This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
File:                     JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json)
Hash identifier:          Tbzw0OzHNTRr1BzBQh60FXFe9TwR3uF7GohQZQyPDwo=
Subject key identifier:   92:47:34:2A:22:6D:B8:6F:A2:BE:53:69:E0:85:F1:4A:ED:A3:04:14
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Certificate issuer:       /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial:       0391
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
Manifest number:          038A
Signing time:             Sun 21 Dec 2025 00:03:18 +0000
Manifest this update:     Sun 21 Dec 2025 00:03:17 +0000
Manifest next update:     Sun 28 Dec 2025 00:03:17 +0000
Files and hashes:         1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: vtWDLw+G+VnLq3Js79l8gcqi5e31CugTkvzB4hsKvYk=)
                          2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: hLXl6/Z8LuNjbKfmjM+o1Rss4EPhppx+VpRuw3V1cZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
                          rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 00:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
        Validity
            Not Before: Dec 21 00:03:17 2025 GMT
            Not After : Dec 28 00:03:17 2025 GMT
        Subject: CN=69473946-cec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:59:62:5e:01:f1:bb:02:ef:8b:1f:93:3a:41:
                    ea:17:d3:2d:fe:aa:3c:fa:fe:c8:9a:0b:8d:59:aa:
                    7f:e1:29:c1:b9:b0:d3:11:51:8d:e1:3b:ed:09:87:
                    8d:0e:1d:53:1c:93:1c:09:c4:27:52:26:64:2b:5b:
                    c7:81:c5:f9:91:fb:7a:07:ef:39:70:d9:08:55:5c:
                    c7:74:36:c5:51:90:02:ff:9b:0b:9a:b7:a0:dd:af:
                    9e:3c:62:2d:36:9b:41:e8:e5:c1:9c:c3:b3:ff:05:
                    2b:20:b2:5f:d2:68:e8:6b:26:4d:16:f7:20:d5:f6:
                    63:35:37:15:49:9b:95:a4:1d:a5:35:b6:8f:37:5d:
                    ea:77:43:0c:be:24:64:f7:cc:e3:55:e8:bf:cc:cb:
                    16:b0:38:b3:15:48:63:bf:c0:ac:2a:92:0e:12:78:
                    f1:c8:52:01:24:04:05:3b:b6:0b:d7:11:a3:9b:59:
                    10:a3:ef:11:2d:95:71:af:43:c4:35:72:98:e2:2d:
                    87:73:48:b5:62:5e:dd:38:4e:91:f1:c0:b6:e2:39:
                    fa:7c:40:cb:47:3f:08:c2:83:0e:e3:14:56:18:33:
                    34:b9:8f:51:31:47:cf:68:01:43:02:ca:fd:4e:78:
                    10:11:c7:6c:9f:3c:c2:fe:72:8a:f0:18:2d:dc:3a:
                    36:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:47:34:2A:22:6D:B8:6F:A2:BE:53:69:E0:85:F1:4A:ED:A3:04:14
            X509v3 Authority Key Identifier:
                keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cb:20:be:bc:92:4c:2d:f8:38:36:ad:be:1f:0e:ad:3d:2c:
         ca:2b:12:aa:10:3f:88:a8:0a:aa:4c:a8:63:86:5b:61:b8:d4:
         cc:6d:dc:2d:8f:7f:b9:4f:eb:2d:67:1e:76:30:33:05:00:7b:
         1c:f7:70:41:fa:d8:3b:89:7c:77:40:2d:08:12:6c:e1:ed:0f:
         92:8f:8d:c0:e2:2b:18:40:0e:c4:b4:57:50:f6:0e:9d:f7:01:
         7a:d9:89:5c:86:5c:88:b7:46:26:55:9a:65:74:de:95:61:8a:
         39:84:ca:31:59:c3:19:4b:7e:5b:73:a4:e8:eb:13:b9:45:bb:
         73:bb:34:3c:31:5f:64:b5:f0:59:cd:f5:1b:a5:a2:3a:b1:ab:
         66:3e:bb:9e:a9:bc:bd:f3:f6:c2:4d:1e:df:73:cb:e9:64:23:
         09:a3:f9:00:7f:b4:8d:7a:79:60:fa:39:e2:ac:d5:b4:cb:1d:
         2f:79:8e:87:09:92:c2:c1:dc:30:8d:77:90:b1:0b:c1:04:9c:
         50:13:e8:43:2f:0a:66:ec:a0:e8:ef:e4:53:49:00:15:3f:85:
         76:da:c9:7b:15:dc:4d:26:14:19:9b:5f:83:3f:04:6f:75:4b:
         f2:5d:0f:7b:67:6d:6f:e3:4d:bb:6d:01:93:2a:bd:53:74:a1:
         49:5a:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:15:26 2025 by rpki-client