This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
File:                     JhWWtVbpLBLS68jdiyXPuHWOB4w.mft (raw, json)
Hash identifier:          3MJZ8gVZwORVdk918LWiPM6VggxZlSN/x07gEfJF6kY=
Subject key identifier:   B5:43:8F:F8:9F:B9:8D:26:F2:F8:39:58:2D:A7:AC:0C:3C:01:C7:98
Authority key identifier: 26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C
Certificate issuer:       /CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
Manifest number:          019A
Signing time:             Tue 23 Dec 2025 02:29:31 +0000
Manifest this update:     Tue 23 Dec 2025 02:29:31 +0000
Manifest next update:     Tue 30 Dec 2025 02:29:31 +0000
Files and hashes:         1: JhWWtVbpLBLS68jdiyXPuHWOB4w.crl (hash: OQuspkaxNVUHEkzMs3UUSIEpfUPWbIvdB5B8qNWgBIE=)
                          2: 259AE280753B11EEBF306F35C4F9AE02.roa (hash: XlNDLwL1s4PNyju0F9J/L57gx4vJtRRqq2V9lyDq2Mo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl
                          rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFC48, serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C
        Validity
            Not Before: Dec 23 02:29:31 2025 GMT
            Not After : Dec 30 02:29:31 2025 GMT
        Subject: CN=6949fe8b-db6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c5:da:98:6e:a0:aa:6a:9c:21:29:f0:86:cb:
                    28:66:9a:ce:24:43:fa:44:88:d0:5e:98:01:63:52:
                    54:de:8f:a6:77:6e:a7:73:9b:ff:89:b1:b2:f3:60:
                    1c:2c:ac:5b:4f:f7:a3:c0:9d:37:ad:2e:ff:c8:4d:
                    94:e2:3e:24:ca:4f:e6:68:7f:a4:57:df:1e:92:37:
                    ca:1b:b0:c1:0e:22:1e:fc:53:4d:ca:3e:5a:2b:1e:
                    2b:05:63:7c:bf:de:f5:51:ee:49:1b:14:b5:bd:89:
                    9d:21:32:c8:62:d6:c5:ad:57:0f:5e:a8:3c:cc:71:
                    1c:80:ce:0d:2e:c8:5c:ba:ca:ae:78:cc:4f:e0:54:
                    28:dd:21:74:72:84:68:8a:b6:37:4b:67:cf:06:56:
                    33:85:95:0d:7a:cb:ca:f8:a0:7e:5d:ff:65:31:96:
                    29:ce:7b:88:a0:23:d3:c0:3a:f5:13:99:f5:21:f8:
                    74:cc:de:22:fe:70:0f:27:d1:18:c4:65:98:3b:31:
                    0d:46:a6:cb:cd:7d:ef:4e:b2:a1:1b:36:ee:cf:06:
                    dd:a9:56:b9:99:f5:05:33:63:78:67:3a:29:f1:f1:
                    ad:82:26:5f:39:8c:ea:87:09:3f:2d:4a:fb:96:d7:
                    42:04:45:a4:dc:67:e0:8e:16:8c:ea:3b:d0:e2:c2:
                    37:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:43:8F:F8:9F:B9:8D:26:F2:F8:39:58:2D:A7:AC:0C:3C:01:C7:98
            X509v3 Authority Key Identifier:
                keyid:26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:13:6c:35:af:2e:03:1f:95:1f:00:1a:6a:d8:78:dd:13:6b:
         27:93:fe:82:f1:44:18:8d:68:62:56:1e:0e:39:f0:68:2a:37:
         ff:3f:b0:b5:01:c6:ef:6a:25:74:09:0b:31:2d:d0:be:e4:f3:
         c0:a3:72:4a:ff:3d:cd:88:3e:62:5c:3d:fa:85:63:ea:5b:17:
         10:ab:df:f5:49:c4:a0:19:74:50:48:c1:35:5f:d6:c7:5d:9b:
         a5:c1:c8:14:36:39:46:ce:24:46:03:32:ef:e5:ad:20:33:34:
         e9:80:4e:78:c0:7f:a0:fe:4d:59:ed:41:89:d8:e8:37:17:54:
         3e:b9:63:44:98:6e:9e:c5:1c:66:e3:1e:3d:84:b6:b7:32:4f:
         74:ef:69:f5:9b:fb:ed:4e:bc:73:6a:8b:db:d2:4c:d5:49:66:
         59:71:bd:9f:1b:ed:a9:50:3a:bf:50:72:0b:fe:d8:98:45:63:
         bb:c0:40:21:52:2b:2a:1a:ec:02:ad:74:66:96:13:03:ac:1c:
         61:21:9b:d5:00:39:cd:64:c0:60:00:3a:f3:11:04:03:98:9b:
         52:06:ed:c4:1f:ab:98:c5:d9:1a:f4:bb:6d:e3:8e:88:dc:a0:
         5a:1d:07:4b:56:64:be:f0:8b:24:16:94:3c:11:74:00:29:4a:
         31:31:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:22 2025 by rpki-client