This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
File:                     JyyuXyHIv2trSRWvAATH78_H2z0.mft (raw, json)
Hash identifier:          zPkafXQyXjr99YFgDvRGqWYjaBwQlW0VmUaa+QFWMFs=
Subject key identifier:   A2:74:6D:B9:1E:3A:72:09:AF:64:36:A6:35:CB:F0:55:C6:44:DA:23
Authority key identifier: 27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D
Certificate issuer:       /CN=A917314A/serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
Certificate serial:       0314
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
Manifest number:          030B
Signing time:             Sun 21 Dec 2025 00:23:21 +0000
Manifest this update:     Sun 21 Dec 2025 00:23:21 +0000
Manifest next update:     Sun 28 Dec 2025 00:23:21 +0000
Files and hashes:         1: JyyuXyHIv2trSRWvAATH78_H2z0.crl (hash: SyKf3yrNgZIiW7nhYq2wBxQg1PgQ4UIVVXVNVTWQr9A=)
                          2: CED1044A623011F09444A631C4F9AE02.roa (hash: lqYz7plj25I4UFVda7v0py7vjm0VDK3lt1JVntkVi38=)
                          3: 8620180E00EE11EDBC60AA4FC4F9AE02.roa (hash: JbvkFmhuxDHhlpgsWGCnfVlPsQAl6R0NvFJ7QoU6lmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl
                          rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 00:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917314A, serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
        Validity
            Not Before: Dec 21 00:23:21 2025 GMT
            Not After : Dec 28 00:23:21 2025 GMT
        Subject: CN=69473df9-a585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:17:6b:03:a6:1e:32:a6:48:9b:58:86:29:
                    2e:91:81:56:c4:2a:44:16:77:18:35:bc:07:de:ac:
                    c0:b6:39:3c:5d:26:0d:b8:62:cb:23:72:d9:01:c0:
                    89:c0:28:af:7e:f4:09:54:20:4d:e1:66:32:34:0f:
                    ec:8e:ad:f6:ae:bc:39:e8:73:64:dc:b6:d3:22:c5:
                    e8:fd:98:2c:ac:01:96:63:61:1e:18:35:a1:ca:61:
                    af:4c:81:98:74:10:74:e4:c0:22:8b:d0:9d:4b:5d:
                    7b:78:d9:a7:f7:a3:ea:e2:2f:cc:53:26:8a:3c:a2:
                    1d:13:d4:d3:fa:7e:c7:7b:c7:31:37:5d:a7:45:a7:
                    1f:6c:c8:d0:e7:de:5e:eb:65:04:35:3c:c1:3f:3a:
                    c4:14:70:d4:df:c8:63:ba:03:d7:43:79:57:1f:94:
                    e7:62:a0:5f:cb:71:b0:87:59:4e:e5:f2:4f:f0:73:
                    ce:7d:ba:8f:f4:59:ff:3d:9a:51:31:9a:67:a2:b5:
                    8c:65:d3:cd:a4:63:4d:76:c3:00:bb:f4:db:11:3a:
                    e7:1a:30:c8:d4:a2:a2:87:07:b4:74:a7:7f:fb:2c:
                    30:16:5b:e5:9f:04:4c:06:bb:f8:67:e9:6a:95:15:
                    40:40:8a:83:bc:e0:47:cb:b9:34:ca:eb:6f:d2:b4:
                    4d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:6D:B9:1E:3A:72:09:AF:64:36:A6:35:CB:F0:55:C6:44:DA:23
            X509v3 Authority Key Identifier:
                keyid:27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6c:e3:6c:52:6e:8a:9f:32:ac:5e:cf:0b:b4:0f:77:e3:27:
         52:cf:af:79:aa:e3:a8:89:32:94:83:6e:51:31:69:18:a1:37:
         29:88:d5:f3:32:eb:b5:43:20:a9:00:e9:dd:c4:74:2e:2c:2e:
         5e:1f:7f:a6:cf:0b:6c:3a:09:5e:90:bc:c0:eb:98:3a:0f:90:
         47:b3:ba:e9:58:af:62:c8:6a:28:69:e4:3f:75:58:47:fd:92:
         08:e6:7a:1c:2f:d2:1b:cf:5a:d0:d7:04:be:c1:f8:ca:de:31:
         87:35:d6:a2:fa:97:b6:ae:2d:58:37:4d:43:1a:40:5e:6d:84:
         56:0f:97:70:46:6b:93:80:c3:42:c0:12:05:29:f9:04:5d:d3:
         bf:3f:44:61:0f:99:c8:7d:74:8e:64:2f:8f:86:e9:8f:fa:4b:
         f8:82:c4:2a:1a:92:4a:18:0a:63:29:e2:e6:aa:e3:ad:c5:b0:
         2f:5d:df:9f:de:14:64:2b:6c:63:ff:8b:1d:5a:8f:97:bd:38:
         51:dc:92:80:92:1a:9c:41:a1:30:f3:98:c4:24:8b:29:12:eb:
         81:a8:08:a9:fb:b3:30:3a:b7:6d:50:ee:76:a7:46:ae:c7:7f:
         05:30:ae:d6:fd:42:6e:18:35:65:90:97:8f:b1:49:f4:df:31:
         b0:4f:7a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:09:28 2025 by rpki-client