This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
File:                     jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json)
Hash identifier:          860Itju2jfjnc7efmXDGeonoi3etnoeGNTrpPn+1g/U=
Subject key identifier:   05:AE:E5:9A:CC:65:B0:C6:FD:53:93:C2:3E:0C:34:35:C9:C8:C4:13
Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
Certificate issuer:       /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
Manifest number:          0250
Signing time:             Fri 05 Dec 2025 00:03:39 +0000
Manifest this update:     Fri 05 Dec 2025 00:03:39 +0000
Manifest next update:     Fri 12 Dec 2025 00:03:39 +0000
Files and hashes:         1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: WJD8mRfkBUUX2JQl6jL/e7R3s/xCat4Ne8TXerxF1mY=)
                          2: 5D0766AC28B411F0A1AE5A68C4F9AE02.roa (hash: IyWwjIStMD7CLHAYI80G9u0bSfl+ZxcEcIIy1oHhXzo=)
                          3: 5D8FF85028B411F0A1AE5A68C4F9AE02.roa (hash: cQgwz6VDyiOHU3CVFbp+dck6b+15ezgPGKxe1LIqxfA=)
                          4: 5E73EF1028B411F0A1AE5A68C4F9AE02.roa (hash: egVVNLsPdwUoef36phQTdD6372WDtBPUXE4iD/r+2cc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
                          rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53
        Validity
            Not Before: Dec  5 00:03:39 2025 GMT
            Not After : Dec 12 00:03:39 2025 GMT
        Subject: CN=6932215b-659d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:e2:b6:d6:a1:bb:20:ce:8f:f8:01:fc:39:
                    d4:d5:e6:f8:72:67:f2:cf:ee:df:77:99:4c:cf:b0:
                    e3:da:fb:0a:3a:18:c8:41:8e:be:7d:7f:11:43:df:
                    8c:5c:15:82:c9:e5:b9:a1:9d:fa:6d:62:1e:a1:4f:
                    8f:9c:46:15:51:60:4b:2d:df:aa:3d:9f:61:91:54:
                    59:b6:8a:59:b4:67:6b:39:3e:1f:40:cf:85:49:f2:
                    3e:9d:bc:8d:5b:ea:2b:ca:8f:f2:c0:f7:94:95:e1:
                    39:76:1a:b1:d7:cf:af:bc:29:69:23:74:bd:ad:4e:
                    c8:07:fc:07:90:66:ce:b4:f5:d5:fa:4a:b8:bd:ac:
                    f4:80:b7:ac:ae:69:55:29:35:ef:63:00:a3:50:a3:
                    23:a4:24:03:4c:b0:e4:02:d4:2b:b4:d8:f3:d9:c7:
                    94:98:5a:94:95:f8:3e:48:55:40:71:7f:8d:6a:a8:
                    9b:30:d8:39:b7:14:72:56:a1:85:ef:73:6b:48:3a:
                    44:10:bb:f1:b0:ea:17:f9:76:01:dc:98:cd:ba:bf:
                    8d:1f:4f:c5:5f:a5:76:07:fb:89:95:43:f2:82:ce:
                    4d:32:01:d9:ef:37:86:95:1a:52:82:35:d4:0f:68:
                    14:79:b4:02:ce:04:86:c3:e0:57:76:ca:96:9f:56:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AE:E5:9A:CC:65:B0:C6:FD:53:93:C2:3E:0C:34:35:C9:C8:C4:13
