This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
File:                     jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json)
Hash identifier:          CAORBiwVW1j5eFPSBXCsDbwkJj+fZabeOTK6H3/TRaI=
Subject key identifier:   C0:48:8A:91:00:6E:94:D9:20:37:39:38:11:CE:74:B8:D8:FE:B0:09
Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07
Certificate issuer:       /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
Manifest number:          0159
Signing time:             Fri 05 Dec 2025 02:19:31 +0000
Manifest this update:     Fri 05 Dec 2025 02:19:30 +0000
Manifest next update:     Fri 12 Dec 2025 02:19:30 +0000
Files and hashes:         1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: VDHV7vzLAd0aDUihq7xAbO03/sYbXBQKAswbFgLlFvI=)
                          2: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: iEDYEWfoYMQVJJ00VYr7IBwUel6B4Ra9OcE7UNEl9qk=)
                          3: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: hDHi1gPuoYO8h6h8cGnKDVo4yTuh05LbS9LRcNViWNs=)
                          4: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: IHeuJXUBtMHC4lViJX3ZGo0Fkl0iqD4ifRHgtn92cpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl
                          rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
        Validity
            Not Before: Dec  5 02:19:30 2025 GMT
            Not After : Dec 12 02:19:30 2025 GMT
        Subject: CN=69324132-6039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:0c:e8:21:da:d0:52:94:70:c3:51:23:3c:
                    ea:7c:65:e6:cd:ad:63:c1:fd:56:9c:7e:58:c3:d2:
                    a3:61:64:51:b2:ac:92:9c:2f:e3:e9:4d:9e:3d:14:
                    5b:41:6f:81:ae:bf:99:54:10:d4:48:37:38:e3:9a:
                    a3:62:c0:3a:22:de:45:51:a5:a1:91:c1:fc:82:cd:
                    32:0f:3c:e5:33:fd:8e:f2:4f:ea:ba:56:16:bd:e3:
                    a1:6c:7e:d5:30:a3:e9:3d:7b:3f:61:71:3b:9f:f4:
                    d5:b8:9e:3a:f5:74:a4:05:0d:71:c3:1a:cc:9a:19:
                    11:61:bb:44:a8:f7:c8:7f:fc:2c:d5:17:00:fe:80:
                    de:b5:87:b6:f8:03:a7:94:5f:f3:67:31:25:24:b6:
                    d6:7e:c0:df:ec:f9:48:c2:6e:20:74:41:78:15:bf:
                    33:b7:10:20:1a:87:5f:2e:bc:57:a1:9e:e3:21:4f:
                    f1:6c:97:ca:26:32:48:4b:a9:44:d6:34:c1:5f:c2:
                    71:78:3c:65:d1:9b:55:ab:6e:d8:87:f8:44:be:c9:
                    35:b8:7f:22:ac:ce:35:dc:d2:23:84:40:ab:61:0c:
                    2a:73:fb:b8:43:37:4f:a5:df:2a:7e:79:c7:47:b8:
                    a3:34:28:24:c9:60:d0:79:7d:f0:c2:07:84:23:23:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:48:8A:91:00:6E:94:D9:20:37:39:38:11:CE:74:B8:D8:FE:B0:09
            X509v3 Authority Key Identifier:
                keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5d:0d:ee:3d:79:b5:dc:fb:e4:b0:4a:85:73:42:b5:4e:5d:
         7e:7d:1c:97:85:cd:93:18:e0:12:3c:c6:cb:a8:49:33:a2:b7:
         d3:d3:54:f6:e3:3c:13:01:c5:80:9a:57:5a:7a:8a:40:0a:0e:
         eb:4f:6b:37:c4:a4:d5:42:7a:a2:a7:63:6a:bf:a3:c6:52:8a:
         2c:a8:57:d8:52:3a:9e:db:56:c4:52:4d:36:6a:9f:9c:8d:fd:
         fe:29:90:f9:8f:1c:2a:ae:f8:dc:c5:91:dc:b1:4d:ac:7c:05:
         8a:35:0b:81:05:65:b7:3b:ee:31:f1:88:b8:38:e2:f9:76:ab:
         7b:12:e0:4e:c2:b7:da:55:da:62:4b:d2:ee:00:fe:d7:94:60:
         b3:c6:e4:1e:cb:ea:92:9a:e4:0b:d6:aa:80:4d:c3:22:cd:65:
         4f:77:78:e5:7d:ce:32:fe:c3:48:53:36:c9:36:53:76:f1:36:
         e3:de:2f:21:3f:b6:27:35:bc:50:1c:37:e8:00:91:ad:08:6c:
         8a:24:e1:c3:07:84:6b:b6:89:9e:8f:0b:a1:8f:bb:34:7f:c2:
         83:2f:20:20:b3:fb:48:cb:54:53:35:12:9f:f2:4f:dc:4e:59:
         5e:3a:81:cd:02:17:f5:04:f5:5a:96:59:4f:78:6a:b9:0b:75:
         c7:8a:71:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTYzMzQxMTAvBgNVBAUTKDhFOERENUIyQzEwMUI5ODNBNzk5QzkzOEFBMEU0MEE2
NTFGQ0JFMDcwHhcNMjUxMjA1MDIxOTMwWhcNMjUxMjEyMDIxOTMwWjAYMRYwFAYD
VQQDEw02OTMyNDEzMi02MDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwbwM6CHa0FKUcMNRIzzqfGXmza1jwf1WnH5Yw9KjYWRRsqySnC/j6U2ePRRb
QW+Brr+ZVBDUSDc445qjYsA6It5FUaWhkcH8gs0yDzzlM/2O8k/qulYWveOhbH7V
MKPpPXs/YXE7n/TVuJ469XSkBQ1xwxrMmhkRYbtEqPfIf/ws1RcA/oDetYe2+AOn
lF/zZzElJLbWfsDf7PlIwm4gdEF4Fb8ztxAgGodfLrxXoZ7jIU/xbJfKJjJIS6lE
1jTBX8JxeDxl0ZtVq27Yh/hEvsk1uH8irM413NIjhECrYQwqc/u4QzdPpd8qfnnH
R7ijNCgkyWDQeX3wwgeEIyPsuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBIipEA
bpTZIDc5OBHOdLjY/rAJMB8GA1UdIwQYMBaAFI6N1bLBAbmDp5nJOKoOQKZR/L4H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjMzNC9FN0NEREZDRUM4
RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZT25tY2s0cWc1QXBsSDh2
Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pvM1Zzc0VCdVlPbm1jazRxZzVBcGxIOHZnYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjMzNC9FN0NEREZDRUM4RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZ
T25tY2s0cWc1QXBsSDh2Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyXQ3uPXm13PvksEqFc0K1Tl1+fRyXhc2TGOASPMbLqEkzorfT01T2
4zwTAcWAmldaeopACg7rT2s3xKTVQnqip2Nqv6PGUoosqFfYUjqe21bEUk02ap+c
jf3+KZD5jxwqrvjcxZHcsU2sfAWKNQuBBWW3O+4x8Yi4OOL5dqt7EuBOwrfaVdpi
S9LuAP7XlGCzxuQey+qSmuQL1qqATcMizWVPd3jlfc4y/sNIUzbJNlN28Tbj3i8h
P7YnNbxQHDfoAJGtCGyKJOHDB4Rrtomejwuhj7s0f8KDLyAgs/tIy1RTNRKf8k/c
TlleOoHNAhf1BPValllPeGq5C3XHinF8
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:10:21 2025 by rpki-client