This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
File:                     Jaw-SPLljojGBUR5jsZyQHa1NBM.mft (raw, json)
Hash identifier:          IUjsWyelCl5bpsl2OPj7AUb+u0woeHSIix4q+wIvPi8=
Subject key identifier:   DA:9A:7D:C5:34:5D:05:D3:AE:F5:A6:32:EB:A0:05:FE:3B:F1:E3:F6
Authority key identifier: 25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13
Certificate issuer:       /CN=A9153E2E/serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
Manifest number:          A3
Signing time:             Fri 05 Dec 2025 04:17:43 +0000
Manifest this update:     Fri 05 Dec 2025 04:17:42 +0000
Manifest next update:     Fri 12 Dec 2025 04:17:42 +0000
Files and hashes:         1: Jaw-SPLljojGBUR5jsZyQHa1NBM.crl (hash: AH9NixLSlzmwJmHOLUz28Cu80gZWI92QQdD4Kg24pRU=)
                          2: 71C4845EDD9A11EF8CFB3566C4F9AE02.roa (hash: q8qRZFfAVzgIauqz1ihRf+xBJuLgyAO5SwoBoXxRRHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl
                          rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153E2E, serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413
        Validity
            Not Before: Dec  5 04:17:42 2025 GMT
            Not After : Dec 12 04:17:42 2025 GMT
        Subject: CN=69325ce6-a004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:ca:a8:fc:5f:f7:bd:9c:10:ec:ef:c4:22:
                    36:c6:40:8a:14:18:97:ae:44:aa:f1:4d:da:d0:3b:
                    b6:be:b6:3a:59:fc:d9:a0:17:b6:b1:7f:df:95:48:
                    4d:aa:6a:ac:c3:cf:23:6f:c9:5f:6f:76:29:d4:14:
                    25:e5:be:83:ce:d6:b5:99:b6:ba:01:0f:5c:78:31:
                    22:a1:7a:d8:4f:90:dd:ab:c6:c9:76:67:1c:7f:c3:
                    6c:30:db:a2:ba:50:1c:b0:1d:a6:70:e4:21:19:79:
                    03:0c:03:b1:55:dd:8b:bb:f2:31:00:31:cf:7f:fc:
                    a2:18:48:9c:fc:dc:67:3e:25:35:44:4a:c6:b9:fd:
                    94:bd:56:dc:81:48:75:c2:8c:70:5f:63:96:1b:75:
                    bc:b1:61:c5:6f:ab:66:b1:46:cd:3d:22:1f:55:32:
                    f5:c0:06:89:e7:71:a0:5c:c4:7b:8e:52:05:e4:43:
                    b7:a0:59:59:6f:b2:68:66:81:a6:a4:1f:48:ba:54:
                    27:c7:1a:d0:2a:a3:82:ec:e2:c9:cb:c4:af:04:c5:
                    bd:0a:a8:e1:6f:ec:bd:c4:90:44:c6:4c:2d:6e:25:
                    c6:16:48:7f:23:1b:5a:b7:e5:07:9e:ff:85:7e:f8:
                    45:20:10:9b:5c:0a:73:80:92:b0:c4:e6:67:a3:6a:
                    64:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9A:7D:C5:34:5D:05:D3:AE:F5:A6:32:EB:A0:05:FE:3B:F1:E3:F6
            X509v3 Authority Key Identifier:
                keyid:25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:46:12:87:d2:81:71:45:04:33:81:7c:3d:1b:cb:a3:bf:0d:
         7f:be:e7:e9:5c:eb:0e:3b:57:bb:58:ec:89:91:26:d4:d5:8a:
         ac:43:1d:f5:b3:74:67:8e:cc:3b:ab:59:ef:6d:dc:2f:fd:20:
         a9:2b:05:98:65:ad:bc:27:b5:96:f1:30:12:8c:60:d2:b0:5b:
         bd:cd:25:75:c9:54:e7:7d:d4:5b:5c:2f:37:62:6a:0a:8e:54:
         d1:1a:26:57:ae:3f:c5:ae:0a:a8:c8:56:8c:b6:1f:45:08:72:
         58:7a:7d:22:19:0f:0e:1b:96:48:55:20:f8:c9:14:0d:f0:63:
         00:3b:76:e3:06:de:89:61:ed:4e:47:19:05:ce:3f:88:2c:b2:
         b2:3c:6a:9d:8f:fb:5a:3d:3e:a4:71:f7:ea:6b:c6:7a:a2:47:
         a0:e7:2e:e6:65:eb:85:39:0a:d3:06:0c:d0:55:de:44:43:5b:
         60:6a:fb:2a:f1:22:12:2a:6c:e9:4f:22:8d:79:a5:90:ea:2f:
         24:0a:ef:a2:6d:74:76:0c:75:f4:2c:82:6e:00:cf:54:b4:f3:
         aa:ab:f8:9e:ee:4f:4e:ce:76:c4:56:9c:7f:cb:ff:76:e1:3b:
         90:1d:87:9d:61:20:74:6e:2a:be:d3:d0:e4:4a:db:d8:3c:04:
         80:44:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:50:32 2025 by rpki-client