            X509v3 Authority Key Identifier:
                keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:06:d0:97:f6:20:0d:35:23:09:01:20:b3:24:8e:91:d6:
         b5:ee:32:8f:71:e5:34:37:f2:0e:3b:3a:cd:92:7b:0e:b7:4c:
         ea:c3:b0:10:a4:61:2b:3b:6a:58:f9:32:37:20:5e:bc:bf:27:
         b9:fc:18:2d:63:6f:6e:50:0b:26:9f:c0:6b:ed:a4:f6:dc:e8:
         ce:48:67:0a:c0:25:d8:d0:77:08:a2:28:7d:64:06:a3:54:97:
         62:b8:0e:d5:e3:be:52:45:10:c1:75:6c:52:08:59:36:77:18:
         d1:2b:85:d6:ed:e6:e4:f2:89:11:41:7c:a4:85:e1:2a:7c:94:
         40:22:e7:87:ec:7c:a0:f0:d8:5f:53:ab:38:d2:2c:85:a5:d5:
         7a:84:6a:68:44:2a:df:e1:67:02:4a:04:22:e7:40:fc:8f:57:
         84:1d:31:3d:4f:67:90:e2:17:35:a9:46:32:37:21:9e:e4:4a:
         bf:cc:7c:50:3e:36:b8:95:34:d9:66:65:ba:60:3b:42:fd:ca:
         2d:10:1e:f1:d7:b3:5a:2a:3a:61:10:26:e8:ab:50:c3:0c:a7:
         af:cc:6b:e4:e0:19:f8:4a:e9:a6:48:8f:82:58:5c:67:36:a0:
         b8:d0:cd:ca:94:8f:80:09:8e:40:90:4e:b4:ee:2f:58:35:52:
         4b:42:01:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc0NjExMTAvBgNVBAUTKDhERjY5MzI0MkQ2MTBGODc2MzA3NDc1MzQyQTkyRTE1
NTYwMjhFNTMwHhcNMjUxMjA1MDAwMzM5WhcNMjUxMjEyMDAwMzM5WjAYMRYwFAYD
VQQDEw02OTMyMjE1Yi02NTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVXittahuyDOj/gB/DnU1eb4cmfyz+7fd5lMz7Dj2vsKOhjIQY6+fX8RQ9+M
XBWCyeW5oZ36bWIeoU+PnEYVUWBLLd+qPZ9hkVRZtopZtGdrOT4fQM+FSfI+nbyN
W+oryo/ywPeUleE5dhqx18+vvClpI3S9rU7IB/wHkGbOtPXV+kq4vaz0gLesrmlV
KTXvYwCjUKMjpCQDTLDkAtQrtNjz2ceUmFqUlfg+SFVAcX+NaqibMNg5txRyVqGF
73NrSDpEELvxsOoX+XYB3JjNur+NH0/FX6V2B/uJlUPygs5NMgHZ7zeGlRpSgjXU
D2gUebQCzgSGw+BXdsqWn1Yr4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWu5ZrM
ZbDG/VOTwj4MNDXJyMQTMB8GA1UdIwQYMBaAFI32kyQtYQ+HYwdHU0KpLhVWAo5T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2MS9CMkMyMDZFMDRB
MUExMUVEQUU2RDEwMjNDNEY5QUUwMi9qZmFUSkMxaEQ0ZGpCMGRUUXFrdUZWWUNq
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pmYVRKQzFoRDRkakIwZFRRcWt1RlZZQ2psTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzQ2MS9CMkMyMDZFMDRBMUExMUVEQUU2RDEwMjNDNEY5QUUwMi9qZmFUSkMxaEQ0
ZGpCMGRUUXFrdUZWWUNqbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVxgbQl/YgDTUjCQEgsySOkda17jKPceU0N/IOOzrNknsOt0zqw7AQ
pGErO2pY+TI3IF68vye5/BgtY29uUAsmn8Br7aT23OjOSGcKwCXY0HcIoih9ZAaj
VJdiuA7V475SRRDBdWxSCFk2dxjRK4XW7ebk8okRQXykheEqfJRAIueH7Hyg8Nhf
U6s40iyFpdV6hGpoRCrf4WcCSgQi50D8j1eEHTE9T2eQ4hc1qUYyNyGe5Eq/zHxQ
Pja4lTTZZmW6YDtC/cotEB7x17NaKjphECboq1DDDKevzGvk4Bn4SummSI+CWFxn
NqC40M3KlI+ACY5AkE607i9YNVJLQgH7
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:38 2025 by rpki-client