This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
File:                     JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json)
Hash identifier:          cw6YEUZwnjUGwDTH39/35JQPWGZMrXE0KURNql9PNSk=
Subject key identifier:   22:5D:A2:41:91:B8:7D:8D:0E:5E:07:E4:13:75:79:3F:9F:DE:FB:4D
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Certificate issuer:       /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial:       1FF7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
Manifest number:          1FA7
Signing time:             Sat 20 Dec 2025 15:51:12 +0000
Manifest this update:     Sat 20 Dec 2025 15:51:12 +0000
Manifest next update:     Sat 27 Dec 2025 15:51:12 +0000
Files and hashes:         1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: 3hGYj9bTO018FmLDLsvcrC8IA9SYD1fJe5tMnY/uzGg=)
                          2: 3BBD8AE8620811F091BDA035C4F9AE02.roa (hash: l81KZYm8B7McIqBnNG7M2LbcnjjotjoHq+OGQq2Xixo=)
                          3: 3CC1BACC620811F091BDA035C4F9AE02.roa (hash: ruc/xUwDnNEwkE2/jK0HE26pVyzAxl1jWbriA1MT2XI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 15:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8183 (0x1ff7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
        Validity
            Not Before: Dec 20 15:51:12 2025 GMT
            Not After : Dec 27 15:51:12 2025 GMT
        Subject: CN=6946c5f0-e831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ec:85:cb:fd:08:4f:f0:b8:b4:01:29:8f:01:
                    40:93:16:d8:d7:51:d1:46:c4:b1:03:cb:b4:53:29:
                    60:15:7f:0d:aa:70:54:93:b0:b5:e4:42:3f:f6:0e:
                    86:2d:4d:c0:24:12:ac:54:aa:c3:a9:fe:28:72:33:
                    6e:ef:47:02:80:ed:74:50:dd:cb:a3:67:ba:58:dc:
                    51:8e:d4:a5:1e:dd:b2:cc:55:54:b1:7c:7a:93:53:
                    0b:56:43:fe:56:00:e4:36:aa:21:f7:c2:e4:97:3c:
                    b0:a0:82:06:5b:18:fe:9b:b9:17:9d:a8:97:a6:17:
                    ad:14:20:08:97:b7:13:07:bb:80:5a:be:61:77:64:
                    94:80:8b:e4:41:5b:8e:fa:7f:d2:aa:a3:20:6f:3b:
                    6f:b2:29:49:47:3b:65:80:6e:a5:a3:ba:d9:08:1c:
                    c6:5b:c4:72:dd:87:c1:62:69:7a:00:60:50:13:54:
                    1c:2e:53:a4:38:b6:d2:0a:9a:ef:ce:f1:26:fb:d0:
                    a5:47:f0:c7:52:3e:94:41:08:39:fb:97:c1:c4:c5:
                    cc:0a:dd:0e:9a:32:0f:bb:22:2f:e0:eb:97:06:a7:
                    33:00:14:1b:f8:cb:44:c6:7f:9a:a9:3c:24:bf:92:
                    ac:d4:d4:50:35:30:36:95:63:ae:60:d4:62:d6:b8:
                    1f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5D:A2:41:91:B8:7D:8D:0E:5E:07:E4:13:75:79:3F:9F:DE:FB:4D
            X509v3 Authority Key Identifier:
                keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ab:28:0f:78:ef:1d:12:c8:5c:10:bd:6f:b5:31:a8:52:e6:
         b8:94:32:f5:77:d7:73:d6:ea:29:54:02:7a:20:9e:a1:c4:9d:
         d2:c9:91:ef:c8:24:1f:c1:20:e4:52:96:30:1f:56:e0:00:c8:
         c4:1b:a3:a1:20:87:1c:17:7e:ce:04:b5:eb:0c:cc:31:2e:31:
         12:2d:36:4f:db:c0:73:f6:2b:32:15:18:db:bc:df:64:fa:b6:
         24:86:7f:6d:a4:cf:dd:c1:2c:94:32:ae:3c:f5:34:f8:77:96:
         f3:7d:2d:74:ac:cf:3a:9b:ee:3e:ba:e0:dc:bd:e8:58:e7:df:
         79:ed:a5:f8:e0:98:bc:ce:e7:93:cc:5d:5c:95:2d:71:08:84:
         4f:dc:ec:a4:bb:d3:ab:56:fe:f9:b6:92:7f:3f:54:22:5a:f6:
         38:49:fd:ab:c8:3c:b2:a7:0e:bc:f7:c7:1d:3f:49:55:69:c1:
         fb:8d:20:10:a4:80:48:fd:0e:9a:4c:a5:a7:61:96:ca:94:53:
         35:6b:c9:ab:a0:de:ee:ca:d6:61:7e:7f:dd:9d:f0:29:db:80:
         e4:f7:a6:4e:64:00:9d:bb:f9:4a:07:c0:c4:93:f7:73:87:fe:
         7b:75:f5:ea:3c:b1:91:61:35:a8:13:af:d2:c9:39:a0:ee:fc:
         0d:a8:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:44:18 2025 by rpki-client