This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft
File:                     jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft (raw, json)
Hash identifier:          XSzp8e9PwjFJN8m+kJrNMTg92V87VVej1t71Uvk+Jec=
Subject key identifier:   9F:B6:E2:02:62:A3:E2:0A:EE:B3:7A:43:E8:83:44:BA:C4:30:55:B2
Authority key identifier: 8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84
Certificate issuer:       /CN=A9113A22/serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft
Manifest number:          79
Signing time:             Tue 23 Dec 2025 05:41:28 +0000
Manifest this update:     Tue 23 Dec 2025 05:41:28 +0000
Manifest next update:     Tue 30 Dec 2025 05:41:28 +0000
Files and hashes:         1: jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl (hash: PtWaCRJqvZTwcP+HN/uaPs+avSfmOEyOBjfW9TUeK10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl
                          rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113A22, serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984
        Validity
            Not Before: Dec 23 05:41:28 2025 GMT
            Not After : Dec 30 05:41:28 2025 GMT
        Subject: CN=694a2b88-a9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:3f:01:02:11:8a:3a:26:f9:22:66:ef:b3:
                    ad:ea:a8:51:7d:b7:ba:9b:e3:15:b1:6b:70:ef:ef:
                    46:9c:05:02:76:66:e4:c2:3c:e1:a4:b3:fb:1e:28:
                    17:3f:28:07:4f:f1:b9:9b:d6:3d:d9:08:8e:fd:c1:
                    ac:fd:3a:a6:e7:e8:80:2e:61:d1:46:69:bf:e2:97:
                    b2:b2:f4:e5:8f:56:b3:94:35:40:56:5f:48:5c:6b:
                    28:50:66:9b:58:e5:82:28:3a:f2:8c:fc:ea:32:b7:
                    a5:e1:66:8e:71:fd:1d:4a:ca:8c:ff:c8:0a:e6:d7:
                    5c:dc:22:54:66:a3:43:be:03:14:74:e9:22:dc:1f:
                    83:41:87:0e:ba:55:dd:1b:86:24:44:75:35:f7:5d:
                    97:99:3e:4a:33:b5:e2:f4:6b:2a:fb:76:39:27:f3:
                    2d:f9:24:a6:39:89:69:78:85:0f:46:88:60:4b:e6:
                    62:9b:e6:ec:48:6d:14:b6:4b:07:9b:ea:72:6e:be:
                    dd:7a:81:20:d4:97:16:a2:2f:24:e1:4b:a4:c1:36:
                    04:03:58:5c:63:5b:8e:b3:22:c0:39:d6:73:3c:82:
                    92:10:ab:97:1b:5c:c4:47:62:6c:f3:7e:86:9b:42:
                    9e:b9:76:f0:49:e1:51:19:54:76:2c:74:36:f1:da:
                    bc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B6:E2:02:62:A3:E2:0A:EE:B3:7A:43:E8:83:44:BA:C4:30:55:B2
            X509v3 Authority Key Identifier:
                keyid:8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:41:42:00:c6:13:b2:b9:be:11:88:48:ed:77:77:9e:e3:57:
         58:60:ce:42:25:66:c0:c6:22:3d:2f:be:da:4a:75:16:6b:e4:
         30:04:05:0e:47:91:8a:a9:87:ae:0b:21:c8:84:f8:63:fc:0f:
         25:25:bc:01:5e:27:2c:ca:91:d3:1f:7b:74:0a:a0:0f:1c:a8:
         1f:e0:53:b4:07:99:a3:e7:35:8a:7d:1b:e0:6e:be:b7:8b:b9:
         46:80:d9:47:55:0d:ce:18:85:21:6a:79:3f:ab:ad:6a:e5:84:
         ef:56:0b:00:9b:ea:7f:ee:45:71:c7:b8:43:d1:72:98:47:e9:
         84:ab:f4:49:a3:6f:8c:1d:ef:b1:f1:c1:32:9e:48:fb:e4:af:
         97:38:f0:25:53:53:d0:b7:eb:a9:a8:37:68:59:6f:13:6e:5e:
         28:90:6d:4b:7a:07:19:a7:71:93:db:c3:93:42:81:c7:83:2a:
         a9:75:af:da:b7:85:0f:56:3e:76:99:7e:20:11:7b:93:bc:1b:
         6a:fc:fe:85:1d:00:27:b6:93:a5:2d:56:61:28:7e:9f:f9:0c:
         01:04:60:c6:fa:00:38:ed:a0:6b:99:81:ae:e8:46:89:2c:a3:
         a7:6e:1b:a3:e7:d9:46:86:3b:00:32:a7:71:81:81:c1:f4:14:
         72:6a:94:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:19 2025 by rpki-client