This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
File:                     juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json)
Hash identifier:          ZVaRxyalBrdMYGNRV1JR775qbYwwsE7as6wkgElrN/E=
Subject key identifier:   67:FA:3C:D4:02:BD:11:BF:F6:2F:FE:C0:8D:31:06:C7:EF:EF:8F:49
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Certificate issuer:       /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
Manifest number:          01EE
Signing time:             Sun 07 Dec 2025 01:08:23 +0000
Manifest this update:     Sun 07 Dec 2025 01:08:23 +0000
Manifest next update:     Sun 14 Dec 2025 01:08:23 +0000
Files and hashes:         1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: 0e4GZNZI1saz1ftMfqCGNCTCkY85F+5dQwiMgJXGszg=)
                          2: FD678F40214E11F095B05918C4F9AE02.roa (hash: SE2tQtfXNh6RaSGSNFmLS6aWkLKk1NZamBIU1kOWDMs=)
                          3: 45399802215111F0B94CA13FC4F9AE02.roa (hash: 4P/ZavUH4NM6wMd2wGqcFK1zMWVNSTlldDMPOXOpXSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
                          rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
        Validity
            Not Before: Dec  7 01:08:23 2025 GMT
            Not After : Dec 14 01:08:23 2025 GMT
        Subject: CN=6934d387-3a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:25:14:e7:f9:27:22:ad:0d:96:23:65:1e:
                    d7:a8:a8:da:f6:26:d6:5f:3d:d5:79:b9:8f:7d:86:
                    f0:82:a5:ec:e1:3f:24:e5:99:10:74:5d:cb:ea:cf:
                    a1:72:f7:7c:e4:b5:99:d4:45:39:31:06:be:a0:0c:
                    fe:e2:4e:cd:cc:fa:68:8a:f0:28:fb:bc:64:56:16:
                    35:a4:ee:b9:76:c0:a1:84:7e:3d:91:c4:21:2c:4a:
                    18:cb:48:75:1e:59:de:07:dc:57:22:63:4f:ec:d1:
                    d9:3e:03:83:98:96:43:3b:6d:8c:de:5b:40:a5:31:
                    99:8d:7b:40:eb:4d:55:37:2e:29:83:92:97:6b:8f:
                    09:8f:b5:4a:8f:b4:7c:70:f7:45:97:a7:ab:32:99:
                    29:7c:63:ec:e3:35:0a:74:d2:b9:3d:0d:1d:5f:55:
                    6a:d1:e7:68:19:51:dd:cf:c4:1a:40:67:7a:f6:82:
                    2a:02:7d:b0:d7:f8:f3:73:51:c3:ca:eb:fd:b4:3b:
                    06:29:b4:e1:11:a9:dd:af:63:61:b8:4f:af:81:58:
                    e4:65:2c:68:30:4b:58:d7:ad:51:07:94:f0:c4:ea:
                    dd:06:df:81:b1:c2:3c:cd:54:81:44:4a:72:96:73:
                    77:7c:2a:b6:31:e8:2b:ae:1d:e0:e8:ea:2f:58:76:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FA:3C:D4:02:BD:11:BF:F6:2F:FE:C0:8D:31:06:C7:EF:EF:8F:49
            X509v3 Authority Key Identifier:
                keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:64:e8:68:eb:9f:ef:58:7f:4d:cc:54:a2:97:4f:1f:0b:d9:
         ed:36:b8:da:67:cd:05:d0:73:b6:8c:31:5f:00:e6:72:65:26:
         63:2d:65:b8:08:c8:69:60:5b:24:9b:27:7c:3b:7d:a1:b2:13:
         5c:c1:b2:46:74:82:ee:cb:dd:f8:97:20:08:3a:4e:12:d2:2a:
         ca:c3:f1:96:bc:4f:85:f1:52:69:c0:0a:90:22:67:dd:64:9e:
         27:62:9d:e4:9c:f0:13:e2:39:da:cf:55:57:ca:86:5e:35:11:
         b7:08:6a:b5:13:d9:d3:15:e6:e3:54:44:bf:bd:18:cb:6f:c3:
         e7:7f:31:71:c2:70:c6:a2:07:81:e7:18:e0:04:a7:46:39:a1:
         db:df:4e:cd:52:03:43:53:75:05:52:fe:4c:24:30:dd:fe:56:
         38:7a:28:1f:36:4f:94:ef:51:00:60:fb:c3:44:5a:d2:50:d6:
         1d:0c:7d:73:a2:0a:0b:52:2a:33:1d:ef:17:03:82:38:cd:6e:
         e1:15:2c:27:74:fe:e4:ef:b3:0e:21:3b:98:ee:d6:ac:8b:e9:
         63:85:d4:b3:67:c6:74:1a:fc:38:f9:64:f5:42:c7:00:ea:76:
         49:68:b5:ff:fa:da:60:64:4e:6e:46:8c:f0:33:ad:91:a7:a0:
         3c:e3:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:57:07 2025 by rpki-client