This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
File:                     jenQdP88jVFUFevw8OVqwD7q3To.mft (raw, json)
Hash identifier:          miLgAwEuU6dh0hg0sKU/fXXA3I8Bk4aOB1yJ4RDoWOU=
Subject key identifier:   58:0E:06:BF:70:E2:17:77:96:37:12:13:05:80:99:07:9E:D9:5F:1A
Authority key identifier: 8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A
Certificate issuer:       /CN=A91C9B37/serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
Manifest number:          64
Signing time:             Sun 07 Dec 2025 05:07:41 +0000
Manifest this update:     Sun 07 Dec 2025 05:07:40 +0000
Manifest next update:     Sun 14 Dec 2025 05:07:40 +0000
Files and hashes:         1: jenQdP88jVFUFevw8OVqwD7q3To.crl (hash: JGPUvYfBnMDae2VJVupzJX3eIzkdxq7l4BsyzHPjze4=)
                          2: 7EBD7FAA6DFD11F09A43321EC4F9AE02.roa (hash: tOvv14j7PVKjZOUCL/zHGwFCXfHBrWhMTrZ97/b78ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:07:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B37, serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A
        Validity
            Not Before: Dec  7 05:07:40 2025 GMT
            Not After : Dec 14 05:07:40 2025 GMT
        Subject: CN=69350b9c-35f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:d6:66:c2:2f:94:9a:f8:bc:7b:14:7d:3d:
                    20:14:85:42:9c:19:33:b9:cf:1f:a3:b2:c7:80:ee:
                    d6:32:88:ea:88:13:53:df:63:1f:a8:72:2b:0f:d4:
                    47:45:ad:e5:f3:55:38:27:6c:1d:06:6b:97:a0:1a:
                    21:f4:4e:9f:df:36:6c:a7:18:4f:46:29:4b:d9:04:
                    a8:b0:57:01:03:10:d6:0d:9a:1c:74:7e:ff:71:f4:
                    8e:11:92:42:71:15:59:f0:6a:73:9b:b1:b6:65:90:
                    01:9d:09:29:c9:d1:ba:4a:21:49:4c:1b:fd:fd:65:
                    f0:06:71:81:8b:d0:8f:30:bc:12:7d:5e:ac:bc:f3:
                    9b:18:b0:c8:53:8b:ef:59:9f:31:d0:86:4d:31:28:
                    05:8e:d1:97:9d:13:f2:d6:ff:a9:e9:5a:9d:cb:6f:
                    c8:a3:4e:57:78:04:69:5b:9c:e3:55:cb:1c:3e:a1:
                    73:84:c1:4f:3e:eb:99:d0:eb:34:c1:08:d4:b7:02:
                    81:f0:63:6a:42:41:e5:0c:97:50:df:ad:e3:78:b5:
                    46:15:ec:f2:d3:4e:ca:c7:ba:11:e9:8c:95:8a:6e:
                    f7:a4:07:6c:a9:62:3f:47:39:07:29:48:d3:bc:c4:
                    fb:d9:47:3f:a8:f4:42:79:bd:49:21:f9:32:18:8c:
                    83:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0E:06:BF:70:E2:17:77:96:37:12:13:05:80:99:07:9E:D9:5F:1A
            X509v3 Authority Key Identifier:
                keyid:8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:39:b2:7f:ad:e2:1b:39:7b:21:e6:6a:fe:e6:80:ce:61:5b:
         c9:d6:37:6a:38:85:e6:1f:84:ae:68:69:fb:4a:fa:96:02:64:
         b4:9d:ed:f7:b6:73:73:b5:36:a7:27:d3:14:b4:40:c7:20:f4:
         c3:23:f2:1d:32:14:a1:86:69:33:b4:35:41:5a:bb:d3:90:16:
         41:e2:1a:71:8f:b9:0a:0e:51:18:88:76:03:a8:85:cd:b6:86:
         67:1c:8e:83:12:52:21:db:e3:5c:d5:55:62:d9:f1:4c:c0:d8:
         6b:08:45:c3:b6:88:e2:ba:d4:98:e5:21:eb:ea:18:3c:43:cd:
         9b:6f:29:3e:fa:75:fb:3e:ee:52:8d:f4:bc:5f:b2:5b:b2:1b:
         7c:1f:3f:ad:e7:f1:23:d7:ef:b3:c9:5b:52:73:61:1e:fe:dd:
         d8:9f:5b:6b:28:f1:c7:40:4e:ac:b5:34:b0:80:e0:a7:7d:1e:
         36:17:a9:db:43:19:2e:f6:60:26:b4:30:ed:58:1a:94:c4:7c:
         a8:74:76:e6:8e:91:7b:c5:0b:ee:65:55:f2:0b:4a:49:a8:9c:
         56:21:fe:b5:5f:37:1b:da:ac:8a:69:6e:64:22:2e:87:04:93:
         9a:de:d1:ba:a3:63:ea:7c:f5:2d:8d:70:67:95:5c:30:df:e6:
         7c:42:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:24:23 2025 by rpki-client