This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
File:                     jhRqR_5i0JoyZs4IOlecrROlgGY.mft (raw, json)
Hash identifier:          wy71SOPZI1m90vl3P3g8hPwRR2RVd13s3BYQVxiTiKU=
Subject key identifier:   25:2B:FC:63:B3:F0:B8:DF:2D:B9:8F:8F:0B:F8:5B:04:74:D3:CA:48
Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66
Certificate issuer:       /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
Manifest number:          01E3
Signing time:             Tue 23 Dec 2025 01:41:32 +0000
Manifest this update:     Tue 23 Dec 2025 01:41:32 +0000
Manifest next update:     Tue 30 Dec 2025 01:41:32 +0000
Files and hashes:         1: jhRqR_5i0JoyZs4IOlecrROlgGY.crl (hash: 80UoO21hR7oCd1fbK/7LsoMMliqhDofb79TCC2SHLb4=)
                          2: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (hash: yNzSo18Zr+VZZ8+QcBD6VKrhKtuzioN93vYAY/qtNGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl
                          rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91570C9, serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066
        Validity
            Not Before: Dec 23 01:41:32 2025 GMT
            Not After : Dec 30 01:41:32 2025 GMT
        Subject: CN=6949f34c-74d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:f2:dc:92:f7:bc:8b:0b:b8:7f:2d:33:b7:
                    06:77:60:9f:e5:23:02:c7:22:bd:26:66:46:21:23:
                    e7:06:dc:12:d2:32:ab:10:16:b2:06:bb:f8:d5:cc:
                    12:71:d9:4a:31:e9:a8:fd:85:c0:f8:bc:cd:0e:15:
                    4c:7a:7d:c6:ca:8f:cb:1c:8d:8a:59:13:61:66:d9:
                    17:e9:07:da:20:8d:d0:fc:fb:e0:83:b6:e5:00:b7:
                    00:47:4c:6e:01:15:6d:32:80:db:56:7b:62:29:b8:
                    4a:08:80:77:01:a4:0e:ab:ea:11:35:0a:f0:bd:8f:
                    78:e2:df:5b:d7:8c:9a:1b:e6:8e:41:75:77:df:6c:
                    d3:b1:8f:c4:21:ca:2f:cc:a0:c9:bc:d7:55:5b:a9:
                    13:8b:1a:d8:3e:f0:59:96:a7:58:65:75:8b:5f:a2:
                    af:60:3a:b9:1d:fc:ac:78:9d:fd:e2:c0:7f:79:a0:
                    d1:c6:27:c5:13:8b:54:94:a9:64:fb:e7:13:79:31:
                    93:36:6f:65:88:fd:49:ce:82:c8:d5:6c:c7:3e:a7:
                    bd:8f:cb:53:ba:61:17:14:a3:c1:8d:b7:d9:3f:6a:
                    d6:6e:18:75:d6:b9:e2:bb:dc:ad:62:dc:be:a8:a1:
                    3d:4d:36:04:c1:cc:f7:e6:1f:13:b3:ea:94:f0:0d:
                    a4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2B:FC:63:B3:F0:B8:DF:2D:B9:8F:8F:0B:F8:5B:04:74:D3:CA:48
            X509v3 Authority Key Identifier:
                keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:dc:23:91:e0:90:60:b7:c3:99:c0:0c:64:fc:c9:d6:65:4b:
         98:4f:1f:f5:01:b5:9d:e3:bf:24:b3:29:16:29:07:8b:99:fc:
         57:f8:ed:df:1b:31:c0:ab:17:54:c6:f6:18:75:f8:56:40:37:
         8e:50:0f:3b:1d:ff:c7:ef:95:29:45:3d:f6:a1:2e:65:2f:e3:
         94:77:52:bd:a1:b8:18:ff:8a:a9:cf:e3:b8:c6:e8:88:ed:87:
         1f:46:2c:08:8a:ba:14:ff:c2:2d:92:5c:31:d1:dc:95:c8:51:
         2c:8e:9d:bb:e9:17:45:7c:67:91:15:1b:f3:43:cf:b2:94:b3:
         01:2c:04:d2:f7:96:9f:2a:a7:ab:a0:2b:9c:d6:07:53:20:da:
         11:46:99:1d:64:de:17:95:07:5a:9d:6a:80:bd:ae:34:30:81:
         ff:32:ad:01:28:56:06:c9:a1:e5:fd:15:57:1a:64:c5:ae:32:
         a9:71:88:18:b4:95:72:a8:75:04:13:65:dd:a8:de:5d:ee:b9:
         11:39:bf:42:55:c9:09:72:dd:c4:33:93:e4:42:2c:9a:80:a2:
         bb:dc:0d:0a:bb:9d:31:9f:0b:52:83:dc:9c:73:9a:4a:ad:fc:
         d4:2d:d2:17:8d:cb:d4:fc:5f:9c:d8:0e:ef:41:e2:e3:1c:1f:
         3c:22:fd:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTcwQzkxMTAvBgNVBAUTKDhFMTQ2QTQ3RkU2MkQwOUEzMjY2Q0UwODNBNTc5Q0FE
MTNBNTgwNjYwHhcNMjUxMjIzMDE0MTMyWhcNMjUxMjMwMDE0MTMyWjAYMRYwFAYD
VQQDDA02OTQ5ZjM0Yy03NGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnczy3JL3vIsLuH8tM7cGd2Cf5SMCxyK9JmZGISPnBtwS0jKrEBayBrv41cwS
cdlKMemo/YXA+LzNDhVMen3Gyo/LHI2KWRNhZtkX6QfaII3Q/Pvgg7blALcAR0xu
ARVtMoDbVntiKbhKCIB3AaQOq+oRNQrwvY944t9b14yaG+aOQXV332zTsY/EIcov
zKDJvNdVW6kTixrYPvBZlqdYZXWLX6KvYDq5HfyseJ394sB/eaDRxifFE4tUlKlk
++cTeTGTNm9liP1JzoLI1WzHPqe9j8tTumEXFKPBjbfZP2rWbhh11rniu9ytYty+
qKE9TTYEwcz35h8Ts+qU8A2kSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUr/GOz
8LjfLbmPjwv4WwR008pIMB8GA1UdIwQYMBaAFI4Uakf+YtCaMmbOCDpXnK0TpYBm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzBDOS8wMjI3QjlBRUZB
MjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBKb3laczRJT2xlY3JST2xn
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2poUnFSXzVpMEpveVpzNElPbGVjclJPbGdHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NzBDOS8wMjI3QjlBRUZBMjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBK
b3laczRJT2xlY3JST2xnR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBl3COR4JBgt8OZwAxk/MnWZUuYTx/1AbWd478ksykWKQeLmfxX+O3f
GzHAqxdUxvYYdfhWQDeOUA87Hf/H75UpRT32oS5lL+OUd1K9obgY/4qpz+O4xuiI
7YcfRiwIiroU/8Itklwx0dyVyFEsjp276RdFfGeRFRvzQ8+ylLMBLATS95afKqer
oCuc1gdTINoRRpkdZN4XlQdanWqAva40MIH/Mq0BKFYGyaHl/RVXGmTFrjKpcYgY
tJVyqHUEE2XdqN5d7rkROb9CVckJct3EM5PkQiyagKK73A0Ku50xnwtSg9ycc5pK
rfzULdIXjcvU/F+c2A7vQeLjHB88Iv23
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:32:18 2025 by rpki-client