This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
File:                     SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json)
Hash identifier:          CrLlKchjE7nZn8mnMHBZTG0D0V5ImbZVR2ofpBWaagM=
Subject key identifier:   91:1C:6A:85:63:2E:24:45:B3:76:43:DE:C0:23:0C:0F:C3:D1:FD:CC
Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
Certificate issuer:       /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
Manifest number:          80
Signing time:             Fri 05 Dec 2025 04:39:50 +0000
Manifest this update:     Fri 05 Dec 2025 04:39:49 +0000
Manifest next update:     Fri 12 Dec 2025 04:39:49 +0000
Files and hashes:         1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: sYExaa9KVhougVZTw/oXlnbd6vwf1w9qyBWo3gsBVVk=)
                          2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: litZH04YNtCR4iuEOlm91tI8Ccgt0oYZlfR5gRznpNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
                          rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
        Validity
            Not Before: Dec  5 04:39:49 2025 GMT
            Not After : Dec 12 04:39:49 2025 GMT
        Subject: CN=69326215-5209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bd:0b:4e:c1:3d:f5:3f:87:7c:37:d4:f7:99:
                    46:ee:2c:e9:50:ba:45:5e:58:6b:89:9c:0e:6e:93:
                    0d:3c:3f:83:d4:eb:a8:d8:2c:7a:58:b2:67:01:f1:
                    db:3b:1a:99:a8:40:97:4b:92:3b:3b:7e:2f:ee:09:
                    e3:0d:c5:50:63:a9:2f:bb:fd:90:87:b9:df:8c:d4:
                    88:07:34:a5:aa:ff:2f:c4:39:f6:19:8d:8b:c6:fe:
                    fb:3b:85:0d:d7:67:98:f1:02:ed:1c:4d:f8:93:b2:
                    5c:a8:de:f7:e7:a5:92:a6:63:6a:23:23:0e:e8:9c:
                    1d:4a:a3:11:a9:85:3e:48:61:d5:65:33:95:03:32:
                    4d:34:07:f5:60:98:eb:d7:8c:18:c3:0a:06:57:6a:
                    76:44:ac:a0:87:0c:4e:91:e0:ad:37:f5:48:55:c5:
                    38:5a:46:80:58:96:5b:09:ca:b4:1b:11:6a:a5:56:
                    03:c3:68:f9:fd:3f:61:42:4a:15:16:57:3d:4f:75:
                    2b:aa:d2:ca:c2:2f:45:67:63:10:2e:2b:e2:21:1d:
                    f5:a8:be:d7:5e:04:cc:cc:3b:15:98:bc:e2:93:47:
                    fa:b4:59:ce:51:9f:b8:7f:d9:6a:bc:69:a5:5d:30:
                    ec:9a:d7:83:39:5b:e5:20:44:c8:a0:81:c1:8a:84:
                    e7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1C:6A:85:63:2E:24:45:B3:76:43:DE:C0:23:0C:0F:C3:D1:FD:CC
            X509v3 Authority Key Identifier:
                keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:a3:97:be:ff:0e:7c:ee:0e:b2:0c:64:44:b8:06:7d:70:
         f6:85:c1:a2:70:bc:82:9f:f5:16:df:42:9b:7d:d3:8d:01:4c:
         5c:32:9d:75:9e:b8:a1:3e:3a:41:8a:d4:2f:42:ce:3b:bd:bc:
         ed:3f:fc:b4:4e:45:e1:1f:ab:e8:2c:b7:48:c2:0c:53:37:2f:
         fc:cd:d6:25:d8:59:bd:67:34:bf:e4:00:be:0a:4d:e7:97:b0:
         2b:af:d0:5d:a3:31:a0:12:3c:42:21:7b:26:74:5b:c1:53:5a:
         22:a0:74:aa:a8:21:f1:44:81:f0:c3:a1:0c:d9:8a:fc:c7:92:
         fa:da:45:ce:d5:fe:ec:9e:14:2b:c9:e9:79:3a:6d:f3:5a:6a:
         b0:d7:d2:34:cd:48:4a:a7:32:70:d8:83:4a:71:50:e0:7d:3e:
         98:e0:2b:3c:c2:9c:a0:a6:6e:52:43:03:6b:38:6d:c3:16:44:
         4b:a6:2a:d6:41:17:d6:64:f2:57:14:d6:df:67:fa:d8:7c:98:
         cf:1d:a4:e6:4b:79:42:3b:5b:5d:6a:c2:6a:fd:08:e8:36:c6:
         27:32:60:26:62:54:bd:93:34:b3:e8:c3:40:16:45:d6:3e:3e:
         1d:c1:16:95:b1:73:5a:20:1c:a8:d5:3c:c5:53:7f:56:ae:ae:
         cf:cc:e7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:44 2025 by rpki-client