This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
File:                     JcIFLO89jt7xrjiFX-f7EbRXgRU.mft (raw, json)
Hash identifier:          0Emfa1OqL/hJfrPepyqgzzRH9LElomo5+9BlJrwGzKg=
Subject key identifier:   D8:9F:FE:D4:A2:BD:ED:C0:E3:AE:07:A0:72:0B:A0:17:70:81:0B:6E
Authority key identifier: 25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15
Certificate issuer:       /CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115
Certificate serial:       079C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
Manifest number:          0796
Signing time:             Sat 06 Dec 2025 20:30:31 +0000
Manifest this update:     Sat 06 Dec 2025 20:30:31 +0000
Manifest next update:     Sat 13 Dec 2025 20:30:31 +0000
Files and hashes:         1: JcIFLO89jt7xrjiFX-f7EbRXgRU.crl (hash: rgDKAg7QSQVCEy5sn4jeB2gFibOFYS9ciIcqSD8cLzM=)
                          2: 325A2ABA2F6D11EBAE27D010C4F9AE02.roa (hash: 1nDYvzLxRQLfDg2+9LpFsB+uny5wVx/68LnNdYTQqaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl
                          rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1948 (0x79c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F18, serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115
        Validity
            Not Before: Dec  6 20:30:31 2025 GMT
            Not After : Dec 13 20:30:31 2025 GMT
        Subject: CN=69349267-09cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:2b:36:af:77:f6:b8:01:df:dd:0b:7b:ba:
                    3d:35:8a:98:2e:14:b1:b6:3d:40:01:a1:aa:cf:66:
                    7b:de:6f:17:02:40:db:07:f3:ef:4d:88:5f:ad:f3:
                    15:c1:71:9b:5f:7b:84:72:a5:30:82:59:fd:ce:34:
                    b4:03:13:0f:e7:4d:d5:ca:0e:c2:82:47:f5:09:1a:
                    00:23:6e:69:11:9f:fe:58:31:83:f2:4a:68:47:b6:
                    37:31:e5:c7:d3:ea:b0:e3:ae:bc:eb:6b:2b:9a:1d:
                    aa:78:af:b6:67:a4:14:2e:79:4d:30:da:a4:9b:90:
                    8f:50:1e:40:5a:a3:65:7c:4e:8d:0c:ec:92:21:da:
                    bb:5b:0b:a8:52:c6:ef:1c:05:46:91:e9:42:f0:05:
                    d0:a6:9e:53:18:f8:a5:46:98:49:61:e5:3f:0f:2a:
                    f3:19:79:d2:6f:4d:45:54:44:7b:0a:8b:10:3d:b7:
                    c4:5d:c9:20:b6:00:a6:2a:50:1f:a7:7e:66:18:94:
                    76:ee:84:b6:2b:2e:b2:b8:68:1b:30:d4:02:93:c6:
                    26:ff:53:f7:46:16:61:fc:65:53:71:9c:4f:fb:bd:
                    7d:d4:e8:eb:00:d2:b3:ca:b2:b4:39:db:3b:86:22:
                    fd:13:fc:52:f1:33:7e:1f:a0:f1:6e:61:66:f7:a0:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9F:FE:D4:A2:BD:ED:C0:E3:AE:07:A0:72:0B:A0:17:70:81:0B:6E
            X509v3 Authority Key Identifier:
                keyid:25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d9:49:1a:f0:2d:b7:ac:90:ee:81:6a:14:93:fc:64:1b:05:
         55:88:d4:b8:78:1a:15:e4:4e:79:40:77:c8:c8:ae:ca:e6:51:
         19:82:5c:44:77:93:f7:58:42:6e:48:e3:e5:a2:60:34:22:66:
         35:91:01:4d:c3:3a:83:32:51:90:32:42:82:9b:12:24:5a:af:
         0d:93:4b:97:55:b8:4a:bc:db:4a:24:58:26:8c:34:33:d7:b7:
         cd:18:10:1d:eb:ef:6c:74:fc:42:ae:07:20:b3:9d:ea:e3:e8:
         32:d1:71:6d:9c:5c:03:ee:72:7b:d3:61:fd:c2:fa:83:05:5a:
         0b:4a:6f:77:ec:0e:07:e0:42:99:00:5e:70:e7:84:22:3c:10:
         a2:35:c7:b5:17:54:2c:71:e2:95:59:aa:35:04:17:b2:f3:b9:
         83:8a:5a:3d:ff:65:6b:2a:3d:79:eb:1c:85:45:3d:15:cd:27:
         a6:de:1a:b0:e2:bd:45:20:65:db:31:5f:46:17:5c:9b:9a:70:
         63:28:a1:e8:e1:8f:0b:3a:5f:21:7d:0f:79:fb:59:cd:6b:25:
         54:29:d8:ea:97:b7:ac:b2:fc:e0:b1:ff:3a:bd:03:92:93:62:
         9a:fd:1c:5e:9b:d3:6e:94:76:50:cc:06:83:a6:71:6f:66:fe:
         66:95:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:35 2025 by rpki-client