This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
File:                     JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json)
Hash identifier:          D7wxX6LGKJkq9JG3MITnE7qTTAARDCeaX0AGIjAFloI=
Subject key identifier:   72:53:85:F7:2E:D7:2D:9F:44:5F:2B:AA:F2:D8:4D:BE:71:EA:AE:24
Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
Certificate issuer:       /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Certificate serial:       351C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
Manifest number:          3509
Signing time:             Sat 10 Jan 2026 15:11:00 +0000
Manifest this update:     Sat 10 Jan 2026 15:10:59 +0000
Manifest next update:     Sat 17 Jan 2026 15:10:59 +0000
Files and hashes:         1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: pswBIelUKdOYvZxurDOs30W+1xCb/yLzq6Qt/hUon1Q=)
                          2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: a03YccLD26+EVq1g9SXKvWZ2v+EmXltyBYT+9f1nANI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
                          rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 15:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13596 (0x351c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
        Validity
            Not Before: Jan 10 15:10:59 2026 GMT
            Not After : Jan 17 15:10:59 2026 GMT
        Subject: CN=69626c04-62c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:95:b9:93:82:6d:fc:1d:5a:31:b3:7f:91:
                    7d:76:f1:40:26:7d:51:50:af:96:5f:2f:c9:1a:43:
                    7e:2e:5f:e3:f1:c2:62:cb:1c:76:97:9c:06:76:cc:
                    6a:7f:bf:5d:79:58:74:9e:ae:af:4b:80:f1:4a:0b:
                    49:10:6a:b5:ec:f0:73:99:cd:20:34:3f:43:27:ac:
                    02:0e:48:f6:c7:57:ca:b5:42:8d:24:07:4c:cd:71:
                    a9:1f:b8:66:dc:47:e1:9e:16:c0:15:4a:c1:d2:07:
                    6b:b8:f3:d7:bc:c8:d3:89:34:7c:56:c6:f8:c2:89:
                    a4:b1:8b:d3:d5:1e:fc:a6:6e:f0:26:13:7e:1b:c0:
                    de:73:d8:11:91:33:82:84:4e:03:0c:6b:c2:bf:1e:
                    5c:8a:aa:c6:ce:5b:62:19:eb:93:7e:35:ad:37:d9:
                    2d:48:58:71:35:8e:12:76:79:04:4e:04:06:91:ad:
                    c9:da:7b:a6:3b:14:a5:a1:37:73:28:78:d4:cd:42:
                    03:78:b2:a1:a5:84:2b:9a:12:e3:45:7b:92:39:dc:
                    30:23:49:93:5f:b4:81:08:b8:e0:a3:0c:f1:9b:7f:
                    b8:42:50:f8:1c:92:f2:cb:bc:de:9e:3b:6b:a2:56:
                    22:be:1d:4c:e5:f6:65:09:c9:8e:60:2a:da:be:ad:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:53:85:F7:2E:D7:2D:9F:44:5F:2B:AA:F2:D8:4D:BE:71:EA:AE:24
            X509v3 Authority Key Identifier:
                keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a4:8c:45:42:90:9d:0a:d3:70:9b:39:a2:1f:4b:7b:03:40:
         ff:6d:90:9c:39:3d:ef:9a:34:a5:d6:87:41:53:a4:92:09:7b:
         74:ac:69:6c:36:c4:0d:d5:ab:18:85:c3:86:c0:41:6b:e8:34:
         a6:c8:98:a4:8d:59:82:e6:57:48:54:7c:d8:96:8e:0a:7e:cb:
         10:13:6a:e9:22:1a:0d:9b:55:f3:af:10:03:d2:22:6d:81:91:
         07:61:ad:ef:d8:35:35:ba:53:45:fe:cf:95:46:3f:13:21:e6:
         c0:d4:e0:06:56:37:9a:51:85:b9:1a:e6:c7:44:46:44:79:f8:
         fb:03:a3:d4:3e:38:98:1b:55:4a:98:c8:00:70:4f:85:3f:19:
         40:09:6f:b2:f6:26:96:6f:51:71:b8:47:73:46:74:eb:48:78:
         31:ac:84:5c:10:f6:e8:3e:e4:f5:1e:c1:fb:7b:c0:ca:5d:56:
         22:8c:be:80:27:00:98:64:ea:98:78:e1:3f:39:d7:27:22:5d:
         2a:bb:6c:9f:de:64:9a:22:2d:5b:ac:66:cc:15:57:22:c5:9e:
         d0:7b:08:76:3c:b9:88:d6:3c:52:7a:4f:5a:7e:f2:6c:89:f7:
         75:c4:18:cc:45:2c:f0:a1:ac:bd:d3:79:c6:56:67:d1:93:8d:
         58:81:be:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:28:35 2026 by rpki-client