This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
File:                     JSwA6X56eGlZOIzyBKTH5kVYDGg.mft (raw, json)
Hash identifier:          XO1VxS/uRk1T9pxDTh+RhnBGXrsJUQdptXEvX2yvAj8=
Subject key identifier:   9E:D0:94:F4:E1:03:E8:21:EB:CA:FC:1C:67:1E:E7:B0:B4:F9:5F:20
Authority key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
Certificate issuer:       /CN=A919DA26/serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
Manifest number:          C7
Signing time:             Sun 07 Dec 2025 00:40:40 +0000
Manifest this update:     Sun 07 Dec 2025 00:40:39 +0000
Manifest next update:     Sun 14 Dec 2025 00:40:39 +0000
Files and hashes:         1: JSwA6X56eGlZOIzyBKTH5kVYDGg.crl (hash: WpvZYkr0R1GrhNvZw0G1f8/DnMGQ3ubNDtEj9Z8EuBc=)
                          2: F17996F2B21C11EFBDB2BA25C4F9AE02.roa (hash: Ze1T47AivqwEiqsuxqeYxl8UpGN8xGhxkmK8W5sniC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl
                          rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA26, serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
        Validity
            Not Before: Dec  7 00:40:39 2025 GMT
            Not After : Dec 14 00:40:39 2025 GMT
        Subject: CN=6934cd07-529e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3b:97:6b:ed:18:b6:34:15:c6:8f:f4:6e:ca:
                    f6:18:8f:9b:01:35:47:53:ff:87:52:85:4c:32:04:
                    8f:17:e3:8d:94:9a:a7:52:35:e3:e1:8a:1d:d5:92:
                    d4:7a:d2:43:76:f5:e5:a8:aa:45:b9:f5:39:b8:2f:
                    b9:3b:98:5c:e8:ff:c7:97:43:ac:20:59:fc:03:4f:
                    ae:38:93:da:bf:8b:00:69:6a:c7:0d:46:01:e2:70:
                    48:42:f4:d9:7e:f2:e0:20:8c:1d:be:e6:22:8c:e3:
                    ee:ee:99:0b:ba:ca:e5:72:0c:d2:e9:c3:3f:09:c0:
                    cf:d5:9d:2f:41:9f:c6:9e:e0:ed:b2:9d:7b:f4:43:
                    ec:ac:03:a6:7e:42:65:0a:1f:c3:ad:82:dd:eb:49:
                    57:4c:3c:8b:51:67:d6:c2:80:61:05:43:c3:85:bd:
                    c7:1e:81:d2:10:57:29:7c:b5:bc:63:34:d7:34:40:
                    4a:af:c9:e1:13:00:da:13:c6:cc:89:2c:40:e8:d3:
                    6b:94:14:e1:7d:81:c0:8d:9b:ee:29:26:7d:fa:d7:
                    40:52:32:7c:39:52:2f:f0:0c:53:5a:14:e1:54:39:
                    f3:d7:e4:32:9a:93:cb:59:79:11:6a:cb:bb:f8:c6:
                    1c:2a:91:a4:c9:4c:69:9d:77:25:cd:19:76:72:62:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D0:94:F4:E1:03:E8:21:EB:CA:FC:1C:67:1E:E7:B0:B4:F9:5F:20
            X509v3 Authority Key Identifier:
                keyid:25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:89:bc:c6:9b:0e:44:0c:52:f3:6b:53:69:8c:b8:30:9e:ea:
         86:3f:f3:ee:71:42:67:a9:31:e3:a7:77:fd:55:1e:34:f8:2d:
         61:a7:8f:bc:e0:2e:06:9a:cb:b7:f2:dd:5c:0c:96:9a:95:40:
         52:5e:58:ad:22:a8:7c:da:12:cf:5e:4f:58:61:d0:76:31:e7:
         e4:c8:54:d5:1d:31:79:82:31:f2:b3:11:20:31:83:4b:7a:4e:
         09:1f:7d:46:1c:1a:31:1c:aa:ff:d2:4b:60:ef:72:69:fa:bf:
         c6:11:b0:87:ee:e4:8e:d2:d6:18:60:2a:89:5b:24:55:ae:da:
         b2:20:e7:24:0f:28:d6:1a:1d:f0:8d:f1:cd:92:0b:52:aa:7c:
         64:4b:3d:c4:c1:b9:fc:12:5c:ad:c7:88:d7:79:f8:e7:8a:00:
         ff:81:56:a2:fc:8c:59:ac:c0:ea:71:82:ee:ce:2f:29:54:c4:
         54:5d:45:61:8c:19:d2:68:4e:18:5e:cc:82:9b:e3:ab:22:31:
         3a:b9:69:7d:bc:fd:0c:f3:99:4c:d4:2a:a8:33:d2:9c:81:a5:
         66:c6:1f:ab:e4:95:b8:71:29:29:a0:80:28:38:34:ce:75:6b:
         6d:94:31:ac:dc:fc:54:35:c2:7c:a0:5c:89:5e:d7:86:42:19:
         94:82:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:00:14 2025 by rpki-client