This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
File:                     JVXtObFvbItoFdVBudg2K50_2Co.mft (raw, json)
Hash identifier:          kfsK9KQvVh2WO4uej+hHKXk8lneeBPX9p+4z8VaS7MQ=
Subject key identifier:   74:EE:A1:F3:A2:E8:EB:BB:26:41:68:6A:D5:F4:00:EC:92:36:46:EC
Authority key identifier: 25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A
Certificate issuer:       /CN=A91ED836/serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
Manifest number:          0258
Signing time:             Sun 25 Jan 2026 00:58:55 +0000
Manifest this update:     Sun 25 Jan 2026 00:58:54 +0000
Manifest next update:     Sun 01 Feb 2026 00:58:54 +0000
Files and hashes:         1: JVXtObFvbItoFdVBudg2K50_2Co.crl (hash: nqDJbHV7Xw4adCrlGc0zrsSNuktS0nECjZ2aBg4p7fk=)
                          2: B37444BA7B3711ED9820E681C4F9AE02.roa (hash: 7ppLuOlTNhD8QWBy8SytuiXKtRXaGC8pqHRZQYiLBxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl
                          rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED836, serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
        Validity
            Not Before: Jan 25 00:58:54 2026 GMT
            Not After : Feb  1 00:58:54 2026 GMT
        Subject: CN=69756acf-30b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:75:b9:84:14:a3:c9:a2:fa:bb:93:7c:26:
                    bd:5f:79:e3:d5:0f:26:21:3d:e1:f5:e8:46:0a:59:
                    39:1b:f4:bd:44:20:e2:e1:85:06:96:1f:7a:77:2a:
                    c7:9b:9d:3c:72:1b:4f:42:01:13:b4:bb:0a:d7:67:
                    d0:2e:7e:a5:f0:d7:85:0d:e5:ba:78:9d:4e:28:cb:
                    71:7b:4f:00:d6:cd:e4:cc:9c:86:8d:d6:02:f3:3a:
                    fa:13:68:00:ec:88:77:9b:09:44:7d:bc:26:40:8b:
                    26:23:e2:65:53:46:ee:4c:80:a5:6c:14:04:57:6e:
                    94:7d:e3:86:11:07:25:c8:11:83:f3:3d:f2:d2:5f:
                    e9:0e:1b:63:fe:7b:6a:77:91:d2:2c:f0:bb:a6:6b:
                    95:27:4a:83:c9:f8:12:e2:2d:20:17:96:81:39:ad:
                    47:d5:1d:41:70:3d:04:3b:a2:3d:59:b4:b5:d8:c7:
                    f9:99:0c:2c:a1:a1:6c:53:2a:33:cc:f0:1f:66:d7:
                    93:b5:f9:6f:64:5a:da:8f:f4:0b:ad:74:6f:a9:62:
                    d6:36:cd:e8:44:50:7c:9a:63:3d:15:cc:a1:56:77:
                    53:9a:84:b9:d0:da:fb:52:2c:7b:70:54:59:79:fc:
                    2b:87:6f:1e:3c:30:c1:30:14:42:e1:b4:a7:be:14:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EE:A1:F3:A2:E8:EB:BB:26:41:68:6A:D5:F4:00:EC:92:36:46:EC
            X509v3 Authority Key Identifier:
