This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
File:                     JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json)
Hash identifier:          5ErAoZKAXiZs3NRDNy99FpC3aeoxWJGTK5rZ1vkMW1A=
Subject key identifier:   4D:5D:1C:11:9D:EB:CA:A2:8D:4C:53:C1:D1:D0:F1:6D:65:AC:92:BC
Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
Certificate issuer:       /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
Manifest number:          7E
Signing time:             Fri 05 Dec 2025 04:39:27 +0000
Manifest this update:     Fri 05 Dec 2025 04:39:27 +0000
Manifest next update:     Fri 12 Dec 2025 04:39:27 +0000
Files and hashes:         1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: E3bumf4NDhi/HKgmGzumPxeyZ/1coJRNcebMrcT11lY=)
                          2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: LQXESBC03M55eTRwU/sXkaRTACDEQkRKoyFYlNpa2vw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
                          rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
        Validity
            Not Before: Dec  5 04:39:27 2025 GMT
            Not After : Dec 12 04:39:27 2025 GMT
        Subject: CN=693261ff-1ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:db:69:f6:73:aa:dd:26:a8:06:70:c3:22:
                    fb:ca:e8:58:3c:ad:52:88:51:34:03:b9:4a:22:9e:
                    0f:85:7d:57:a2:55:cf:d9:21:72:94:dc:ea:b5:e3:
                    62:fc:e3:14:cf:b7:02:60:c4:7a:c0:85:a5:b4:36:
                    83:f1:bc:ef:73:da:db:71:77:d8:07:3e:1b:3d:92:
                    0b:08:7b:21:51:09:3d:09:b4:00:7f:cf:54:7c:bd:
                    3c:81:9d:03:0a:f7:15:af:db:ab:e5:5e:9d:a7:2a:
                    95:20:5b:63:26:5e:c4:fd:2b:01:22:e3:32:cd:5c:
                    11:db:a5:fe:99:b3:be:62:f0:40:1f:5c:91:05:e8:
                    23:b0:26:2e:10:e7:f4:a7:f1:a7:e1:3f:50:ce:45:
                    60:49:9c:4a:bc:6f:85:2b:6b:3d:a5:3a:d4:11:c7:
                    f4:5a:89:50:cf:f3:4b:a6:81:74:ad:b0:2b:b8:2a:
                    d9:09:93:46:47:4c:1c:53:ef:dd:24:97:4a:e0:d7:
                    d4:10:5c:49:ad:d6:0e:75:ca:53:5c:a4:cf:9f:76:
                    61:c3:7d:93:87:0c:ed:57:38:26:44:5e:d8:b8:e6:
                    af:29:be:95:af:48:0f:a2:1d:61:de:73:d2:9a:05:
                    4b:2d:dd:4d:23:77:70:98:12:2f:21:b0:30:3d:d9:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5D:1C:11:9D:EB:CA:A2:8D:4C:53:C1:D1:D0:F1:6D:65:AC:92:BC
            X509v3 Authority Key Identifier:
                keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:19:c6:40:ca:33:20:aa:20:f5:a4:ac:25:b8:e5:b1:e7:d2:
         f2:8a:1f:f9:57:6f:55:dd:e0:7f:10:38:98:3b:6c:5a:71:bf:
         fc:a5:c7:73:ea:8a:ca:2a:ff:3a:51:b1:00:32:fb:96:ac:56:
         85:26:a5:a1:12:e9:0f:34:17:e8:68:8f:e8:d6:31:84:3d:3e:
         34:e2:19:1d:84:eb:da:a2:2b:08:7a:db:91:a4:ad:ef:72:af:
         a3:cf:ce:65:52:41:a0:f6:93:84:60:0f:2f:fb:4b:49:52:c2:
         0f:f5:3d:a1:f1:a0:66:0c:d0:7a:89:1f:41:31:74:a0:89:99:
         02:af:a9:5b:47:de:fa:0c:c0:d8:5d:76:42:fa:a5:f0:b6:62:
         ae:fb:11:f7:5b:5d:e4:41:75:e4:59:25:c8:5d:19:72:24:e4:
         4c:cc:c1:e8:60:7b:2e:fc:f6:80:e6:b9:99:60:9d:dc:61:bf:
         aa:83:9f:c9:fc:2c:0b:1b:4c:ab:03:e8:02:81:38:31:1a:ab:
         4d:08:fb:d0:0c:44:e1:8a:ed:3b:54:d1:88:c0:3f:19:c2:d7:
         3e:15:47:61:0d:06:8d:1f:23:83:99:45:5f:4f:58:85:53:bb:
         21:2d:74:dd:8b:ba:2d:77:46:3a:10:b1:ea:43:99:44:8b:0d:
         aa:c4:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:06:37 2025 by rpki-client