This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
File:                     jxv350cnod5CAcTAU1X-sX8hviA.mft (raw, json)
Hash identifier:          pyyEcujN34z5eZ+X5/64LtXVmtbNX0rEnzhy0juWvEY=
Subject key identifier:   51:A6:80:15:5A:72:F2:2A:CB:69:C0:B7:8F:2F:91:AD:27:27:B8:71
Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20
Certificate issuer:       /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
Certificate serial:       07E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
Manifest number:          07D6
Signing time:             Tue 16 Dec 2025 21:17:51 +0000
Manifest this update:     Tue 16 Dec 2025 21:17:50 +0000
Manifest next update:     Tue 23 Dec 2025 21:17:50 +0000
Files and hashes:         1: jxv350cnod5CAcTAU1X-sX8hviA.crl (hash: GuOe1XVm/34AjqFvSZosZL4MQrHN1UdB9k06twOG/NI=)
                          2: 188F1CDC1FFD11EBAB33D75FC4F9AE02.roa (hash: EHfFu2VHH1TupVn6JjNyqPaaEBxRmTPy/2tEDhBsHO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl
                          rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 21:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022 (0x7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B7ED, serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
        Validity
            Not Before: Dec 16 21:17:50 2025 GMT
            Not After : Dec 23 21:17:50 2025 GMT
        Subject: CN=6941cc7f-a441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e9:3b:bc:2c:8a:3f:e0:49:2f:85:89:9e:f7:
                    af:fc:2f:3f:85:88:34:6c:b7:ff:0e:c4:1d:eb:e9:
                    7b:1c:7c:aa:7c:6a:f7:be:e9:15:29:3f:53:df:13:
                    a6:99:37:bc:0d:81:14:45:6b:e1:c2:df:b3:14:95:
                    12:93:ac:76:4b:4e:2d:9f:dc:ff:1c:ed:63:a4:d0:
                    2e:a8:0d:ca:33:2d:bd:ef:42:82:2b:47:7d:4f:3d:
                    3b:1e:ec:88:7c:59:93:5e:77:48:e7:72:0c:02:28:
                    68:b3:da:3c:86:90:59:c2:5b:19:e2:64:a1:45:88:
                    f8:30:db:32:e4:cf:22:ea:a2:5d:1d:74:b0:05:f8:
                    60:14:27:8c:a3:49:d5:f4:99:d2:60:9a:04:66:66:
                    6c:a9:1b:89:d7:56:4d:4d:49:1b:27:63:ab:73:96:
                    44:30:fd:d2:fc:9c:1d:7e:c8:d5:2d:89:a6:26:f1:
                    de:de:2b:4c:ce:48:58:f9:95:5f:95:7f:05:1e:6e:
                    e7:78:19:c5:49:9b:c1:97:d3:02:2a:93:6f:45:b2:
                    75:c6:bf:1e:a3:8b:1d:9a:95:7b:91:14:ae:aa:72:
                    6b:4e:a5:bf:25:11:4e:c2:35:b4:b9:4d:73:5a:75:
                    15:3f:e0:5e:b2:08:6b:75:e9:b1:01:f3:3f:a8:2b:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A6:80:15:5A:72:F2:2A:CB:69:C0:B7:8F:2F:91:AD:27:27:B8:71
            X509v3 Authority Key Identifier:
                keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:55:70:4c:b2:fc:2d:d0:4d:91:b2:d6:2d:14:48:d4:b4:28:
         26:f0:28:99:a6:c5:ed:9b:14:c1:a4:3c:a3:e8:83:bd:b0:60:
         40:05:b3:10:94:1d:5f:fd:03:df:b6:4b:c0:ec:a4:15:be:97:
         2d:b4:68:0a:a3:fe:8f:30:27:67:d3:da:b5:47:d4:4d:ec:20:
         f6:9b:da:df:df:9f:32:a7:05:70:3a:43:18:57:ec:89:50:62:
         43:8f:47:66:29:21:c8:59:51:69:ca:ed:0e:dc:92:57:b0:65:
         09:9d:53:45:2f:0a:ef:65:2b:c6:6b:61:0c:63:c8:e2:48:6f:
         1d:5c:2d:e0:7a:bc:73:73:96:81:cd:e4:cc:3b:17:a8:8c:8b:
         95:ca:6f:eb:29:ea:c9:e5:8f:88:e2:c6:13:f8:dd:69:01:01:
         69:b1:b9:27:7f:09:d2:a3:29:f6:3b:d0:ed:56:61:a1:39:a9:
         cf:3f:53:98:2f:47:c4:67:2d:3e:6f:e6:73:be:53:b0:27:25:
         1b:8e:ed:2f:b1:2b:aa:db:8e:9b:69:7e:fb:81:aa:97:6b:d6:
         2b:dd:61:10:07:54:ea:0b:27:d4:46:df:64:14:fa:96:c3:4d:
         f3:63:b6:4f:fa:de:bb:4a:aa:f1:ca:6c:12:92:ef:aa:54:89:
         c8:8d:47:92
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI3RUQxMTAvBgNVBAUTKDhGMUJGN0U3NDcyN0ExREU0MjAxQzRDMDUzNTVGRUIx
N0YyMUJFMjAwHhcNMjUxMjE2MjExNzUwWhcNMjUxMjIzMjExNzUwWjAYMRYwFAYD
VQQDDA02OTQxY2M3Zi1hNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmOk7vCyKP+BJL4WJnvev/C8/hYg0bLf/DsQd6+l7HHyqfGr3vukVKT9T3xOm
mTe8DYEURWvhwt+zFJUSk6x2S04tn9z/HO1jpNAuqA3KMy2970KCK0d9Tz07HuyI
fFmTXndI53IMAihos9o8hpBZwlsZ4mShRYj4MNsy5M8i6qJdHXSwBfhgFCeMo0nV
9JnSYJoEZmZsqRuJ11ZNTUkbJ2Orc5ZEMP3S/JwdfsjVLYmmJvHe3itMzkhY+ZVf
lX8FHm7neBnFSZvBl9MCKpNvRbJ1xr8eo4sdmpV7kRSuqnJrTqW/JRFOwjW0uU1z
WnUVP+BesghrdemxAfM/qCvU4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGmgBVa
cvIqy2nAt48vka0nJ7hxMB8GA1UdIwQYMBaAFI8b9+dHJ6HeQgHEwFNV/rF/Ib4g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjdFRC8zMDg4Nzg5ODFG
M0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9kNUNBY1RBVTFYLXNYOGh2
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p4djM1MGNub2Q1Q0FjVEFVMVgtc1g4aHZpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjdFRC8zMDg4Nzg5ODFGM0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9k
NUNBY1RBVTFYLXNYOGh2aUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFVXBMsvwt0E2RstYtFEjUtCgm8CiZpsXtmxTBpDyj6IO9sGBABbMQ
lB1f/QPftkvA7KQVvpcttGgKo/6PMCdn09q1R9RN7CD2m9rf358ypwVwOkMYV+yJ
UGJDj0dmKSHIWVFpyu0O3JJXsGUJnVNFLwrvZSvGa2EMY8jiSG8dXC3gerxzc5aB
zeTMOxeojIuVym/rKerJ5Y+I4sYT+N1pAQFpsbknfwnSoyn2O9DtVmGhOanPP1OY
L0fEZy0+b+ZzvlOwJyUbju0vsSuq246baX77gaqXa9Yr3WEQB1TqCyfURt9kFPqW
w03zY7ZP+t67SqrxymwSku+qVInIjUeS
-----END CERTIFICATE-----
Generated at Thu Dec 18 17:33:56 2025 by rpki-client