This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
File:                     JtUcwUoj0KiCO18cogDnCGrJqWk.mft (raw, json)
Hash identifier:          e9fWnNbuZUvoeyhxwtH7vUgATleyDxFQtNS95RYzLU4=
Subject key identifier:   BF:75:C4:D5:5E:40:19:4E:C1:CF:FE:C5:C9:C5:9F:0E:33:5F:5B:14
Authority key identifier: 26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69
Certificate issuer:       /CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
Certificate serial:       078D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
Manifest number:          0788
Signing time:             Sat 06 Dec 2025 20:32:54 +0000
Manifest this update:     Sat 06 Dec 2025 20:32:54 +0000
Manifest next update:     Sat 13 Dec 2025 20:32:54 +0000
Files and hashes:         1: JtUcwUoj0KiCO18cogDnCGrJqWk.crl (hash: tXDzYwe0wjMRycBxWxCCqxyQL8/RbeyCTFQ9VHCIiTg=)
                          2: 736BC8B433B011EBB38B4E68C4F9AE02.roa (hash: FBuNSRl7XnXjjg9AlzEceanFZnpfOYLenTTWUna+f+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0022, serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
        Validity
            Not Before: Dec  6 20:32:54 2025 GMT
            Not After : Dec 13 20:32:54 2025 GMT
        Subject: CN=693492f6-d7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:13:07:51:86:06:aa:82:b3:a6:9e:b4:4c:05:
                    00:fb:e9:16:3a:dc:58:64:c4:0e:bd:f0:f3:9f:fb:
                    ed:aa:88:9b:b1:12:98:1a:ab:d4:76:b2:85:75:f2:
                    c8:e7:2e:b7:45:6e:20:84:18:3b:6d:c6:61:86:86:
                    bc:02:48:c4:45:a7:1a:91:ae:8e:a9:86:80:12:89:
                    07:6f:2e:9d:83:e7:ee:9f:f7:34:01:28:42:66:27:
                    61:a1:83:09:18:6c:39:13:98:a3:19:b6:ec:a8:84:
                    ba:1d:61:4f:e0:df:5b:c1:7b:72:09:d0:f2:33:58:
                    0a:3a:f1:f7:01:0a:66:94:0d:b9:5d:9d:6b:ff:8c:
                    4e:ef:5f:7d:e8:ac:dd:fa:80:11:e9:09:a9:0e:17:
                    a1:5a:00:33:b3:bb:b4:a7:e7:06:a6:71:d1:6e:de:
                    33:61:4d:15:f6:7f:fe:d0:4d:12:ca:4b:87:3c:1b:
                    f5:f3:c4:1e:b1:41:e9:2d:3b:58:80:9d:0f:0f:e9:
                    49:63:c0:1a:dc:9c:9f:60:e8:62:d8:ac:83:0d:38:
                    98:e2:7c:53:ff:fd:e2:e1:2f:f4:93:83:24:0a:37:
                    e1:55:e9:89:57:55:b1:ef:fb:21:23:c2:ee:25:53:
                    c3:2e:49:31:35:86:62:e3:09:0c:b7:99:47:a6:ff:
                    48:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:C4:D5:5E:40:19:4E:C1:CF:FE:C5:C9:C5:9F:0E:33:5F:5B:14
            X509v3 Authority Key Identifier:
                keyid:26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:ab:ff:7f:66:f1:eb:8b:3b:50:e0:94:03:98:a7:5f:a4:
         d2:64:25:11:2d:ab:d0:0c:57:ef:c3:4f:e0:5a:a0:7f:b0:fd:
         ec:aa:68:09:b5:86:3b:7a:70:74:16:3c:2f:31:ff:ff:11:e8:
         ee:7d:36:6a:73:8f:27:f6:0d:77:70:64:84:2d:a0:b5:10:90:
         90:93:17:f7:9b:8f:6c:46:0e:c7:d3:c9:ed:8a:16:0d:77:f3:
         5d:be:32:c7:79:29:ee:6b:58:ad:3b:59:a0:51:0a:d3:5f:47:
         1d:28:25:fe:85:dc:e4:0f:9c:aa:b5:a8:5a:75:87:c2:d7:21:
         95:e5:02:e5:45:84:83:5c:6a:43:4b:6a:d4:9d:ee:a6:e5:63:
         17:7b:76:ec:60:eb:2a:4e:9d:7b:59:57:19:99:71:3b:65:24:
         26:8c:76:59:c3:b2:20:ea:6e:39:5f:3b:10:2a:a8:5f:e0:29:
         f0:3c:75:c9:5b:c5:b6:e9:fa:54:60:ca:f6:2e:f9:11:8d:3d:
         b5:e3:11:f2:79:a9:1d:f5:99:7b:97:39:2c:be:d0:72:99:89:
         f0:19:a1:bb:cd:5f:67:b2:31:bb:31:db:a4:55:f2:7d:76:bb:
         d9:7a:f1:70:d6:b8:be:71:3d:1b:50:47:90:59:41:c3:8d:e4:
         49:cc:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:20:19 2025 by rpki-client