This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
File:                     RjnSkJhvTwBU_cBZAURBYh06u_8.mft (raw, json)
Hash identifier:          ygVbn7arg7MVR12sRcmmIXCpVuJYKy+nbYX9301j/lw=
Subject key identifier:   33:47:60:1F:33:BA:DB:E4:74:97:29:61:3E:3F:50:14:68:CE:45:6E
Authority key identifier: 46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF
Certificate issuer:       /CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
Certificate serial:       0393
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
Manifest number:          038B
Signing time:             Sat 06 Dec 2025 23:26:12 +0000
Manifest this update:     Sat 06 Dec 2025 23:26:11 +0000
Manifest next update:     Sat 13 Dec 2025 23:26:11 +0000
Files and hashes:         1: RjnSkJhvTwBU_cBZAURBYh06u_8.crl (hash: LErcN9myD1h+K+tNXS8jtq9mjlEgf0KE6jEXS9gHerM=)
                          2: 8719518C26AD11EDA881874BC4F9AE02.roa (hash: bs5+XFoKF15//AFAKd1GGD7hmAgwTgeLUC9v0U9PGwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl
                          rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915 (0x393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B71, serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
        Validity
            Not Before: Dec  6 23:26:11 2025 GMT
            Not After : Dec 13 23:26:11 2025 GMT
        Subject: CN=6934bb93-fb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:5c:68:99:d6:fc:99:35:b7:ac:15:b4:f7:
                    31:01:ac:f7:16:50:7f:79:b5:2e:59:eb:dd:a3:d3:
                    ee:56:7d:5f:1a:c5:81:b3:76:35:3a:e5:6a:e7:4e:
                    1b:d2:81:39:8f:39:ab:c9:80:72:6f:fc:5f:0c:05:
                    43:90:b4:e6:45:0b:6c:42:47:05:a3:71:89:e7:2d:
                    d1:eb:f5:5d:b3:d1:60:68:9a:42:fe:d0:9b:2e:c9:
                    3d:8d:30:a8:71:d8:e4:cf:60:32:58:26:2a:d1:59:
                    6e:dd:27:af:55:50:15:04:81:e1:8e:c8:69:fe:5c:
                    43:1a:61:67:1b:af:47:ec:61:fb:d2:42:9a:33:cb:
                    70:70:b9:bd:57:73:af:04:e8:33:f1:46:d4:9b:82:
                    dc:bb:a3:9f:fb:74:63:7c:43:5e:20:a8:ec:89:14:
                    07:68:c7:c0:3e:b3:00:af:dc:98:f1:ed:ff:69:15:
                    b4:9a:02:09:e1:2e:ab:05:75:56:e3:96:af:f7:45:
                    fe:98:b8:a1:9f:1e:55:3a:94:78:13:df:79:a7:6b:
                    c8:0f:cd:49:df:de:8f:0b:ea:8a:66:21:75:dc:e2:
                    a5:c6:8f:16:61:77:7c:56:15:61:6f:ac:06:69:b3:
                    a9:34:ca:ad:33:bc:34:79:10:e1:8f:9b:c5:91:a1:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:47:60:1F:33:BA:DB:E4:74:97:29:61:3E:3F:50:14:68:CE:45:6E
            X509v3 Authority Key Identifier:
                keyid:46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:21:25:65:fa:2d:4c:2c:7f:36:28:10:ce:a1:75:9c:6a:
         92:1c:4d:c5:fe:d8:14:1f:61:d8:14:08:e9:a8:1f:93:8d:a0:
         aa:9b:63:e3:81:85:68:3e:b2:13:45:fa:1b:71:cb:11:47:54:
         34:a7:a4:b0:9b:f2:ab:14:e5:4e:31:24:18:6b:5e:b8:97:03:
         31:86:b8:53:99:1e:f4:11:8d:39:2b:83:f2:27:41:36:ba:dd:
         bb:60:d4:ed:23:cf:bb:9e:7a:15:e4:2f:69:64:90:e9:65:3f:
         80:17:c5:97:77:e3:6b:9c:fd:0a:c8:bc:5c:0c:ee:a9:7d:93:
         03:b9:c1:37:9a:8b:78:9c:7d:b6:31:0b:2b:69:e6:db:13:55:
         b6:80:80:2a:f5:9a:80:57:26:fa:3a:87:98:9b:15:8f:13:fd:
         48:1c:21:14:32:1b:7d:e3:fb:0a:b1:ce:c1:55:f6:eb:6b:2f:
         cb:90:f3:30:0d:1d:92:56:12:5a:5d:28:81:cc:7d:58:63:43:
         30:10:2a:2d:03:38:fb:4f:5e:6e:f5:3e:5d:df:1e:5e:0c:61:
         12:13:24:98:e0:6c:07:7e:4a:2d:21:3d:26:f0:39:6e:a6:d9:
         2f:fd:e7:a7:36:81:fd:3c:04:54:d1:ac:18:45:f8:e9:72:1e:
         99:74:05:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:12:02 2025 by rpki-client