This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
File:                     jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json)
Hash identifier:          52kfjhQepTGu6vKHjxgM4mE/qmkv7lioo76DWA6wtHI=
Subject key identifier:   76:AF:7D:16:84:59:AD:EE:09:29:5F:E8:A6:26:25:3A:BA:B4:8B:59
Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C
Certificate issuer:       /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
Certificate serial:       0765
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
Manifest number:          0755
Signing time:             Mon 22 Dec 2025 20:58:21 +0000
Manifest this update:     Mon 22 Dec 2025 20:58:21 +0000
Manifest next update:     Mon 29 Dec 2025 20:58:21 +0000
Files and hashes:         1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: SX8brILBXw58iZtL8khs2APyrJb7ov9+Gij1L1Y3bJM=)
                          2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: WXc8/KOS9TX2lE7Vv9xqmJ2kHbWej8tocOb7UBLG2e0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl
                          rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
        Validity
            Not Before: Dec 22 20:58:21 2025 GMT
            Not After : Dec 29 20:58:21 2025 GMT
        Subject: CN=6949b0ed-1fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f0:0a:09:47:19:d9:7f:4f:8d:27:4d:c2:4a:
                    dd:0c:a0:5f:5a:e8:75:3d:f8:13:ea:98:e8:54:31:
                    48:ab:d7:54:a3:4b:e1:c0:20:50:b9:d2:b4:92:58:
                    0e:56:87:f3:83:fc:af:32:90:c7:32:a6:da:d9:88:
                    3c:6e:40:08:dc:20:2d:cf:9a:1f:4b:56:e1:af:85:
                    14:bd:4f:70:c3:7f:0d:e9:78:e8:f6:ea:ad:41:20:
                    b0:2c:2f:c2:5a:d7:47:17:1f:25:ad:e1:59:4b:c5:
                    35:8d:9c:26:6b:d4:75:ca:1f:c4:da:c3:c3:ef:28:
                    af:a9:f2:24:10:13:45:15:d7:11:8d:2e:70:e6:ca:
                    48:89:29:4b:f7:50:7c:ef:de:f0:ce:93:64:f3:bd:
                    48:51:73:23:ed:71:66:52:ac:a4:87:81:52:e5:e3:
                    4e:72:96:41:60:4d:16:48:52:73:08:3c:03:0f:eb:
                    2b:b4:6e:ab:d8:c4:b8:d8:1d:19:c2:44:d3:e3:ca:
                    8b:61:64:60:5a:af:c3:bf:17:aa:5e:30:69:0d:51:
                    cd:5a:06:5b:bc:72:3d:b7:bf:6f:3f:99:eb:8c:e6:
                    09:3a:97:80:e5:c4:37:a7:5e:00:cc:02:b7:80:83:
                    c9:3e:08:ee:cb:1f:da:bc:ab:cf:41:e3:16:0a:c2:
                    0f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AF:7D:16:84:59:AD:EE:09:29:5F:E8:A6:26:25:3A:BA:B4:8B:59
            X509v3 Authority Key Identifier:
                keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2b:51:9e:6a:ef:b7:82:5a:db:44:4f:dc:52:fc:99:42:11:
         3e:61:7f:9c:24:51:1b:0b:81:24:c3:25:a0:04:cd:01:4b:02:
         e1:aa:22:c3:75:87:47:7e:42:38:92:bd:91:45:71:3a:32:85:
         61:06:0f:42:5a:3c:e1:57:63:ca:da:32:b6:d7:0d:aa:04:83:
         b9:51:64:22:bb:2a:dd:de:50:e4:29:9f:01:3f:dd:56:b5:2c:
         57:a6:42:82:fa:e6:b0:1a:cc:5e:56:d4:b7:4e:1a:1c:1b:f4:
         29:18:54:2b:21:d6:b6:f4:6d:3c:5e:9d:54:e0:f0:32:d1:a8:
         71:e8:b1:4c:9a:01:95:dc:fe:cd:5a:d5:ce:ec:dd:0d:3b:b6:
         b1:55:62:93:b1:9c:00:0f:a8:55:bb:7c:3d:48:6f:b1:0c:eb:
         33:42:c9:2b:94:55:09:b0:32:be:ab:93:b0:8e:52:16:81:7d:
         d4:92:75:11:3a:43:55:51:46:39:35:89:f3:23:5a:20:04:5d:
         2e:cb:2b:2c:1f:de:dd:78:ac:9a:35:4a:bb:41:7a:79:eb:50:
         5e:33:4a:f4:fd:c6:60:ca:e8:2a:76:53:e4:37:69:2b:65:fa:
         ad:b9:3c:0f:d1:8d:46:1c:6b:3d:da:7f:e4:98:f2:39:18:aa:
         fe:ae:c9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:28 2025 by rpki-client