This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft
File:                     jX1Dtvy5Zujhplg72gclAVesMQ8.mft (raw, json)
Hash identifier:          m/lVLIxBpHEJ6602gfbZTTdwNvyU17rh1RnVf/aLgng=
Subject key identifier:   4D:1B:27:36:B4:52:15:4C:B0:94:7E:46:E4:D2:B2:CD:F9:E2:B3:1A
Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F
Certificate issuer:       /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F
Certificate serial:       0229
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft
Manifest number:          0222
Signing time:             Fri 05 Dec 2025 00:28:28 +0000
Manifest this update:     Fri 05 Dec 2025 00:28:27 +0000
Manifest next update:     Fri 12 Dec 2025 00:28:27 +0000
Files and hashes:         1: jX1Dtvy5Zujhplg72gclAVesMQ8.crl (hash: 2UfaefstOnNEuSG6+BONPCzLm9B2bej4+Q6RVVsX4fY=)
                          2: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (hash: uvO6HQukwYrPh3gWNmwuzQaBlS53E3Kz5eOoB+lqzW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F
        Validity
            Not Before: Dec  5 00:28:27 2025 GMT
            Not After : Dec 12 00:28:27 2025 GMT
        Subject: CN=6932272c-25fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:db:f1:8d:fb:5f:02:9d:4c:9b:c0:24:cc:
                    8a:88:76:10:a7:b1:7c:6a:16:6f:da:95:e9:c3:c3:
                    48:7d:73:7f:95:74:cc:46:7e:c0:9e:88:10:94:2e:
                    d9:45:60:5c:33:8a:96:b3:2f:70:d7:42:42:b3:2c:
                    e5:1d:61:5f:1b:ac:d7:d7:3e:7f:f5:8c:f7:86:67:
                    78:fc:99:55:51:f8:02:5b:e2:53:28:7f:3b:4c:e4:
                    c9:85:69:f0:14:67:09:cb:51:d3:d5:20:ad:fa:04:
                    13:22:7f:34:c9:8a:76:8e:a8:95:b8:9f:20:63:e9:
                    63:8a:8d:76:32:07:e1:33:96:1a:67:08:14:94:7c:
                    40:f1:e2:fc:f8:b3:80:8e:1b:d4:1c:49:2d:34:50:
                    57:a1:3b:9c:77:a4:4e:39:fb:70:f1:dc:7b:1a:41:
                    58:00:e0:a1:8b:87:12:4d:c7:0e:ef:73:45:90:6b:
                    1d:5c:78:dd:f0:78:bd:1b:6c:b4:05:3e:f9:de:37:
                    51:28:4d:71:be:3b:fa:87:09:d3:74:54:7b:be:32:
                    64:0d:7a:32:88:30:cf:8d:5e:5a:15:07:99:22:fb:
                    e1:c3:fb:0c:56:b6:63:51:9e:b7:8d:39:2d:11:2f:
                    c3:9f:b7:d2:ab:39:d7:9c:b3:83:44:d5:a8:fb:9b:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1B:27:36:B4:52:15:4C:B0:94:7E:46:E4:D2:B2:CD:F9:E2:B3:1A
            X509v3 Authority Key Identifier:
                keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:36:7b:b3:24:35:26:16:6b:5d:73:73:87:07:88:b9:d5:ff:
         07:2e:11:1c:c0:3a:bc:5c:29:80:09:fd:20:e5:da:f4:2e:7b:
         66:26:0f:aa:36:5c:e3:40:c6:8c:3c:20:00:df:85:e8:d0:e5:
         b5:e7:5e:28:cc:30:7a:6e:11:4b:f7:c0:4f:e1:6c:a7:98:25:
         e7:bb:0f:2b:b2:88:d5:16:8d:51:22:d2:25:c7:6f:fa:d0:0d:
         b8:9c:bc:f2:09:c8:c7:38:b8:4f:00:37:53:ae:2b:6a:fe:8f:
         7c:8b:1a:2c:17:2a:4d:d1:6e:6c:f1:fb:a9:d7:f8:55:50:10:
         49:6d:ee:97:95:d3:e4:69:3f:07:fc:c2:8e:de:46:26:aa:bb:
         d1:6b:8e:b2:6e:f4:77:9b:76:40:9a:44:f4:09:d6:1d:06:5a:
         fb:9d:07:b4:c9:e9:b2:ef:10:90:4c:c5:68:6a:9b:36:c9:6c:
         9e:44:8e:08:cb:fd:09:16:c9:1a:41:72:3b:88:ec:41:25:fb:
         33:58:39:c5:f1:49:6b:bb:3d:52:db:7f:17:0e:82:26:fc:3b:
         0d:e4:fd:b0:55:44:1c:98:5b:e4:da:05:3c:b8:f1:36:06:3b:
         7f:c8:9d:98:68:3c:ad:da:fa:11:f9:bb:35:36:07:b8:39:c8:
         f3:14:17:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:25:22 2025 by rpki-client