This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
File:                     JWZWaoTF3OdvO385CN5_MrhnZwc.mft (raw, json)
Hash identifier:          J5WQjHdzXqOp/sJXr/XJoGpxOwDK9weTXALWHnj0Pms=
Subject key identifier:   54:D6:8A:6A:7D:F2:69:FA:09:EC:1A:A5:82:78:70:B6:7F:89:5A:7B
Authority key identifier: 25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07
Certificate issuer:       /CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707
Certificate serial:       02DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
Manifest number:          02D8
Signing time:             Thu 04 Dec 2025 23:42:56 +0000
Manifest this update:     Thu 04 Dec 2025 23:42:55 +0000
Manifest next update:     Thu 11 Dec 2025 23:42:55 +0000
Files and hashes:         1: JWZWaoTF3OdvO385CN5_MrhnZwc.crl (hash: moODX3uEabLU2xhMq9aWMy2bw+Gm/sXoLND++tOsVQY=)
                          2: 282282B60D3011ED8DC4D26BC4F9AE02.roa (hash: MWEsRQVRa9qaHn6fTEOexcENWAVY9rzeLcSk3zwVJV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl
                          rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AF37, serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707
        Validity
            Not Before: Dec  4 23:42:55 2025 GMT
            Not After : Dec 11 23:42:55 2025 GMT
        Subject: CN=69321c80-b469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2e:6e:79:83:29:9d:8e:cb:24:ae:83:21:8a:
                    81:53:87:b3:64:f8:db:d7:f5:7d:0c:04:ff:d6:65:
                    2d:7b:d1:1b:59:53:e7:ce:2c:ba:f3:ec:ab:f4:df:
                    5e:f5:d1:66:5c:88:cf:30:10:9f:45:1e:d0:b4:75:
                    47:2d:a6:cd:b9:f6:09:c5:20:82:3d:90:42:38:55:
                    fc:39:34:4f:dd:25:8d:b2:17:dd:e7:33:a6:fd:e2:
                    92:82:c3:fa:f6:41:67:fd:47:f7:9b:6a:d9:7f:2b:
                    3d:b3:4d:db:67:d4:d7:84:6c:f9:99:97:71:1c:0b:
                    7a:31:cf:6c:7e:9f:2d:40:3d:06:be:96:65:2b:35:
                    ac:00:36:26:42:17:96:a6:6d:7a:10:b8:ab:a8:5b:
                    9f:53:94:50:83:c0:13:f4:35:7a:8a:20:a8:48:1b:
                    45:35:40:76:70:6e:58:3c:38:8b:d1:a8:33:c6:83:
                    8f:8a:16:f7:21:e9:23:a3:48:e9:22:cd:c5:0e:fd:
                    3c:84:b1:68:f8:2f:a3:87:ca:dc:d2:20:9d:2f:0c:
                    f4:96:30:7e:e7:42:1d:6b:dd:27:e3:94:9a:f0:33:
                    9b:ee:18:38:61:74:9b:29:84:38:bd:8d:66:74:89:
                    07:0d:71:8c:a1:85:73:a4:95:ed:df:ee:fc:08:99:
                    6e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D6:8A:6A:7D:F2:69:FA:09:EC:1A:A5:82:78:70:B6:7F:89:5A:7B
            X509v3 Authority Key Identifier:
                keyid:25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:69:5f:2b:99:f1:53:b7:8a:3a:47:b0:81:1f:1b:f9:e7:
         3b:ea:1b:25:de:1c:00:ab:82:8e:a6:d9:71:c1:91:b5:0f:45:
         93:9a:b5:06:0d:78:70:00:a8:ac:43:95:ba:3d:13:a7:09:2d:
         6d:e4:ba:13:0d:6e:57:c3:48:ab:69:ed:89:f8:c5:18:f5:ba:
         4d:db:6d:eb:f8:b8:e7:15:cf:dc:96:3e:65:8f:d2:ff:62:1b:
         15:d9:85:84:6b:62:5a:5d:62:d9:80:2c:76:21:f5:01:01:e7:
         44:0b:0b:d6:f1:a5:68:3f:86:ae:97:5a:ca:63:b5:10:34:50:
         09:4c:6d:06:16:da:5a:43:f1:82:db:9a:fc:73:4c:19:b5:f5:
         e6:c0:3e:9d:0e:89:c7:70:e6:da:82:83:e5:e3:e7:a1:04:3d:
         79:55:6f:fa:e6:80:c3:7a:9d:c9:4e:dc:b8:d3:44:6f:e2:65:
         21:f7:96:8a:cc:08:b2:61:79:34:86:17:47:68:54:42:2d:c8:
         c0:65:b8:27:ed:9f:57:8b:80:a9:14:22:f5:e3:cb:3c:14:92:
         75:7f:74:66:83:0f:b5:0c:25:46:d5:26:1e:d6:76:c8:57:6d:
         f5:6e:dc:72:46:8e:49:c2:ac:59:b7:f7:28:a3:ab:ae:e0:bf:
         02:3f:21:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:56:02 2025 by rpki-client