This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
File:                     JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json)
Hash identifier:          X30WgouF3/EOG0or/E+vIYRH2QONeQjvnZspsNYrZb4=
Subject key identifier:   00:C0:BA:6A:60:85:6D:AE:B7:0E:D7:99:6A:2A:F9:53:63:8D:AA:3A
Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
Certificate issuer:       /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
Manifest number:          017B
Signing time:             Fri 19 Dec 2025 02:58:25 +0000
Manifest this update:     Fri 19 Dec 2025 02:58:24 +0000
Manifest next update:     Fri 26 Dec 2025 02:58:24 +0000
Files and hashes:         1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: ZTTI1W2BWZAz6IBjPQE765cx7AoMyPIA4JVwgr7PmDQ=)
                          2: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: NNCNBr7JAI2EgoMi/J/SbTBIH8Xqii5QpYwBz3vHqxE=)
                          3: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: CXeDI74nzeVdWZWZG8BaGKP34Wh7rNPwHEDpbZwBOoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
                          rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
        Validity
            Not Before: Dec 19 02:58:24 2025 GMT
            Not After : Dec 26 02:58:24 2025 GMT
        Subject: CN=6944bf51-3344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:76:75:93:a5:91:87:79:91:bb:38:ee:e5:
                    ab:cf:85:3f:a7:8c:7a:df:d0:06:71:63:1a:5a:56:
                    52:06:e9:ee:54:34:11:05:06:09:96:4f:7f:d8:b9:
                    b4:02:04:33:23:62:ae:13:04:5d:f9:d8:75:69:b8:
                    c1:2c:b2:fd:96:f7:77:77:56:d1:ab:34:61:ad:eb:
                    c2:0d:7f:7c:61:3b:14:60:56:b6:78:77:1d:2c:a8:
                    d7:0a:c1:78:b6:25:55:23:96:9a:72:ce:8e:ad:9b:
                    75:d3:80:11:2a:13:3f:d3:c4:d7:3f:0b:77:e2:92:
                    41:3b:54:5b:60:57:ef:c4:6d:fb:ba:0f:d1:d1:9a:
                    b0:79:6b:c5:2c:95:a4:12:c1:19:3b:7e:e0:95:36:
                    db:6b:55:9b:8c:99:ba:df:2d:24:59:4b:1c:97:65:
                    88:1f:cd:f4:70:98:3c:a2:d5:25:7c:30:32:94:46:
                    07:17:89:08:98:60:12:98:a3:cc:84:14:85:6f:a7:
                    8d:7d:bf:4e:5b:3d:24:61:9c:6f:ac:b7:2e:85:a2:
                    17:da:37:0c:0c:a0:7c:04:cf:9d:6a:14:ad:66:26:
                    33:a2:94:52:de:f1:1d:74:22:2b:5c:47:56:0b:a4:
                    45:0a:d7:63:d7:64:f5:b0:af:3c:58:80:f6:c5:cb:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C0:BA:6A:60:85:6D:AE:B7:0E:D7:99:6A:2A:F9:53:63:8D:AA:3A
            X509v3 Authority Key Identifier:
                keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0f:d5:56:c9:25:4b:75:85:c5:c3:5c:b8:70:a2:09:e7:fc:
         29:03:15:05:c0:7e:54:25:bb:39:6a:9f:9d:72:d4:7d:1e:a7:
         54:31:a8:f2:45:ca:94:65:4c:bd:5b:1f:65:d0:8a:2e:bd:81:
         1e:35:63:3a:ba:f9:4f:9f:ea:f8:c9:ec:49:e0:e1:04:0f:e5:
         67:50:a4:e7:ae:e5:08:12:8c:5a:9e:df:24:95:94:28:00:40:
         4c:8d:c2:e4:55:12:66:fc:d7:83:10:f6:9b:d7:a3:7a:1a:02:
         c2:93:b6:de:90:87:50:d8:1f:59:ac:89:4c:f4:09:a3:93:0b:
         78:f7:42:5e:30:43:99:98:86:f0:4a:f8:a4:7c:15:fb:18:bd:
         d4:e7:a4:da:8d:9d:9a:73:67:b1:05:c8:19:87:96:b2:48:99:
         e1:8f:00:52:54:3e:f9:45:fa:1b:d7:96:9f:8d:6d:52:04:5e:
         6c:ed:54:da:e6:37:ca:01:f8:a7:e7:2e:85:33:1d:6f:d0:3e:
         ea:ed:0c:c7:0b:2b:09:3a:23:de:cf:1b:d3:01:67:bf:d3:74:
         93:18:c5:e0:31:43:57:a3:52:ba:ab:63:65:d2:52:38:39:40:
         7b:3e:b0:1b:ea:45:33:74:94:52:93:24:36:d3:90:92:07:6f:
         6b:c2:bc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:21:34 2025 by rpki-client