This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
File:                     JVLURML17uUkxsAbqk-d8rrsoqo.mft (raw, json)
Hash identifier:          UfbMJs8HGBYWhjjlVdgY8cD27wZcZzvaoA2WENuXhi8=
Subject key identifier:   BC:72:6E:85:CB:A9:57:10:8A:30:0F:8B:2F:51:B5:09:AF:EC:7C:25
Authority key identifier: 25:52:D4:44:C2:F5:EE:E5:24:C6:C0:1B:AA:4F:9D:F2:BA:EC:A2:AA
Certificate issuer:       /CN=A915D4BF/serialNumber=2552D444C2F5EEE524C6C01BAA4F9DF2BAECA2AA
Certificate serial:       0613
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
Manifest number:          0608
Signing time:             Thu 04 Dec 2025 21:38:11 +0000
Manifest this update:     Thu 04 Dec 2025 21:38:10 +0000
Manifest next update:     Thu 11 Dec 2025 21:38:10 +0000
Files and hashes:         1: JVLURML17uUkxsAbqk-d8rrsoqo.crl (hash: yngK3o9VZFM7yxhNvED72uuILGbzY4KQbFo2hyfhsko=)
                          2: C4563C423ABB11ECA7767769C4F9AE02.roa (hash: h+Hm6cbajTgkhZzanF9El8w5V1fDGKEA/3SkovhKfAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.crl
                          rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:38:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4BF, serialNumber=2552D444C2F5EEE524C6C01BAA4F9DF2BAECA2AA
        Validity
            Not Before: Dec  4 21:38:10 2025 GMT
            Not After : Dec 11 21:38:10 2025 GMT
        Subject: CN=6931ff42-cd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:56:b2:1f:93:83:24:8a:f7:64:62:d1:0a:
                    c5:cc:19:87:e5:9a:a1:f2:32:39:47:39:d8:e4:c4:
                    dc:62:c9:e6:aa:2e:66:1e:7f:fd:7f:ca:34:d9:55:
                    18:a7:d6:ae:e9:c9:d9:9c:aa:73:5a:69:7c:90:a8:
                    53:04:7b:3a:c2:5c:b0:a4:03:9a:b1:47:8e:26:0d:
                    13:0f:a7:27:96:82:f2:f8:27:4d:56:73:d0:a7:bc:
                    25:ba:7a:bf:61:a7:62:86:a8:ce:ce:5e:cc:bd:c3:
                    ad:60:4a:e8:83:44:d7:bb:c1:25:c8:02:4b:84:9b:
                    97:b9:ae:2e:37:23:c8:4c:1d:32:87:a8:50:32:62:
                    31:3a:45:c2:fd:e6:a2:82:bc:ac:f4:f7:bf:d5:6a:
                    ad:32:82:db:fb:a1:a9:fb:fd:14:5f:81:b9:4b:fd:
                    3a:cb:c0:9f:05:79:ab:b6:6e:4c:16:89:34:d6:c8:
                    74:03:25:66:c0:59:a2:94:83:eb:e0:d1:a7:d8:a2:
                    96:ca:8e:e0:44:d3:d6:18:25:60:b7:88:56:7e:73:
                    e8:ba:31:2b:fc:9c:5a:b2:12:d7:f4:4b:d3:e5:a2:
                    78:00:50:dd:c1:96:9e:83:6c:bc:24:bf:34:68:7d:
                    4a:26:ca:10:ef:79:a8:4b:89:fe:df:9c:66:b0:e2:
                    90:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:72:6E:85:CB:A9:57:10:8A:30:0F:8B:2F:51:B5:09:AF:EC:7C:25
            X509v3 Authority Key Identifier:
                keyid:25:52:D4:44:C2:F5:EE:E5:24:C6:C0:1B:AA:4F:9D:F2:BA:EC:A2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:89:aa:44:37:14:ec:cf:8d:8f:cd:fb:48:ba:07:75:69:af:
         71:85:a4:b5:e1:00:e0:ba:33:aa:1f:c6:af:75:86:8f:b1:2f:
         4d:ac:e5:f4:61:29:18:a5:df:91:0b:8c:0e:9f:1e:d3:14:27:
         67:85:8a:49:e3:07:af:f0:c6:67:90:0b:fb:db:51:05:e6:f8:
         c0:fd:43:81:fd:93:67:7d:ea:a1:80:02:73:54:17:dc:ec:b0:
         cf:9d:77:38:15:18:a9:66:3a:b7:4d:9a:11:8e:92:58:aa:3d:
         0e:58:9c:5d:df:40:d7:d1:1e:e6:c9:0e:9e:c7:24:b7:ab:e8:
         25:9c:a5:6b:aa:85:e5:9f:4e:bf:43:fd:ee:68:d3:4b:00:26:
         23:df:c2:41:d4:a5:0d:b7:0d:12:9c:ef:2d:96:36:e7:e9:ab:
         61:23:9c:e9:75:38:55:84:5c:15:aa:09:32:4f:4d:11:ec:45:
         56:87:1d:91:cc:66:dc:2c:3c:89:ac:47:88:d1:9e:f1:38:61:
         c4:cd:cb:53:eb:ef:ba:30:d7:52:73:0d:31:2c:bb:68:3a:bc:
         12:17:6b:b9:e3:7f:18:dc:02:0a:69:ee:e7:88:10:56:74:66:
         d2:13:42:ac:71:36:d0:bc:8a:57:5c:26:15:e0:59:bc:c2:86:
         71:c4:7c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:36:24 2025 by rpki-client