This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
File:                     jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json)
Hash identifier:          HL0KxNmFzfj1cA/PfxYL7amQVc4zNzFfcanmjQMUhZc=
Subject key identifier:   0D:84:17:F4:8B:71:BB:52:2B:55:0A:CD:BE:08:52:6A:BA:16:33:48
Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
Certificate issuer:       /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Certificate serial:       0B09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
Manifest number:          0B01
Signing time:             Mon 22 Dec 2025 18:50:29 +0000
Manifest this update:     Mon 22 Dec 2025 18:50:28 +0000
Manifest next update:     Mon 29 Dec 2025 18:50:28 +0000
Files and hashes:         1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: mfmvRwlPJL6ou+J7AvMfiBDny+YlRyFLOy/mkxTRBkw=)
                          2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: 7Rjkv9es3qmrpwGoh+nsTmGk0d+b2oIzwsuxat3h6cE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2825 (0xb09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
        Validity
            Not Before: Dec 22 18:50:28 2025 GMT
            Not After : Dec 29 18:50:28 2025 GMT
        Subject: CN=694992f5-dfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:43:cc:83:2f:47:71:94:38:eb:13:e8:ff:
                    d8:e6:31:70:0b:f0:dc:d6:f3:d9:bc:d6:fb:e8:3b:
                    8f:85:ee:9d:d3:dd:b8:f2:3f:a2:39:6c:04:73:f1:
                    15:63:b8:74:94:0a:5e:bf:17:6e:4e:27:dd:5f:65:
                    15:79:89:11:fb:07:88:aa:96:f9:22:ce:c0:de:ad:
                    80:ad:8e:be:3a:e9:62:13:a3:22:c1:dd:05:cf:c0:
                    05:c7:18:56:1c:77:cf:79:d2:ff:f1:00:dd:e7:f3:
                    5a:33:b2:f9:ec:4f:b4:74:b6:e5:eb:f4:b8:62:a4:
                    16:7e:66:2c:00:26:bc:8b:fa:8a:56:cf:ef:11:74:
                    64:66:6f:83:8f:55:02:81:fc:11:1a:95:8e:56:4b:
                    45:b4:84:b5:92:7d:74:83:dd:4d:48:19:40:a6:e8:
                    ee:7e:ab:62:95:df:1e:de:26:69:02:30:09:e6:08:
                    ec:e3:e1:ac:33:7e:3f:2f:52:84:c6:1a:b1:22:28:
                    ee:64:21:27:20:e2:b4:5f:66:0c:4e:94:cf:22:e7:
                    61:40:f2:1f:1c:ce:92:b4:74:c4:14:2e:c7:13:0a:
                    36:14:db:81:39:14:ed:c6:bc:8e:cf:43:56:0d:72:
                    9a:44:7a:a6:3c:8c:1f:03:a7:55:90:80:b0:74:a3:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:84:17:F4:8B:71:BB:52:2B:55:0A:CD:BE:08:52:6A:BA:16:33:48
            X509v3 Authority Key Identifier:
                keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:cc:a7:37:ab:6d:19:5e:6c:6f:18:af:66:e8:6b:7b:1a:4d:
         e9:f6:6d:b1:6f:a5:f9:22:48:8f:b0:57:3c:31:51:ac:57:ca:
         17:69:85:9e:28:67:c7:87:0f:b9:b8:3b:96:c4:fe:ce:7b:44:
         32:4f:d4:47:c1:66:94:71:e5:83:c4:75:44:20:e8:31:09:24:
         98:61:c2:f6:69:6e:9f:1b:7c:42:94:81:ca:3a:9b:7d:e0:d8:
         76:bf:5e:b4:40:dd:45:02:be:9b:f1:ef:a7:c7:56:f7:31:ea:
         02:99:1c:5a:36:82:9e:09:c3:cd:1f:88:65:34:5c:32:a1:b3:
         a5:8e:04:04:f7:8b:87:88:b3:45:6d:26:02:cf:64:fa:fc:c6:
         af:16:96:d5:4f:64:bc:83:ec:19:73:a3:09:f5:4a:d6:32:d8:
         e8:19:01:fa:96:14:d1:99:a3:6f:63:6b:72:ca:f7:b0:6b:0f:
         33:69:55:0e:fa:4d:1b:76:17:14:a7:fa:8e:f5:b1:1b:c7:80:
         71:b7:80:3e:5c:58:df:50:7e:d4:67:26:5c:9f:3c:01:c3:a7:
         9d:ee:7e:4e:0a:4a:f3:ad:b8:fc:0d:f0:1b:d3:4b:7d:f2:9e:
         1d:8c:54:1c:96:80:02:7c:f3:3a:ad:9a:5d:23:32:ac:44:6b:
         d3:42:ec:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:32 2025 by rpki-client