This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
File:                     xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json)
Hash identifier:          lXKNWGXUmcTooa1W8InSop0jj7Tzqf5GQJyMUVZW9n0=
Subject key identifier:   1C:CC:14:A9:FD:49:CF:D5:2B:F4:5B:13:21:69:FF:C1:99:47:DB:FD
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Certificate issuer:       /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial:       2385
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
Manifest number:          2350
Signing time:             Thu 04 Dec 2025 15:44:02 +0000
Manifest this update:     Thu 04 Dec 2025 15:44:02 +0000
Manifest next update:     Thu 11 Dec 2025 15:44:02 +0000
Files and hashes:         1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: lzTPz54Zh/Uvgk8OoHmoxa+cpKZDB1Shxy3GGsFoNh0=)
                          2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: mPtYiN+/TfiyRV+YmeA5Y60Ko/M3jijCuHZDr0zx9nM=)
                          3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: LWfr/eGpKsZfBdNv+WTg0Gn+ekMi8PDH3dFvI2YahRg=)
                          4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: wkM6M3U1AcqPEwtXwQs73INeN4ZTzf2doazXiha3Fmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
                          rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 15:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9093 (0x2385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
        Validity
            Not Before: Dec  4 15:44:02 2025 GMT
            Not After : Dec 11 15:44:02 2025 GMT
        Subject: CN=6931ac42-3e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:04:7f:44:d6:76:8f:4e:a7:5c:ae:da:0f:e1:
                    af:2e:46:a2:db:72:fd:0b:35:80:49:97:44:5e:53:
                    6c:1b:f0:29:6d:26:3c:98:d5:b3:03:35:cc:15:ae:
                    1a:92:fa:45:4c:12:3e:86:03:35:d1:5c:2a:69:80:
                    63:9f:da:4a:df:91:56:45:d4:04:2b:e8:0c:9f:16:
                    35:12:44:12:47:6f:86:fa:0f:3f:c7:a2:08:2f:40:
                    6b:12:66:5d:48:0f:e4:10:78:51:69:e5:d8:d6:10:
                    e5:5b:a5:04:cf:0c:23:54:da:9a:9f:29:d6:52:a5:
                    12:69:ac:ae:95:a5:5d:2c:24:b6:ab:a2:60:7e:ca:
                    8a:61:c6:1b:44:5e:2d:57:1f:53:52:35:e3:99:6e:
                    7e:e5:c8:5d:d2:46:9f:ec:1a:e4:90:46:cf:c3:18:
                    62:18:63:c7:22:f0:fb:0a:45:4c:5b:5e:3e:50:a7:
                    cc:46:1b:47:f1:f3:d9:53:8e:be:14:41:56:22:0e:
                    7a:9c:5f:30:17:ef:33:4d:e5:d8:d9:76:b9:29:e1:
                    cd:6b:1b:52:7d:71:9f:b5:da:f7:b5:96:d6:e9:b7:
                    73:79:d4:9c:f2:b0:ce:77:2d:91:be:5f:22:90:98:
                    7c:05:53:e6:78:26:05:d7:56:cb:42:18:cd:30:17:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CC:14:A9:FD:49:CF:D5:2B:F4:5B:13:21:69:FF:C1:99:47:DB:FD
            X509v3 Authority Key Identifier:
                keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:62:b6:e3:29:41:9b:a4:53:3b:7f:7a:40:46:e4:fa:90:39:
         16:24:ee:25:df:b2:96:b8:90:6a:5b:34:3e:28:d2:e0:25:90:
         fb:a6:3c:0a:e9:6f:a3:71:ad:90:b7:b7:1c:01:1f:08:f1:c4:
         6f:29:75:ef:6b:b8:c5:ec:6f:2b:35:64:0a:9d:39:6e:f8:7e:
         12:7f:05:ac:b1:ed:ba:f6:50:4a:41:59:04:14:4c:00:90:ff:
         1f:60:9d:24:6e:a1:98:0e:c9:15:81:95:b0:70:07:4a:8a:52:
         38:eb:d5:0a:d0:59:83:69:2d:da:84:40:ea:1a:14:68:64:6d:
         c1:52:71:a9:22:38:72:fb:c2:1f:b8:58:20:fe:c7:06:a3:77:
         7b:25:b7:fb:35:99:a0:f7:01:44:f5:1e:99:00:56:6d:b3:38:
         a0:c6:43:77:fa:a9:2a:f9:f8:06:f8:70:29:e8:b7:ac:32:81:
         cc:51:10:a2:9a:b8:3f:b5:1e:ba:0b:e6:a8:ce:22:a0:84:e9:
         55:7c:ab:ef:49:a9:12:2f:aa:22:78:06:45:07:e1:da:f5:f2:
         0b:4f:dc:62:2b:1c:c0:11:09:40:47:54:43:93:a7:c4:31:3b:
         0a:07:12:f8:c4:3f:b9:6b:25:73:e7:1f:8f:f7:da:24:30:af:
         bc:2b:54:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:30 2025 by rpki-client