This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
File:                     jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json)
Hash identifier:          T3b13VeCnb97lW1BFh6MqC+4jeREHf7gAV9WZ7no0bc=
Subject key identifier:   08:30:93:FD:A5:5B:76:D1:D0:15:4A:CA:C5:2C:56:2E:DA:CF:DF:08
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Certificate issuer:       /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
Manifest number:          B5
Signing time:             Fri 05 Dec 2025 04:04:56 +0000
Manifest this update:     Fri 05 Dec 2025 04:04:55 +0000
Manifest next update:     Fri 12 Dec 2025 04:04:55 +0000
Files and hashes:         1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: i7lfEU/Xwg7eI3ZPRgQOFlqYakafRENR8dH14z4weds=)
                          2: A1FE9790C1B111EFACAB4071C4F9AE02.roa (hash: nTebHJ2nY/z4pA9GR9Zium43gwzyk8WFga213syhwvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
                          rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
        Validity
            Not Before: Dec  5 04:04:55 2025 GMT
            Not After : Dec 12 04:04:55 2025 GMT
        Subject: CN=693259e8-5161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:02:07:fb:45:92:51:c9:b8:d9:48:ac:64:
                    07:15:81:64:60:5e:c0:6e:43:52:95:b6:e9:f9:e1:
                    e7:f9:da:97:c6:57:29:1b:44:de:07:d9:65:0f:23:
                    c6:b6:ff:39:fe:a2:18:53:76:9a:a7:8b:ad:5e:ea:
                    48:4a:9e:c3:9b:ce:c6:60:0c:15:9e:5f:c0:81:4f:
                    6b:4c:ee:85:b5:d1:77:94:88:29:45:fd:24:b1:5e:
                    96:13:d5:33:b9:d6:98:ec:c4:da:32:b8:32:23:17:
                    32:69:bf:1b:83:6f:d1:2b:ed:d0:e2:94:71:80:75:
                    2a:97:2d:05:ff:3b:9e:1a:43:ed:76:eb:bb:5b:47:
                    32:2f:89:ea:37:62:92:6f:0b:6c:95:52:ff:8e:aa:
                    a2:4e:76:23:b9:3e:9d:89:91:39:94:2b:59:53:08:
                    b8:4c:dd:a5:65:af:e0:64:a9:52:2a:3a:88:27:cb:
                    51:d0:a0:37:1e:bc:a9:ec:e5:d1:0d:96:4f:86:fe:
                    6e:ed:27:e2:9c:72:0e:6e:d6:8d:68:11:ae:e9:af:
                    07:78:54:68:1e:f4:22:77:15:a9:ab:b3:1a:58:f2:
                    86:2c:99:79:c1:52:1c:c7:7d:3b:a3:e7:47:16:f5:
                    66:2e:91:fb:56:a1:a9:52:2b:88:97:26:6c:57:b5:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:30:93:FD:A5:5B:76:D1:D0:15:4A:CA:C5:2C:56:2E:DA:CF:DF:08
            X509v3 Authority Key Identifier:
                keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:72:46:1e:c0:ae:df:82:2b:c7:88:1c:8f:f7:40:f9:8d:58:
         17:77:49:ed:0e:10:17:5f:7d:2d:f8:4b:99:e1:1e:85:df:06:
         ab:43:9c:f9:e1:ed:d9:6d:da:73:06:c9:b6:89:79:ff:ef:6c:
         3c:6e:15:d4:35:d8:16:8a:7a:2b:fb:fb:b2:58:ab:1e:06:d5:
         44:04:2c:b3:6c:4e:86:7c:b0:55:cb:11:dd:2a:45:0c:ff:97:
         98:e6:a0:c3:3a:f9:04:e4:d5:30:54:20:ee:06:a0:9b:8e:69:
         a3:3c:e8:17:5b:f0:f5:62:f3:9b:2d:d9:58:b5:8c:c3:d6:b2:
         1e:f1:80:38:0a:57:a0:76:5c:a7:7e:59:58:ef:64:c8:0b:7b:
         b1:77:eb:9e:42:a7:3f:e8:55:55:d7:8e:bc:40:b0:f6:36:92:
         b1:f0:5e:48:44:b1:d9:ef:87:b7:7c:16:05:6d:88:d8:39:14:
         3d:8c:41:b7:f3:8a:d7:7a:70:36:4e:3a:c6:e2:56:17:49:e3:
         6a:f8:e3:6c:1f:0c:e7:e6:91:fe:28:b6:0c:8d:ea:58:4e:60:
         f8:28:5d:ee:e6:aa:16:8e:d3:6f:a4:af:df:ad:e0:af:64:b5:
         4f:be:bc:52:c2:3b:5e:db:20:8d:f5:cb:88:06:f6:c4:e1:f0:
         b4:2e:08:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZGMTkxMTAvBgNVBAUTKDhENjExRjJDRDczNzk0QUY4MDFDMUJGNjlEODg0ODA5
MTM4MEI0QTUwHhcNMjUxMjA1MDQwNDU1WhcNMjUxMjEyMDQwNDU1WjAYMRYwFAYD
VQQDEw02OTMyNTllOC01MTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApgUCB/tFklHJuNlIrGQHFYFkYF7AbkNSlbbp+eHn+dqXxlcpG0TeB9llDyPG
tv85/qIYU3aap4utXupISp7Dm87GYAwVnl/AgU9rTO6FtdF3lIgpRf0ksV6WE9Uz
udaY7MTaMrgyIxcyab8bg2/RK+3Q4pRxgHUqly0F/zueGkPtduu7W0cyL4nqN2KS
bwtslVL/jqqiTnYjuT6diZE5lCtZUwi4TN2lZa/gZKlSKjqIJ8tR0KA3Hryp7OXR
DZZPhv5u7SfinHIObtaNaBGu6a8HeFRoHvQidxWpq7MaWPKGLJl5wVIcx307o+dH
FvVmLpH7VqGpUiuIlyZsV7WqQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgwk/2l
W3bR0BVKysUsVi7az98IMB8GA1UdIwQYMBaAFI1hHyzXN5SvgBwb9p2ISAkTgLSl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkYxOS9EMjNDQjBCQUMx
QUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xLLUFIQnYyblloSUNST0F0
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pXRWZMTmMzbEstQUhCdjJuWWhJQ1JPQXRLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkYxOS9EMjNDQjBCQUMxQUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xL
LUFIQnYyblloSUNST0F0S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgckYewK7fgivHiByP90D5jVgXd0ntDhAXX30t+EuZ4R6F3warQ5z5
4e3ZbdpzBsm2iXn/72w8bhXUNdgWinor+/uyWKseBtVEBCyzbE6GfLBVyxHdKkUM
/5eY5qDDOvkE5NUwVCDuBqCbjmmjPOgXW/D1YvObLdlYtYzD1rIe8YA4Clegdlyn
fllY72TIC3uxd+ueQqc/6FVV1468QLD2NpKx8F5IRLHZ74e3fBYFbYjYORQ9jEG3
84rXenA2TjrG4lYXSeNq+ONsHwzn5pH+KLYMjepYTmD4KF3u5qoWjtNvpK/freCv
ZLVPvrxSwjte2yCN9cuIBvbE4fC0LgiM
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:53:34 2025 by rpki-client