This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
File:                     2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json)
Hash identifier:          7jJdaxiR3Dig3GYSztcmYnLak5X03hpUPsU20R+gBH0=
Subject key identifier:   2F:49:F1:B0:6E:AE:69:F8:63:D8:C9:6E:C4:C1:A1:25:4B:1F:6E:30
Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
Certificate issuer:       /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Certificate serial:       0D51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
Manifest number:          0D3B
Signing time:             Sat 06 Dec 2025 17:26:13 +0000
Manifest this update:     Sat 06 Dec 2025 17:26:12 +0000
Manifest next update:     Sat 13 Dec 2025 17:26:12 +0000
Files and hashes:         1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: QmlwFkfAcmc0hIoEExQyejTArmFR5svfI5oDNPvQAuI=)
                          2: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: LD0ithX2780J0eLYJ+pZjxCf/VO5UT20hM3rBP9oW8s=)
                          3: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: PkBHUrnClJtIRj3hyvhFOR74ygd0IwmSJ02fNGArhbM=)
                          4: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: ORDwcUk6C17rG0Rjjv65wOFUqorGmDWrJEH1nGvJDz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
                          rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3409 (0xd51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
        Validity
            Not Before: Dec  6 17:26:12 2025 GMT
            Not After : Dec 13 17:26:12 2025 GMT
        Subject: CN=69346734-84bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:0e:27:3f:c6:6e:5f:cd:ee:d5:a8:43:2f:
                    fa:3c:12:09:4b:34:6c:e7:f9:69:f4:f0:00:df:8a:
                    f1:77:ee:a4:e0:7f:54:05:4c:0a:14:92:79:af:60:
                    00:f0:d0:a9:65:73:f0:4b:10:39:f4:1d:2a:d1:10:
                    45:bf:b4:e7:6b:e8:e4:9b:4f:0a:90:21:d4:40:83:
                    a2:80:22:5a:7d:96:c2:05:8b:1a:32:8a:7f:ba:3d:
                    62:d5:24:27:40:94:f5:ad:75:99:01:62:e3:c0:6a:
                    16:21:92:24:6f:c8:ed:8f:c3:de:f7:df:52:6e:af:
                    77:b6:53:9e:9c:4f:40:93:56:35:b6:cd:0b:9b:89:
                    f4:70:09:51:21:6c:a2:81:2b:f7:9b:5f:11:37:1f:
                    83:43:0d:50:a0:84:8b:b5:d4:1a:88:46:c1:aa:b2:
                    56:b5:da:f3:43:9f:4b:2d:49:09:c7:e2:4a:28:f9:
                    9c:1b:37:b7:7a:66:93:96:4c:66:4d:7c:a2:80:76:
                    e1:37:be:a7:88:8b:c8:dc:bb:93:d0:dc:4b:e8:d5:
                    88:56:d3:f3:83:64:8f:67:84:ec:0f:b5:f0:be:6d:
                    c9:cf:34:55:87:1d:7c:ea:62:83:6e:bf:4d:31:9f:
                    4e:4a:43:d8:a4:bd:8e:8a:41:21:5d:58:d1:58:49:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:49:F1:B0:6E:AE:69:F8:63:D8:C9:6E:C4:C1:A1:25:4B:1F:6E:30
            X509v3 Authority Key Identifier:
                keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3f:55:a9:03:72:f3:2c:6b:c8:46:61:39:ee:75:a5:d5:87:
         f0:c2:cb:df:c2:79:90:82:4b:11:c3:d1:ab:4d:01:d9:41:98:
         57:16:6f:0d:83:1a:81:29:09:93:4b:8e:82:71:9e:ce:bd:3d:
         14:cd:cb:cd:e3:44:a4:f0:ad:07:f2:9d:c3:11:de:2e:d7:e6:
         c6:95:32:b5:2d:1a:2a:ba:97:a5:24:26:86:4e:ab:40:2f:ca:
         a8:f3:16:84:4e:28:79:ff:49:f9:bc:bf:31:e5:52:ce:ff:42:
         42:15:e6:e9:66:e0:7e:a3:df:45:f8:bc:d0:1c:09:71:79:20:
         8b:68:69:a2:b6:a2:75:0a:14:9f:81:01:d1:0c:ae:f4:71:bf:
         65:66:08:2f:31:bd:12:a9:e5:a4:b7:65:0d:e4:ad:5d:25:e4:
         cc:d5:35:10:61:ba:5a:77:22:5e:1c:e5:3d:15:94:ae:d3:a2:
         be:44:0f:0b:80:e9:f7:b1:d6:d6:f9:f3:2b:6c:22:e1:3a:f4:
         6c:de:bf:f1:d9:d8:ee:63:4a:0c:58:20:07:b4:76:0a:16:c5:
         81:de:e0:f7:a0:26:fc:03:1f:50:a1:7b:68:e1:cd:26:bb:9d:
         4c:c7:98:c7:07:bc:21:90:b1:b3:4f:de:75:03:fe:64:88:75:
         19:9d:fa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:47:22 2025 by rpki-client