This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
File:                     JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json)
Hash identifier:          8grVXtdsTeJVCRnf6q3cWxhkhOS77ZKPlQsNjLcMJ+k=
Subject key identifier:   50:31:83:74:B4:0D:C7:C0:D4:6E:BB:F6:C6:55:D5:48:88:E7:A6:7D
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Certificate issuer:       /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial:       0856
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
Manifest number:          0835
Signing time:             Sat 24 Jan 2026 20:16:28 +0000
Manifest this update:     Sat 24 Jan 2026 20:16:28 +0000
Manifest next update:     Sat 31 Jan 2026 20:16:28 +0000
Files and hashes:         1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: TCheEc64rv+TTbLuDdnOc3m0sPCeZG5PmNlanoz0n+g=)
                          2: F5CABDCAAFEC11F09FCD3B73C4F9AE02.roa (hash: 0yZs3Xym+WnGMp8KHnnak/TVR2TnL+mhDrrt7KhFJKI=)
                          3: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: GShGdxQIAis3O76gmrITPa24v8g8EP88h70Ug2ynDsU=)
                          4: 7AE0B322AFEB11F08458536FC4F9AE02.roa (hash: yoiGI7fp2t2mfbLGOhPcvm32xJHQl430j6+zKs7hBQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
                          rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134 (0x856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
        Validity
            Not Before: Jan 24 20:16:28 2026 GMT
            Not After : Jan 31 20:16:28 2026 GMT
        Subject: CN=6975289c-a6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:4e:c3:f2:87:27:fa:66:7c:77:4c:a0:4a:
                    19:71:a2:f8:81:7e:34:71:38:24:97:1f:b4:3b:85:
                    b8:e9:7c:47:42:cf:7e:3f:9d:53:00:1c:fc:ec:01:
                    2c:eb:d0:db:5c:41:94:0d:f9:94:e8:34:47:6d:78:
                    93:b9:34:b9:af:b4:cc:fb:cc:44:dc:a2:b5:01:d3:
                    5e:49:31:43:d0:98:41:fa:f7:25:19:34:9d:8d:2e:
                    51:ee:0e:4c:94:11:06:b9:fc:65:cf:93:f1:8d:72:
                    08:78:25:b4:0b:3e:d1:71:b7:69:0a:07:37:65:1a:
                    dd:dd:45:c2:93:7a:a0:ef:35:6c:53:52:8c:db:a8:
                    dc:65:62:73:09:4f:5f:d2:32:08:e0:82:cc:d8:3f:
                    4d:30:52:42:10:26:ba:a4:0d:c6:ff:19:63:49:dd:
                    b8:15:34:8e:48:8c:dc:7b:71:13:06:75:68:c4:d8:
                    1b:8d:57:21:ab:91:31:c6:80:b8:bb:3a:95:51:5d:
                    f2:68:ca:14:11:4e:74:91:ca:41:9a:66:45:1d:48:
                    89:11:a8:61:7f:f9:46:5b:0c:ad:ac:4b:59:92:e1:
                    99:08:52:dd:67:0d:5a:d9:90:f8:72:d7:50:25:df:
                    df:ec:a2:3a:b5:91:ee:0d:42:95:91:16:80:eb:f3:
                    b9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:31:83:74:B4:0D:C7:C0:D4:6E:BB:F6:C6:55:D5:48:88:E7:A6:7D
            X509v3 Authority Key Identifier:
                keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c9:28:db:27:1a:56:5b:21:b2:bd:fa:98:0c:00:8b:7c:90:
         93:44:22:c2:c4:0c:8d:82:61:b2:6a:d5:00:5f:83:69:e5:c5:
         cf:55:80:a3:3d:a0:fe:a2:ce:cc:7c:38:99:ea:33:ba:dd:48:
         a4:19:fc:46:8b:52:49:90:d9:a1:e8:65:d8:e8:8e:a3:66:7a:
         bf:54:f4:75:58:1c:9d:ae:f3:5d:b0:38:6d:b9:42:49:d8:15:
         5d:84:0b:57:17:16:e5:11:7a:2f:0d:1e:1a:76:54:96:0b:6c:
         4c:c0:98:85:73:4e:ab:f1:9a:8a:1e:6a:5a:79:e3:86:98:e5:
         b3:e3:3f:8c:14:db:70:bb:6c:bc:9e:29:bf:36:ce:b3:46:71:
         b7:4d:17:24:fa:99:01:fb:6f:92:86:02:18:23:42:96:85:08:
         bb:c6:8b:22:33:f7:6f:1b:27:71:c5:83:d0:1d:04:dc:f3:3d:
         64:99:ec:cb:71:04:97:b2:3f:da:f2:fd:73:46:94:44:39:e5:
         2c:eb:80:23:56:8d:4e:aa:e9:55:3e:01:70:40:d9:fb:5d:d1:
         17:cb:e4:3e:e7:88:07:83:cd:e8:bf:a2:5e:d8:ae:b6:0a:cd:
         f5:bf:a6:d4:c6:96:e0:b8:4a:85:bb:35:7e:bf:2f:3e:d4:8e:
         e4:e4:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:39:41 2026 by rpki-client