This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
File:                     Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft (raw, json)
Hash identifier:          yAZvFTYk5ZSf/lBGTDlVSPTbmQPG3w5ANM+y7U4lLKQ=
Subject key identifier:   72:44:6A:4C:DA:76:CA:D3:92:5D:23:61:A3:A4:67:A7:17:46:3E:C3
Authority key identifier: 26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26
Certificate issuer:       /CN=A919C7D0/serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
Manifest number:          0E
Signing time:             Fri 05 Dec 2025 05:46:24 +0000
Manifest this update:     Fri 05 Dec 2025 05:46:23 +0000
Manifest next update:     Fri 12 Dec 2025 05:46:23 +0000
Files and hashes:         1: Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl (hash: bsfITARjYklyRK0Z1jBt8nFPkqPq7wDWvv+eXDjJjOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl
                          rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7D0, serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
        Validity
            Not Before: Dec  5 05:46:23 2025 GMT
            Not After : Dec 12 05:46:23 2025 GMT
        Subject: CN=693271af-ec4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:fb:f5:a0:4c:2e:b6:64:4f:45:cb:ab:b0:
                    f2:7d:f5:4a:f1:82:de:4c:37:64:84:1b:8a:3a:ef:
                    71:75:c6:40:14:97:c2:23:75:d9:64:40:d8:89:48:
                    01:35:cd:59:4b:6e:99:76:ba:7e:e5:4a:7e:67:5e:
                    88:fd:af:7f:f7:25:7b:3c:0e:14:09:70:05:21:b0:
                    6b:97:c8:30:26:8c:75:34:3a:58:72:0e:e2:09:63:
                    20:7d:e3:3d:0e:fb:15:67:19:4a:43:62:00:86:f3:
                    00:4b:0c:27:5b:50:96:b6:17:86:a3:68:b4:c2:57:
                    6d:35:ad:bf:5f:2b:df:99:e6:98:b8:b6:95:ee:d2:
                    d3:8b:b2:6d:1f:26:6a:0c:88:d0:3d:7c:3b:c1:32:
                    2e:ef:e7:81:a5:bd:8a:4e:2a:b6:cd:53:1d:17:cf:
                    65:4b:37:a6:ff:15:e5:51:70:3d:e4:d9:75:3b:5c:
                    71:1f:73:ad:ba:0c:a9:15:fc:62:e6:5a:3d:3d:bf:
                    f9:d6:c5:09:9a:27:d6:23:ff:b4:7c:ed:ba:51:3c:
                    82:9e:ee:aa:34:68:73:6a:1a:1d:5e:90:37:bd:5b:
                    86:b7:61:1f:69:4a:94:a5:41:73:2b:ac:cb:5f:fa:
                    12:10:8d:74:78:82:af:1b:c1:91:67:0b:46:d6:4b:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:44:6A:4C:DA:76:CA:D3:92:5D:23:61:A3:A4:67:A7:17:46:3E:C3
            X509v3 Authority Key Identifier:
                keyid:26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:98:8b:f3:35:65:38:08:e4:c1:d9:a9:58:1e:58:46:87:2d:
         cd:6d:0c:18:e5:db:85:7c:9d:53:f3:b5:5c:85:22:5f:23:4b:
         25:a5:9a:78:33:52:4f:1a:b3:ab:8f:4f:7c:b6:b1:6e:f2:0b:
         d6:8c:16:03:3c:dd:85:8a:c7:46:c9:dc:8d:83:5b:cd:ff:0a:
         64:be:ff:6f:5e:5f:73:01:ba:6a:26:84:4c:b6:2b:f4:bf:ce:
         40:56:00:16:d7:0b:51:fe:a5:d4:21:f8:1b:55:c3:b0:9d:d6:
         92:3e:91:27:1b:0d:b3:03:dd:e1:2f:82:0f:5a:15:99:e5:1c:
         16:63:ba:07:4f:d1:82:ef:66:85:70:02:bc:f5:80:bb:72:8d:
         c3:7c:bc:1e:38:fb:39:d2:57:b2:00:5d:4e:53:42:a4:ce:1d:
         d0:08:d0:c0:8b:0e:1d:40:fa:79:0c:bf:86:54:0c:e1:37:21:
         2f:0b:bc:95:35:18:ae:4a:f0:26:d9:60:40:e3:92:6e:b2:c0:
         31:ef:bf:87:00:0a:40:0d:57:a4:9d:39:4c:94:2b:aa:e8:03:
         4c:76:b9:52:21:35:98:18:3b:05:ea:90:4c:a5:1b:e2:6b:97:
         b3:51:13:cd:9a:a3:3b:79:8a:8d:d9:01:c1:e7:92:37:59:25:
         37:c7:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:05:19 2025 by rpki-client