This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
File:                     JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json)
Hash identifier:          PsdMI6i5JSuivF3KDD94Qem2lJY3YAYPZRr7LARTQv0=
Subject key identifier:   4E:A6:66:4D:9B:8A:6A:E6:3F:29:CD:4D:E5:1F:E5:AB:3C:F4:07:4A
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Certificate issuer:       /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial:       2556
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
Manifest number:          2540
Signing time:             Sat 06 Dec 2025 15:30:38 +0000
Manifest this update:     Sat 06 Dec 2025 15:30:37 +0000
Manifest next update:     Sat 13 Dec 2025 15:30:37 +0000
Files and hashes:         1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: CGlitVawRuHUrVDJ6bnltMNRq9PaeMBdpSMvBUJTqXE=)
                          2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: N5Vn59/DXOfi3X7rqOdzQLvOw6/oh8X23e/dgbXYsyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
                          rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9558 (0x2556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
        Validity
            Not Before: Dec  6 15:30:37 2025 GMT
            Not After : Dec 13 15:30:37 2025 GMT
        Subject: CN=69344c1d-1e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:a2:0a:65:e6:1c:d0:44:21:0b:90:2f:d2:
                    40:b4:c4:ca:d1:54:e7:36:21:fc:8b:8c:c5:86:42:
                    28:b2:5f:5d:86:3b:22:9a:22:c5:ee:03:5e:72:d7:
                    2e:e1:1a:73:a9:5d:07:22:54:e6:a4:d3:0f:bb:f4:
                    cb:c8:ab:ef:b6:78:5b:bd:76:8d:90:04:ac:df:bc:
                    ca:5a:6d:e3:0b:39:fa:69:2d:b3:00:36:95:70:5b:
                    ca:67:a5:5d:d9:81:67:57:d4:66:1b:0f:33:d0:f6:
                    25:78:9d:e6:45:cc:18:e9:fb:94:c9:ec:a5:d3:87:
                    2c:03:1c:3a:6d:f6:ce:57:18:95:e5:ff:9c:33:4a:
                    e0:c0:f4:98:80:b8:a0:11:8a:37:d4:73:67:3d:70:
                    73:e3:69:cd:b7:47:6d:45:ce:e9:22:1d:03:03:28:
                    68:6a:d4:eb:14:19:ac:70:79:27:79:4c:1e:c5:05:
                    f3:c8:8c:78:1d:2c:9e:65:e1:22:b3:d6:e7:54:c3:
                    af:96:64:39:a5:15:fb:63:69:e2:45:7b:8a:3d:b0:
                    23:2d:9b:b5:ba:85:0b:70:45:93:c5:13:bc:bd:1d:
                    8f:11:5c:ee:4d:78:80:32:56:56:93:ff:cf:6f:18:
                    bc:23:79:7c:46:98:d7:e6:01:1b:20:04:93:dd:8b:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A6:66:4D:9B:8A:6A:E6:3F:29:CD:4D:E5:1F:E5:AB:3C:F4:07:4A
            X509v3 Authority Key Identifier:
                keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:82:92:f8:84:f4:2d:67:0d:f9:6f:bd:1d:fd:c9:4b:92:73:
         aa:9a:06:86:48:d8:1f:c3:b7:1c:fb:6c:2a:3c:cc:cf:b1:1a:
         ee:3c:9c:ad:61:4e:19:83:44:0d:69:0a:0c:33:a3:61:bc:0a:
         09:59:76:2e:94:c3:87:42:64:33:f6:92:19:04:c6:ff:42:0c:
         cf:ec:a6:c1:d5:25:88:19:0b:9e:50:16:5d:4c:fc:80:e8:fb:
         ff:d4:ca:35:b9:40:86:cd:e6:63:9f:31:1c:1e:ec:33:dc:5e:
         13:c3:d3:44:97:34:c9:cf:79:4b:fe:e9:d3:7f:ed:f8:91:41:
         bc:74:31:08:e4:50:f5:e5:0a:10:0b:18:6f:3c:3d:63:07:3d:
         f8:ea:2b:fd:5e:ed:60:ff:f9:1b:64:a7:92:4d:1b:8b:66:fa:
         66:b5:da:ba:98:01:75:b8:96:c2:62:6f:72:41:23:77:e9:b8:
         72:a6:fb:1e:fd:49:1e:c0:a1:21:e5:7e:da:bb:3e:f6:4c:8e:
         c3:a8:fd:67:23:f4:12:ce:b1:95:01:d8:e7:c9:2a:22:e0:84:
         df:0e:c4:b3:82:6c:18:fc:64:a8:73:31:55:9a:44:ca:a7:46:
         aa:24:5a:e6:15:18:03:3f:70:dd:06:c3:70:3e:e4:85:60:75:
         ad:51:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:45:38 2025 by rpki-client