This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
File:                     JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json)
Hash identifier:          f2v43d2Cmikm7N05hsIPxLi7C24x5XE+NuEYW7NmIJM=
Subject key identifier:   B1:4D:F8:8C:59:4C:1A:C7:D6:E6:92:1F:11:BC:F7:68:73:FB:5C:41
Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43
Certificate issuer:       /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
Certificate serial:       143A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
Manifest number:          142E
Signing time:             Sat 24 Jan 2026 16:38:29 +0000
Manifest this update:     Sat 24 Jan 2026 16:38:28 +0000
Manifest next update:     Sat 31 Jan 2026 16:38:28 +0000
Files and hashes:         1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: woDbAyex9tcWd0tfvluHMudmdmhexRcbVgic+WQZXeQ=)
                          2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: IqvtwPczbHtONnp7/SjDoKiW5eTz+eR8wc9lCI4pYs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl
                          rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5178 (0x143a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8B7C, serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
        Validity
            Not Before: Jan 24 16:38:28 2026 GMT
            Not After : Jan 31 16:38:28 2026 GMT
        Subject: CN=6974f584-98a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:59:6e:f2:11:47:b5:3b:f1:06:1e:ab:5d:70:
                    fc:e2:74:f7:7e:00:de:d5:46:c6:04:2c:36:33:ed:
                    8e:83:b5:24:aa:4b:ca:03:d1:54:80:f9:6a:50:18:
                    3d:cb:69:2d:25:c6:6f:b4:7e:9f:c4:e2:80:3f:9c:
                    45:09:a8:7b:bc:78:10:ce:c9:d7:47:86:c0:e8:69:
                    d2:5f:09:bb:c8:34:85:34:3d:8d:ad:5b:f5:b2:8c:
                    82:82:13:fb:e5:7c:2a:3e:9b:9c:d0:e4:0f:67:28:
                    bc:d0:95:18:44:d3:7d:14:42:bc:a6:7b:af:05:fa:
                    de:ff:77:c1:a4:7b:40:16:0c:ee:74:10:01:d0:c5:
                    0a:c9:5e:5f:c1:bb:07:ee:0d:6d:a5:47:00:03:d5:
                    ce:0a:79:bd:bb:1e:ee:86:e9:14:93:8a:67:39:4f:
                    b1:90:89:8a:53:8a:e8:df:33:da:66:85:5e:f2:60:
                    51:89:36:82:b7:c7:cc:08:9b:4a:f9:fd:0f:03:4e:
                    85:ec:c2:c9:5b:fa:11:f4:20:75:44:0f:76:88:eb:
                    1a:d3:8e:9f:98:82:52:ce:de:be:04:04:9c:ae:ac:
                    fc:3e:8d:03:e6:73:04:18:a3:2b:ec:41:2b:e2:f8:
                    2c:af:83:16:d3:76:ef:26:a0:1a:db:97:60:1e:e8:
                    38:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4D:F8:8C:59:4C:1A:C7:D6:E6:92:1F:11:BC:F7:68:73:FB:5C:41
            X509v3 Authority Key Identifier:
                keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4f:0a:ca:e5:3f:71:1e:4e:6c:c5:ba:af:be:95:b8:5f:44:
         d4:b9:dd:b1:23:73:5e:a6:4c:64:d4:03:e7:85:25:53:9e:f2:
         4f:86:a0:8f:41:b4:bd:75:57:d7:ee:2b:c7:d7:bb:3c:f1:be:
         46:8c:2a:fe:a4:17:d0:e2:9e:bd:70:cc:d9:9a:39:b1:59:0f:
         9f:10:f8:1e:d3:77:48:38:b4:d6:1f:7c:1d:cb:81:12:dd:4f:
         d4:b2:46:ca:29:c1:2f:d2:82:f8:46:6d:f0:76:e2:2a:87:cb:
         b6:22:88:ae:dd:d1:57:16:b3:f3:60:f8:90:08:cf:0d:02:37:
         23:72:b7:0e:ef:8d:49:fb:b2:32:a9:30:67:e4:28:0e:c7:e9:
         06:87:2b:7f:86:58:0d:0d:48:0a:4d:99:23:3b:d2:4b:17:cc:
         53:f1:da:0b:ab:fd:31:a6:ee:5d:1a:db:51:45:03:64:f6:fa:
         f1:69:58:ed:7a:e5:43:0a:15:b1:65:b9:9d:38:40:8f:42:b5:
         c5:23:7f:39:c9:85:b6:5e:d2:41:c2:60:3f:10:f1:9a:8a:a3:
         60:a6:e4:81:86:ec:d5:13:77:8d:99:46:63:d4:ba:39:e6:16:
         f1:d8:90:76:58:ed:c9:66:4e:eb:e4:95:4c:13:65:5b:47:3c:
         cc:d6:79:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhCN0MxMTAvBgNVBAUTKDI0OTM2RTEzNjlDOTBDMUVERjkxQUY1MDcyRDczRkU3
NDU3REM5NDMwHhcNMjYwMTI0MTYzODI4WhcNMjYwMTMxMTYzODI4WjAYMRYwFAYD
VQQDDA02OTc0ZjU4NC05OGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmFlu8hFHtTvxBh6rXXD84nT3fgDe1UbGBCw2M+2Og7UkqkvKA9FUgPlqUBg9
y2ktJcZvtH6fxOKAP5xFCah7vHgQzsnXR4bA6GnSXwm7yDSFND2NrVv1soyCghP7
5XwqPpuc0OQPZyi80JUYRNN9FEK8pnuvBfre/3fBpHtAFgzudBAB0MUKyV5fwbsH
7g1tpUcAA9XOCnm9ux7uhukUk4pnOU+xkImKU4ro3zPaZoVe8mBRiTaCt8fMCJtK
+f0PA06F7MLJW/oR9CB1RA92iOsa046fmIJSzt6+BAScrqz8Po0D5nMEGKMr7EEr
4vgsr4MW03bvJqAa25dgHug44wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFN+IxZ
TBrH1uaSHxG892hz+1xBMB8GA1UdIwQYMBaAFCSTbhNpyQwe35GvUHLXP+dFfclD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI3Qy85NUZEQTFGQThG
NTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRCN2ZrYTlRY3RjXzUwVjl5
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pKTnVFMm5KREI3ZmthOVFjdGNfNTBWOXlVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEI3Qy85NUZEQTFGQThGNTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRC
N2ZrYTlRY3RjXzUwVjl5VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVTwrK5T9xHk5sxbqvvpW4X0TUud2xI3Nepkxk1APnhSVTnvJPhqCP
QbS9dVfX7ivH17s88b5GjCr+pBfQ4p69cMzZmjmxWQ+fEPge03dIOLTWH3wdy4ES
3U/UskbKKcEv0oL4Rm3wduIqh8u2Ioiu3dFXFrPzYPiQCM8NAjcjcrcO741J+7Iy
qTBn5CgOx+kGhyt/hlgNDUgKTZkjO9JLF8xT8doLq/0xpu5dGttRRQNk9vrxaVjt
euVDChWxZbmdOECPQrXFI385yYW2XtJBwmA/EPGaiqNgpuSBhuzVE3eNmUZj1Lo5
5hbx2JB2WO3JZk7r5JVME2VbRzzM1nlJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:01:17 2026 by rpki-client