This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
File:                     Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json)
Hash identifier:          u1LT8JGPUqwhF5u2I27te5a+0w2hByj/uLkN+16HFXY=
Subject key identifier:   C0:66:81:86:A6:46:23:40:B5:B1:FB:88:FF:F2:43:DA:59:7A:AE:E6
Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD
Certificate issuer:       /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
Certificate serial:       05F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
Manifest number:          1F8E
Signing time:             Sat 06 Dec 2025 16:01:26 +0000
Manifest this update:     Sat 06 Dec 2025 16:01:26 +0000
Manifest next update:     Sat 13 Dec 2025 16:01:26 +0000
Files and hashes:         1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: 2Tsum20GOrLZIMM5P2LEdz6nxyrBLcNgkMkfDtJaCHA=)
                          2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: 18yGqSgC4OjskRlJV7bTeEZSgygKIsdz22IPs64qVtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl
                          rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
        Validity
            Not Before: Dec  6 16:01:26 2025 GMT
            Not After : Dec 13 16:01:26 2025 GMT
        Subject: CN=69345356-57ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:26:bc:78:5c:55:00:6d:1f:3d:17:54:04:
                    12:38:c2:28:8a:e0:c0:8d:9e:36:5d:74:59:45:9b:
                    72:f5:f5:73:72:bb:dc:57:21:5c:7f:4f:53:16:2f:
                    a0:d2:8f:15:23:f2:65:74:1d:f2:70:48:6f:69:2b:
                    49:88:fc:df:b1:57:86:5c:8e:94:a2:dd:4a:7d:9e:
                    8d:91:61:2c:e3:84:12:ea:7f:dd:e4:1f:a9:38:4e:
                    f1:8a:84:c8:2b:73:32:44:1a:65:84:fc:cc:7b:31:
                    2a:10:38:e0:00:1b:34:f5:3a:19:9c:a1:e6:ad:ec:
                    b0:30:81:1f:af:ce:dc:4e:28:0b:cb:72:00:64:b5:
                    5d:f0:d1:92:57:fa:57:99:67:a8:0d:6f:7a:5b:c0:
                    02:8d:69:38:53:bb:5c:ba:23:df:15:7f:6d:71:91:
                    aa:99:2d:69:3e:25:e6:58:bb:fb:7f:46:10:53:19:
                    e2:dc:19:80:ba:fd:b1:41:29:9b:36:64:5a:e1:0c:
                    4b:ad:4d:53:61:3e:21:76:86:b8:b9:d4:ca:1e:f1:
                    04:aa:05:0f:0f:fe:4c:e1:35:5c:a8:df:c1:6d:04:
                    12:6e:80:e7:c8:a2:40:27:7f:7d:9b:44:97:61:eb:
                    a1:f0:85:9a:e3:96:88:cd:b5:ef:51:37:a2:45:4d:
                    fc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:66:81:86:A6:46:23:40:B5:B1:FB:88:FF:F2:43:DA:59:7A:AE:E6
            X509v3 Authority Key Identifier:
                keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:98:5b:eb:21:06:dc:a8:9b:6c:5d:b6:e1:e0:e1:92:5f:8f:
         19:61:c1:8a:09:16:ce:37:d0:1a:f7:a0:45:df:e6:8d:77:78:
         fd:c2:e5:e7:5f:3b:70:90:b6:19:fb:f1:e9:dc:87:c9:0f:76:
         33:f8:a2:bf:9a:59:07:3b:5a:9b:75:6e:ba:2c:54:9d:1b:3b:
         f0:a7:19:23:42:1e:38:65:f0:ea:4a:f2:04:c5:92:31:63:de:
         03:51:e2:77:27:03:6e:de:4a:76:1b:28:96:01:54:c3:9c:5b:
         d7:96:2c:bb:1d:ce:bb:68:14:e1:4b:60:26:8a:9a:ce:43:8c:
         bb:d5:72:30:bc:30:70:d9:ad:22:7b:d5:60:b9:25:55:2b:1e:
         64:66:71:72:f8:2e:1a:44:64:9f:0f:cb:28:36:bf:c9:44:d9:
         e0:48:2a:bd:0b:b5:e4:b9:10:cd:c5:7e:a9:3d:11:29:8b:ac:
         e4:22:9c:87:8c:5b:e1:67:f1:eb:5b:c9:59:5c:36:2c:19:3b:
         77:d4:f2:57:aa:f1:f5:2a:57:5d:4c:d1:e5:50:2d:9f:4a:0a:
         08:5a:21:0a:6a:e1:b6:67:5a:47:24:64:6d:e2:ba:b6:96:5e:
         d5:c0:a0:ae:ad:28:14:db:45:3c:08:b2:14:2e:5a:68:a0:94:
         08:14:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:14:15 2025 by rpki-client