                keyid:25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:35:ba:69:04:bf:db:9b:15:a5:f3:c5:50:69:7c:07:4c:ad:
         0b:7f:93:59:ce:dd:b1:8d:93:2d:2b:25:c4:cf:7f:10:05:a6:
         8c:21:7b:0f:73:1b:db:bb:a1:5b:00:d4:24:77:05:60:23:a7:
         75:db:18:26:e1:c0:04:96:1b:91:c2:21:fa:e1:a8:23:5f:dd:
         28:de:56:6b:c5:ed:5e:ae:39:77:10:16:f8:a6:eb:78:e6:e2:
         2c:ac:99:ab:2c:7e:b7:a3:a9:60:6d:9a:47:7a:3b:23:fd:93:
         b5:d4:94:5b:c2:f5:9d:b3:7c:d0:b9:00:8a:f2:e8:d9:0b:52:
         03:35:fc:e3:7b:b2:6c:0f:96:d9:b1:f5:85:fe:dc:b7:e0:4e:
         36:7e:55:69:3e:69:12:81:1e:84:e1:51:01:e4:6c:f8:0f:44:
         84:bd:f3:f2:7e:76:a2:23:f5:1e:cb:a5:74:94:2f:f3:e8:9f:
         fc:31:d4:e9:05:c4:a8:71:1a:6b:af:9d:37:ae:8e:ff:e0:21:
         73:67:99:c3:36:92:38:72:b2:cb:d6:9e:75:86:27:29:64:b5:
         76:ee:8e:a7:84:7c:da:ef:41:a2:20:8c:42:64:9a:29:69:ab:
         2f:4c:6d:f5:72:91:2f:be:45:1f:2c:b8:be:2e:49:64:07:d4:
         2f:6f:58:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RUQ4MzYxMTAvBgNVBAUTKDI1NTVFRDM5QjE2RjZDOEI2ODE1RDU0MUI5RDgzNjJC
OUQzRkQ4MkEwHhcNMjYwMTI1MDA1ODU0WhcNMjYwMjAxMDA1ODU0WjAYMRYwFAYD
VQQDDA02OTc1NmFjZi0zMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqhV1uYQUo8mi+ruTfCa9X3nj1Q8mIT3h9ehGClk5G/S9RCDi4YUGlh96dyrH
m508chtPQgETtLsK12fQLn6l8NeFDeW6eJ1OKMtxe08A1s3kzJyGjdYC8zr6E2gA
7Ih3mwlEfbwmQIsmI+JlU0buTIClbBQEV26UfeOGEQclyBGD8z3y0l/pDhtj/ntq
d5HSLPC7pmuVJ0qDyfgS4i0gF5aBOa1H1R1BcD0EO6I9WbS12Mf5mQwsoaFsUyoz
zPAfZteTtflvZFraj/QLrXRvqWLWNs3oRFB8mmM9FcyhVndTmoS50Nr7Uix7cFRZ
efwrh28ePDDBMBRC4bSnvhTy2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTuofOi
6Ou7JkFoatX0AOySNkbsMB8GA1UdIwQYMBaAFCVV7Tmxb2yLaBXVQbnYNiudP9gq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDgzNi8zMjFGODk0MDY5
MzIxMUVEODg3Q0QyN0FDNEY5QUUwMi9KVlh0T2JGdmJJdG9GZFZCdWRnMks1MF8y
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pWWHRPYkZ2Ykl0b0ZkVkJ1ZGcySzUwXzJDby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDgzNi8zMjFGODk0MDY5MzIxMUVEODg3Q0QyN0FDNEY5QUUwMi9KVlh0T2JGdmJJ
dG9GZFZCdWRnMks1MF8yQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfNbppBL/bmxWl88VQaXwHTK0Lf5NZzt2xjZMtKyXEz38QBaaMIXsP
cxvbu6FbANQkdwVgI6d12xgm4cAElhuRwiH64agjX90o3lZrxe1erjl3EBb4put4
5uIsrJmrLH63o6lgbZpHejsj/ZO11JRbwvWds3zQuQCK8ujZC1IDNfzje7JsD5bZ
sfWF/ty34E42flVpPmkSgR6E4VEB5Gz4D0SEvfPyfnaiI/Uey6V0lC/z6J/8MdTp
BcSocRprr503ro7/4CFzZ5nDNpI4crLL1p51hicpZLV27o6nhHza70GiIIxCZJop
aasvTG31cpEvvkUfLLi+LklkB9Qvb1gR
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:08:53 2026 by rpki-client