This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
File:                     jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json)
Hash identifier:          rj76lB1HxZ/Ql+MFS8IUAhSz5hUo1mCsIF5L5x/9KxU=
Subject key identifier:   9C:24:9B:2A:25:79:AA:FC:10:F9:59:30:8C:2C:52:10:9D:F5:5D:35
Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5
Certificate issuer:       /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
Certificate serial:       34F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
Manifest number:          34EE
Signing time:             Thu 04 Dec 2025 14:58:00 +0000
Manifest this update:     Thu 04 Dec 2025 14:57:59 +0000
Manifest next update:     Thu 11 Dec 2025 14:57:59 +0000
Files and hashes:         1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: rmLDXhm7a60vOrLJOXbRHRPYjXOy6j7slhmUqMc05XU=)
                          2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: END/X8NWEnYQqU51TlQvCrkCaUczqULOOoxx1HVtbaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl
                          rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 14:57:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13559 (0x34f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
        Validity
            Not Before: Dec  4 14:57:59 2025 GMT
            Not After : Dec 11 14:57:59 2025 GMT
        Subject: CN=6931a178-b649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2b:ef:05:10:bd:62:4b:9f:5f:2f:a9:2c:6f:
                    8d:12:1d:a5:7f:d7:cd:91:bd:f6:29:7e:84:1e:fa:
                    90:4a:83:d1:cd:49:37:be:1b:49:9e:6a:d8:19:14:
                    d4:15:c3:5d:63:73:1e:d2:ee:a8:cb:ce:3a:e8:23:
                    d3:67:05:b1:cc:55:9c:c9:0f:34:a9:15:d3:c5:6b:
                    51:a1:1a:c6:4d:fb:22:26:52:54:3a:e6:69:fd:3a:
                    fb:6c:6a:e6:c4:ad:a0:c3:83:50:de:5b:8e:e9:aa:
                    e4:ec:69:31:19:a9:bb:84:6f:2f:24:a2:d9:0a:b3:
                    06:86:15:2e:3b:09:d7:80:13:f6:b9:3a:3b:c2:7e:
                    39:2f:cb:5d:0e:be:10:4a:bb:57:38:93:25:b7:f5:
                    b3:93:a1:17:4f:d7:fb:62:55:60:be:f5:08:6b:ab:
                    84:16:28:17:d8:2d:6a:be:c9:20:fd:0d:65:d3:59:
                    e0:55:db:5c:8a:89:1e:c8:99:7b:4f:a2:ae:ba:78:
                    b8:e0:08:14:07:0b:78:77:01:f5:aa:37:01:7d:3f:
                    1c:e0:40:6e:30:2f:3e:6c:6d:f8:30:e0:61:5b:46:
                    58:ee:a2:66:a3:9f:07:48:86:3e:82:df:bd:58:97:
                    83:c9:9b:16:ab:0d:f2:21:12:ee:44:c2:c2:73:54:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:24:9B:2A:25:79:AA:FC:10:F9:59:30:8C:2C:52:10:9D:F5:5D:35
            X509v3 Authority Key Identifier:
                keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0c:70:df:8c:be:e7:60:01:14:5e:b1:8f:41:57:b3:11:b3:
         27:43:b8:60:fe:ec:15:dc:3b:40:b0:71:27:fe:ff:45:ab:54:
         e5:2b:78:0f:a8:4c:60:72:ec:b9:7a:a3:7f:2b:11:e9:5c:93:
         46:79:39:6d:f9:5c:b8:c8:1c:67:3b:f2:24:c1:d0:48:6b:b2:
         3f:46:99:da:11:b3:fe:9f:33:28:90:06:45:62:f5:99:22:1d:
         6f:d3:2c:12:ad:a1:cc:c3:0b:a3:60:99:3e:94:5f:ab:91:8f:
         43:3b:95:e9:26:40:dc:26:50:2f:e4:3b:50:7f:22:28:1b:a2:
         d5:da:2d:93:25:7d:37:ee:ca:b7:59:43:ab:7e:16:6a:a6:01:
         97:13:f3:00:59:76:9b:eb:8c:d0:a2:eb:51:20:c5:80:fa:80:
         ae:2a:e6:c1:81:0e:52:02:9e:37:2c:cf:03:dc:d3:8b:f6:54:
         1a:15:dc:fe:3f:ad:f9:79:45:fb:5e:b5:c4:6e:0b:3e:9a:47:
         61:70:85:23:a5:e3:da:76:36:c9:b7:44:67:37:ce:74:94:a4:
         8d:fd:f2:c7:9d:2b:64:09:05:9e:49:70:1f:03:f6:59:1b:f3:
         aa:86:74:da:9b:87:5b:c7:2a:a7:e6:34:7e:93:c2:c6:97:84:
         fd:08:96:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:21:57 2025 by rpki-client