fc:c5:2c:cc:d4:2a:20:b9:1a:3c:04:da:
                    6f:0c:1d:94:7d:64:1f:8d:d1:d5:7a:c7:2b:68:48:
                    e9:44:85:98:a1:29:20:37:7b:3a:71:a9:3d:40:88:
                    a5:14:d1:25:b9:fa:5b:37:ba:a4:ef:1c:ad:90:69:
                    e8:e8:31:85:9b:78:28:55:5e:6e:b9:08:a8:c0:df:
                    34:3b:79:d0:e4:4a:69:c1:2e:f3:8b:3b:8d:dc:cb:
                    7f:59:ce:2f:cb:2a:8e:77:d7:87:6f:46:48:d0:df:
                    53:86:fe:a4:6b:bf:d0:ea:31:2b:0e:e1:df:f2:fc:
                    77:7a:c9:65:72:76:7b:93:af:bc:c2:8f:e2:57:4b:
                    3c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8B:B2:2B:31:BD:15:D5:71:7A:29:FF:CD:1A:28:52:C9:15:CA:ED
            X509v3 Authority Key Identifier:
                keyid:8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:46:03:c9:f1:5a:bb:81:15:03:a8:cd:f6:6c:45:ba:53:9b:
         6d:c6:d8:26:64:90:63:fe:0b:41:3b:6b:25:4b:db:2a:8d:a0:
         7a:2d:2b:72:12:bf:54:ca:2d:de:fd:32:e8:37:80:81:ec:04:
         9d:aa:5a:9c:65:1d:1d:5d:0f:38:c6:79:c2:c8:1f:6b:35:74:
         20:50:24:2e:2d:70:a5:4c:00:80:13:57:f9:3e:8b:fb:f6:c3:
         a3:a1:9f:fe:aa:da:57:4c:ea:39:de:8f:33:5d:07:a2:5e:d8:
         e1:b9:81:2d:c2:a0:61:f5:e6:72:f3:ef:d9:c6:09:f3:c5:84:
         96:40:66:4c:77:d3:41:f7:2b:7e:97:ae:f1:76:1e:63:a7:59:
         b3:bb:0b:ca:f6:2c:4f:f9:e9:49:d1:4d:22:3f:3f:db:37:5b:
         8a:51:c0:31:dd:e5:fe:1c:9c:48:49:24:bb:28:73:8c:1d:48:
         f0:cd:45:1b:62:9d:2b:0b:4d:f1:e8:58:be:fb:d9:79:5a:b8:
         8b:6b:b5:7d:87:ac:48:83:ef:e9:5c:c0:9c:27:33:d6:31:64:
         80:98:f0:9b:01:c7:8a:db:e3:6c:f1:6d:a5:97:ba:dd:f5:a1:
         98:ec:b3:8f:1b:0f:5c:56:4a:1a:2e:42:e6:d8:f7:23:ef:3e:
         c2:0f:a5:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VGOEUxMTAvBgNVBAUTKDhFMTZBMTA2QURGNDEzQUZGRkM1OEYxMDExOTI3NEY3
MDBDRkE1OTMwHhcNMjUxMjA0MjM0ODE5WhcNMjUxMjExMjM0ODE5WjAYMRYwFAYD
VQQDEw02OTMyMWRjNC01Y2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsdvniTRtJZlFj0UY4zjAR7d8tTz5q79NV7Qt5KwiPY/+6UPp30o3SMG1cDz0
xv49YSfw1OU258q28yFeNQ7wwL6Ey9Pwz6LJsp1vZZlHUty4JptVXG96FY8rW86R
GEoNjqg5tKTKlYKLftKdEWqMpSXGe6P+oNKHFGf8xSzM1CoguRo8BNpvDB2UfWQf
jdHVescraEjpRIWYoSkgN3s6cak9QIilFNElufpbN7qk7xytkGno6DGFm3goVV5u
uQiowN80O3nQ5EppwS7zizuN3Mt/Wc4vyyqOd9eHb0ZI0N9Thv6ka7/Q6jErDuHf
8vx3esllcnZ7k6+8wo/iV0s8nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCLsisx
vRXVcXop/80aKFLJFcrtMB8GA1UdIwQYMBaAFI4WoQat9BOv/8WPEBGSdPcAz6WT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUY4RS8yQUIyNDkxODE3
MUIxMUVEQjM1NDRENjhDNEY5QUUwMi9qaGFoQnEzMEU2X194WThRRVpKMDl3RFBw
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2poYWhCcTMwRTZfX3hZOFFFWkowOXdEUHBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUY4RS8yQUIyNDkxODE3MUIxMUVEQjM1NDRENjhDNEY5QUUwMi9qaGFoQnEzMEU2
X194WThRRVpKMDl3RFBwWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDRgPJ8Vq7gRUDqM32bEW6U5ttxtgmZJBj/gtBO2slS9sqjaB6LSty
Er9Uyi3e/TLoN4CB7ASdqlqcZR0dXQ84xnnCyB9rNXQgUCQuLXClTACAE1f5Pov7
9sOjoZ/+qtpXTOo53o8zXQeiXtjhuYEtwqBh9eZy8+/ZxgnzxYSWQGZMd9NB9yt+
l67xdh5jp1mzuwvK9ixP+elJ0U0iPz/bN1uKUcAx3eX+HJxISSS7KHOMHUjwzUUb
Yp0rC03x6Fi++9l5WriLa7V9h6xIg+/pXMCcJzPWMWSAmPCbAceK2+Ns8W2ll7rd
9aGY7LOPGw9cVkoaLkLm2Pcj7z7CD6W8
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:53 2025 by rpki-client