This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
File:                     jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json)
Hash identifier:          bIZkibqqETi7etTpPhK4AGtW387iLM0BrAPk2rk3oWY=
Subject key identifier:   FF:17:B5:6E:8D:56:92:21:18:F0:E1:40:C0:78:C9:E4:57:69:57:29
Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
Certificate issuer:       /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
Manifest number:          E6
Signing time:             Wed 03 Dec 2025 03:52:04 +0000
Manifest this update:     Wed 03 Dec 2025 03:52:04 +0000
Manifest next update:     Wed 10 Dec 2025 03:52:04 +0000
Files and hashes:         1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: z7Pqq1enEJUFwgMLT1acuYbfHjm1IjP/g5PMfi2mv0E=)
                          2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: 2GAN4cx4QTuzJoHXcS0SxuhQPJxWZFMWGY3rZM3hC3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
                          rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 03:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
        Validity
            Not Before: Dec  3 03:52:04 2025 GMT
            Not After : Dec 10 03:52:04 2025 GMT
        Subject: CN=692fb3e4-e8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:ad:83:1a:9c:4d:4f:73:35:47:a8:47:3c:
                    5e:28:d9:75:00:d0:e0:3e:5a:63:b2:15:34:50:8c:
                    c2:38:81:3a:9d:f3:c1:71:12:9f:66:c6:89:5d:fd:
                    80:79:bb:e5:63:e5:9e:7d:08:e3:59:d1:2c:b1:d4:
                    f8:77:b3:23:d5:61:e3:69:65:b8:50:95:7f:14:72:
                    d2:35:ff:1f:aa:5d:10:b6:37:82:17:eb:4d:1b:26:
                    04:e4:de:50:0e:e1:6a:01:64:5c:93:93:d4:2f:d4:
                    eb:b7:e7:71:f3:fe:25:a0:74:54:f1:96:bb:49:dc:
                    b5:50:5b:7b:dd:3f:19:0a:02:61:37:1e:c4:21:87:
                    ce:30:18:aa:19:29:7f:f1:21:8f:d5:e2:22:eb:57:
                    21:e9:a8:87:72:8a:fe:5f:4b:a8:bd:6c:4e:04:02:
                    6d:b1:ca:ac:05:d2:96:54:98:0a:94:9e:64:49:ae:
                    0d:66:a6:94:c5:b5:6b:08:03:25:42:28:0b:d6:44:
                    b2:0a:d5:5c:3f:52:d4:02:06:fc:6c:50:c8:b0:ca:
                    01:ca:f2:51:07:1e:92:d3:94:be:a2:60:f4:bd:f5:
                    d3:b5:63:7e:0e:b6:25:ef:74:2b:46:b3:52:8d:ed:
                    aa:57:fe:69:07:2a:f4:62:47:53:a9:b0:e1:85:7d:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:17:B5:6E:8D:56:92:21:18:F0:E1:40:C0:78:C9:E4:57:69:57:29
            X509v3 Authority Key Identifier:
                keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:bc:60:91:11:64:85:73:74:f1:39:db:c3:36:20:e6:ce:81:
         84:0b:35:7f:29:39:78:51:4c:d5:d4:48:cb:e2:62:be:af:e5:
         5c:6c:01:50:05:85:16:e4:4e:00:1a:15:18:fb:09:07:70:21:
         e4:0a:3d:aa:f5:b6:ac:ca:60:ac:32:bc:75:dd:66:ac:b3:18:
         03:f4:7d:b7:30:3f:42:f9:cb:df:0f:2b:58:90:f2:99:bf:d1:
         75:35:f9:d3:12:67:4e:08:b8:db:94:78:d3:1a:61:76:45:2e:
         db:89:0d:16:c6:94:51:f2:f8:75:70:42:ed:4a:9d:a8:07:24:
         1f:df:c5:90:11:50:01:c9:ad:f1:9f:ff:35:fa:db:dd:9a:7b:
         ad:fc:86:df:8d:eb:e6:34:f6:ca:ac:80:86:25:ee:9b:5d:b9:
         3c:a0:8c:26:e5:ef:37:9e:bc:a1:75:d1:0f:be:71:65:8a:12:
         3c:11:e3:62:7a:4e:d1:4c:e2:c8:c6:fd:75:00:9c:8a:0b:07:
         f4:2a:de:ad:71:64:79:9c:02:f3:11:3a:45:30:5b:ff:de:c0:
         79:95:d9:87:7a:5f:de:30:86:e9:29:2c:1e:ff:81:f6:31:49:
         52:94:65:46:0c:2d:58:b8:19:c5:ee:bc:6f:f7:e8:ee:7c:ab:
         c2:d7:c5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:48 2025 by rpki-client