This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
File:                     JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json)
Hash identifier:          gM1dBb+EMRPbifBetI2Nol1g2FpXQN72eiX1g+48gr4=
Subject key identifier:   82:35:CB:8C:B6:B2:BA:F1:10:FE:49:88:4B:52:61:24:84:50:43:0E
Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
Certificate issuer:       /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
Certificate serial:       06EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
Manifest number:          06E7
Signing time:             Mon 22 Dec 2025 21:13:28 +0000
Manifest this update:     Mon 22 Dec 2025 21:13:28 +0000
Manifest next update:     Mon 29 Dec 2025 21:13:28 +0000
Files and hashes:         1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: 9kRjfcZ0kSlkU3UGTdKd16efOtkqNGEBRQ7AOdtHxk4=)
                          2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 49srunPdeNBbO8KuwS63EgzNwnXuXm104MEIjX60d+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl
                          rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1772 (0x6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
        Validity
            Not Before: Dec 22 21:13:28 2025 GMT
            Not After : Dec 29 21:13:28 2025 GMT
        Subject: CN=6949b478-9cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:8a:bb:e0:5d:5b:55:cf:2e:29:9e:49:66:
                    47:f7:05:25:8e:47:68:59:51:6e:f9:5c:e9:62:9a:
                    08:56:f7:1d:fa:e2:5f:41:95:da:0f:a0:46:d4:49:
                    d8:00:82:46:8f:2d:b5:23:62:51:5c:3f:98:a4:99:
                    51:5b:2a:91:cd:f9:a3:11:38:5c:04:e7:6c:1a:8a:
                    7e:8c:1c:aa:11:40:fb:d6:e6:d2:f0:30:dd:6b:b5:
                    2c:7d:95:9c:5f:16:44:e8:0b:11:81:6a:c0:f0:a7:
                    16:22:2e:5e:ce:1e:35:10:4b:c1:ca:a0:e5:be:ec:
                    fc:b4:50:59:90:d1:56:16:32:19:76:67:0a:f2:61:
                    2b:bd:11:07:05:7e:0b:c0:d3:2e:d9:81:c0:31:e6:
                    25:48:8a:3a:39:4e:cf:1a:48:cf:ec:44:6e:94:2f:
                    de:3e:ac:c0:36:b9:04:0f:8d:22:a1:ea:f4:c0:94:
                    b8:45:86:67:16:b0:a4:32:2c:70:eb:ee:a0:ec:28:
                    45:d2:f7:dc:c0:89:c6:0c:31:d5:e6:82:96:58:93:
                    de:1a:7d:96:2d:53:1a:32:df:8f:0a:26:17:4c:a9:
                    a5:6c:ba:9b:36:ca:07:fc:99:f7:00:6e:35:5c:d5:
                    47:73:61:62:a9:e9:be:9b:b6:d9:d6:55:75:43:84:
                    dd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:35:CB:8C:B6:B2:BA:F1:10:FE:49:88:4B:52:61:24:84:50:43:0E
            X509v3 Authority Key Identifier:
                keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1f:09:f0:ea:36:8e:f5:98:77:f0:ee:0d:7a:0e:fa:34:f5:
         25:9b:a9:0f:f6:c2:ee:61:7c:1e:94:23:c6:e8:fd:1b:42:e6:
         fe:8b:3f:72:8a:cc:aa:06:32:70:9d:03:f8:c7:73:33:78:57:
         e9:30:c0:70:05:87:d5:9b:77:d3:7c:5e:36:28:23:38:a3:25:
         f8:72:4f:3c:df:98:a6:1f:f4:4d:4c:0f:a8:9b:ea:0e:62:1c:
         28:86:c7:47:25:aa:ee:d1:cd:3c:dc:74:eb:4c:b5:62:dc:a0:
         ca:9a:eb:91:6e:f1:d2:4a:f2:16:a3:4f:e7:3c:eb:14:a8:fb:
         79:33:bb:49:b0:87:a2:84:ab:e5:ea:83:d5:66:b6:df:d3:69:
         ef:b1:dd:86:c8:07:01:51:04:bc:47:aa:c1:39:53:2d:f5:cd:
         47:2e:b9:c8:6e:d3:3a:2b:74:3c:a0:d9:c5:8c:6d:95:a4:28:
         4a:30:09:b4:b2:2b:eb:b0:a0:61:d3:30:4a:04:7a:3e:f7:42:
         05:f3:9d:03:3e:c7:d3:39:68:f3:41:55:ec:a6:e5:4a:99:b1:
         27:7e:d2:ca:8e:18:61:d4:a0:e2:a8:ac:5b:1b:35:50:16:c6:
         3c:98:6b:61:80:a3:0c:76:e7:51:bb:69:6d:ba:b4:c1:06:c1:
         49:c2:26:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:24 2025 by rpki-client