This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft
File:                     jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft (raw, json)
Hash identifier:          h8xW5QaCq5ZhLSx1rHjKiHTLKCyzPSnib6wa/Quoi6Q=
Subject key identifier:   D9:B5:4D:A1:D5:59:61:D1:56:5E:D0:2A:42:C4:78:AC:D3:53:B2:CD
Authority key identifier: 8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF
Certificate issuer:       /CN=A91CEE6D/serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft
Manifest number:          26
Signing time:             Fri 05 Dec 2025 05:31:11 +0000
Manifest this update:     Fri 05 Dec 2025 05:31:11 +0000
Manifest next update:     Fri 12 Dec 2025 05:31:10 +0000
Files and hashes:         1: jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl (hash: mm51HtuDkyzySihKeR55AwE1TE68hP/YXgkOhCCAPY0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl
                          rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEE6D, serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF
        Validity
            Not Before: Dec  5 05:31:11 2025 GMT
            Not After : Dec 12 05:31:10 2025 GMT
        Subject: CN=69326e1f-5244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:79:b7:bb:5c:c9:ae:59:45:91:fe:c4:b8:
                    af:68:b7:00:6b:41:59:4d:2b:0f:7f:18:9a:71:3a:
                    8e:af:81:d1:25:96:4f:47:1c:d6:df:ff:5a:1a:f7:
                    07:39:5a:9d:48:27:cd:ee:cf:65:fa:0a:f7:69:da:
                    77:3b:36:f7:d4:66:53:ae:83:2a:d2:04:75:98:e9:
                    e4:a8:1f:9e:fe:5f:d5:6a:ba:9e:ac:26:28:5c:b8:
                    dd:ec:51:7c:cb:0d:70:5f:d4:7f:c5:7c:7e:c8:5c:
                    a2:14:f9:87:0e:53:8a:7e:1b:ed:c9:d5:a3:3b:bd:
                    a5:08:9c:06:c0:47:83:95:e2:99:0b:fe:e0:2b:5f:
                    3a:91:5c:28:61:4d:2e:03:59:21:82:87:fc:3f:4e:
                    a5:97:86:88:27:fb:29:e4:53:22:50:61:c3:8a:a6:
                    8f:fc:3d:e0:6d:b8:bf:94:8e:f6:90:2b:18:f4:bd:
                    dd:96:4e:5e:b2:41:c6:9d:af:12:17:89:cf:65:7a:
                    c7:73:ee:86:50:13:98:a9:a1:0b:45:49:48:04:e7:
                    4d:d6:78:99:77:18:cb:63:06:a2:c8:3c:1f:e9:8f:
                    de:a8:67:7c:ee:4c:48:6e:8a:dc:22:a4:06:bd:f5:
                    ae:13:30:5d:86:8b:9c:ae:4b:8d:a9:f1:20:2b:10:
                    f7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B5:4D:A1:D5:59:61:D1:56:5E:D0:2A:42:C4:78:AC:D3:53:B2:CD
            X509v3 Authority Key Identifier:
                keyid:8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3d:45:25:ee:e4:cc:12:3e:78:ca:e5:03:ef:9c:45:f8:1f:
         0b:fb:6b:b4:3b:ee:2d:cc:b7:7d:2c:2d:c7:ff:a8:1c:38:fb:
         18:8b:fc:41:98:16:92:6e:b5:e3:4f:c6:be:64:8f:3f:a2:f3:
         4c:7b:77:d6:c7:41:65:dc:6e:53:c8:75:49:91:73:0a:97:0d:
         66:93:1f:5a:de:30:49:aa:14:b9:1e:b9:8e:69:8a:43:9b:e5:
         71:9c:43:33:2a:bd:a6:7a:4c:c3:0d:e7:96:89:fd:0f:40:21:
         c7:b3:4c:11:04:fc:50:ca:71:94:bc:e3:f7:99:36:01:6a:23:
         33:bc:c7:39:20:d6:e9:bd:51:be:37:b1:74:88:60:1e:47:24:
         45:ed:8a:3b:df:ca:49:37:48:e7:29:4b:ac:7d:96:be:fa:7c:
         0b:94:9f:cd:68:27:86:6d:3f:51:c1:fa:e5:ae:e9:05:47:aa:
         c4:c5:b5:84:c6:cf:98:ec:f1:0e:68:6a:23:41:44:d5:28:ee:
         3f:96:ba:9f:aa:52:94:8a:dc:a2:ed:ef:e5:50:85:d7:4c:6d:
         cf:21:42:b7:fa:90:38:d7:87:18:bb:08:80:7d:54:ee:68:bf:
         f7:11:f8:c5:54:ec:3c:dd:a6:ef:1d:08:4b:aa:62:ff:24:32:
         09:c7:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:36:30 2025 by rpki-client