This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
File:                     1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json)
Hash identifier:          aOdP+tlyR1K89QOd7xY58u5WmWXypLC8Bd8lgHhMJWU=
Subject key identifier:   0B:AE:24:18:12:DD:B5:8D:9A:F4:92:9D:D6:9D:32:11:18:5E:44:EB
Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
Certificate issuer:       /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Certificate serial:       044D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
Manifest number:          0446
Signing time:             Thu 04 Dec 2025 22:43:44 +0000
Manifest this update:     Thu 04 Dec 2025 22:43:43 +0000
Manifest next update:     Thu 11 Dec 2025 22:43:43 +0000
Files and hashes:         1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: 2eH4yx+T7kYg51iG0NnktY7f0F/TKhB2EWReLB/3oMs=)
                          2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: SCsr6a/OxC+h0TbqqqQWA1WP6sx9Kte4TE8O/kgTqE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
                          rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101 (0x44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
        Validity
            Not Before: Dec  4 22:43:43 2025 GMT
            Not After : Dec 11 22:43:43 2025 GMT
        Subject: CN=69320e9f-dd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:4e:2e:ac:64:4f:75:92:77:b7:61:aa:94:
                    fb:61:02:78:8e:3f:be:cd:72:00:b3:a8:57:28:6c:
                    63:77:1b:d3:c2:0f:1d:ee:76:d4:08:1e:3a:ab:29:
                    ed:ed:8a:32:f5:19:e2:c1:10:d9:42:d7:55:0f:5c:
                    4d:83:6d:d7:b9:bd:36:20:13:dc:a1:fb:79:92:ad:
                    93:98:c1:9b:46:31:80:ac:4d:53:fc:c5:52:09:3b:
                    88:99:33:40:1a:7d:d9:38:34:84:77:a1:a5:8f:2a:
                    65:7e:6e:79:91:41:05:86:5d:ab:31:fb:95:a2:0b:
                    e0:b9:a3:4b:b2:e8:a4:16:0b:37:c5:b7:cc:ef:17:
                    5d:39:60:d9:e7:e5:d2:f0:7a:c1:d9:32:d3:0c:55:
                    36:3f:c2:4d:c3:05:62:74:64:40:32:bc:1e:cb:4e:
                    9a:f8:a4:cb:21:79:d2:6b:76:af:bd:76:9e:90:ec:
                    bf:1a:b9:64:01:68:0e:53:eb:9c:c2:c9:7c:b7:04:
                    f3:94:bf:14:d8:9c:f7:83:a7:7a:c9:23:f5:7d:f7:
                    28:5c:c9:15:e1:d5:b5:18:58:ff:59:e2:ad:ca:c8:
                    39:2d:d8:c5:c6:2e:ea:54:ed:25:fe:1d:9c:85:cc:
                    b2:69:0f:c4:b1:21:ad:3f:20:73:30:3a:13:c8:e4:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AE:24:18:12:DD:B5:8D:9A:F4:92:9D:D6:9D:32:11:18:5E:44:EB
            X509v3 Authority Key Identifier:
                keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:30:7b:a8:5e:90:8a:44:0c:e7:66:ff:73:fc:d1:cc:f8:54:
         e1:c3:ec:46:8f:60:53:dc:e1:c5:a5:5c:6e:2c:23:f7:1f:0d:
         e0:cf:f3:80:a7:c0:4f:dc:93:36:c3:32:53:d3:de:2c:f0:de:
         64:b5:16:0d:aa:0d:08:74:47:4c:2b:4d:6b:62:e3:d4:6e:94:
         90:77:a3:51:b3:5b:5d:0d:95:9e:79:00:e1:49:bb:1f:d1:5f:
         ef:85:b9:0b:3a:10:82:0f:ff:71:33:3d:b3:46:27:b4:09:fa:
         ab:d2:a1:99:89:8a:f1:ca:f3:95:07:bf:5d:ba:5d:55:5a:b1:
         bd:6e:b9:e6:61:5c:e1:35:1c:8a:33:9c:a4:d1:48:b2:b9:b4:
         1d:ec:56:52:45:19:2d:82:0e:ad:40:7d:a5:15:f4:ce:87:cb:
         77:65:e2:6a:70:c2:46:a5:63:e5:b2:da:d1:b0:3e:7a:08:00:
         94:e4:e9:e2:9a:68:c3:ad:22:5e:67:8c:e4:42:43:41:79:be:
         67:14:43:82:c9:f4:25:bc:88:80:90:5b:a3:d6:1a:d0:a1:4a:
         87:a7:c2:48:98:26:89:6e:53:6b:39:05:07:1e:0d:fb:bd:f5:
         30:fe:a1:f9:0d:74:01:4f:85:a6:b1:b5:84:a6:9e:4b:bc:6d:
         b9:03:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:11:05 2025 by rpki-client