This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
File:                     jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json)
Hash identifier:          CWCEyXQPBG1gIPA0ezcXSlGScbkANhmXw7F2/IFd0P8=
Subject key identifier:   BF:02:82:68:14:4D:FD:E1:8A:92:7F:0A:01:FD:9A:A6:BF:CD:12:3C
Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
Certificate issuer:       /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Certificate serial:       14F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
Manifest number:          14E6
Signing time:             Sat 20 Dec 2025 16:36:24 +0000
Manifest this update:     Sat 20 Dec 2025 16:36:23 +0000
Manifest next update:     Sat 27 Dec 2025 16:36:23 +0000
Files and hashes:         1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: FWAfc4mxcrB28IP35UwgrM/EuXVLR5eSzJUEcOsDqSs=)
                          2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: mRh05D/XShHwy0gj5RK1ka6rqzpFsAG0dDwaNHbPs7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5360 (0x14f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
        Validity
            Not Before: Dec 20 16:36:23 2025 GMT
            Not After : Dec 27 16:36:23 2025 GMT
        Subject: CN=6946d088-dbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:f1:fe:99:6e:70:a6:e9:b4:77:28:f6:05:
                    8d:a2:22:c9:0d:27:ce:93:5b:7e:09:6f:d5:70:9b:
                    84:cf:d6:72:bc:ff:b4:02:53:63:43:a4:90:40:d6:
                    f6:71:43:51:6d:5a:54:4a:5d:59:5e:a6:b4:45:13:
                    55:a8:aa:af:d7:a1:47:26:e5:d6:0b:b3:1a:4a:2a:
                    20:cb:72:4a:84:e2:d4:0a:a6:c2:4b:08:cf:f7:7b:
                    f2:ee:5e:5d:e9:73:e2:5f:73:1a:86:48:a7:01:8b:
                    f6:c9:17:6a:ac:9b:4d:76:95:ff:7b:8c:9c:a4:f1:
                    60:6d:6a:46:73:9c:20:f2:b3:4a:15:a2:2e:02:8b:
                    69:99:a8:62:a7:9a:ab:5e:90:7e:57:c4:56:85:83:
                    b5:38:13:19:0b:03:8b:68:ba:86:e7:c7:c5:12:bc:
                    2f:2c:ea:09:94:ac:03:9c:41:5b:6f:88:cc:c2:cb:
                    e2:75:53:6d:8e:9d:b5:e9:90:51:2b:4e:d7:53:de:
                    04:70:93:e3:35:1b:1c:f0:bd:92:f0:61:3a:20:fd:
                    ed:62:52:e6:e1:47:c8:81:87:9a:ce:06:b8:6d:eb:
                    0d:6b:f7:8f:00:64:8f:f4:10:ca:de:35:a5:a9:fd:
                    ab:c2:71:94:5b:fc:5a:3b:a9:75:9a:d5:48:0e:ef:
                    d7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:02:82:68:14:4D:FD:E1:8A:92:7F:0A:01:FD:9A:A6:BF:CD:12:3C
            X509v3 Authority Key Identifier:
                keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:63:62:36:a5:ce:23:8a:80:12:1c:61:bf:9a:9b:70:a9:79:
         cb:12:76:43:3d:9a:56:99:ba:06:0d:f6:c9:5b:71:eb:8e:03:
         c7:a9:53:67:b9:89:0c:d8:55:f9:37:00:44:95:0a:94:18:d2:
         fc:94:6f:f8:bd:d3:eb:bb:3e:65:4c:8a:a1:3f:cb:2f:06:c5:
         04:a2:a9:96:56:b0:e7:32:e3:3e:ed:ca:b9:eb:e0:38:32:9f:
         5b:4a:af:2d:8d:9c:88:8a:33:4e:76:d2:a2:43:5e:83:68:fc:
         82:d7:68:d1:44:a8:5d:4d:41:45:d3:c7:fd:ad:3c:f1:7e:f7:
         e1:81:09:80:27:46:e3:80:7e:8d:67:d2:8d:ea:d6:44:77:6d:
         ce:e2:e5:ec:0c:6d:64:42:26:82:ce:dd:47:1e:dc:c8:31:1f:
         b7:8f:fe:28:22:0f:82:00:26:06:81:f6:1a:90:2d:b5:80:d4:
         29:1f:3c:93:57:e3:9d:a7:ec:7a:ef:8d:2b:da:d0:c6:06:0b:
         f2:a9:cc:71:6c:2a:26:b4:43:c9:0a:80:c7:de:d7:ca:e2:f8:
         2f:7a:46:24:24:4a:35:a6:ee:0b:d7:f3:2f:d2:8a:a0:34:ac:
         83:06:69:23:f8:42:18:1f:17:c2:91:2e:19:a2:81:92:76:a0:
         0f:ed:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:49:21 2025 by rpki-client