This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
File:                     JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json)
Hash identifier:          o8io6hN3V/4/7Juhi9d+T4TRi+rrFSe3N8Xnh6FwcGM=
Subject key identifier:   B2:C1:DB:46:66:E9:21:9C:12:7B:9B:7C:E7:3C:FE:00:12:CE:77:B8
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Certificate issuer:       /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial:       2F83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
Manifest number:          2F6F
Signing time:             Sat 06 Dec 2025 15:16:47 +0000
Manifest this update:     Sat 06 Dec 2025 15:16:46 +0000
Manifest next update:     Sat 13 Dec 2025 15:16:46 +0000
Files and hashes:         1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: XuOoD0bgsgqbCaI6kvb3/XH3OaTvbkOCu8VbdlzCS9s=)
                          2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: Aob8ZJl5qzL6UphkGnJrV6N3zUVz/TL17yzbEpPEPlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12163 (0x2f83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
        Validity
            Not Before: Dec  6 15:16:46 2025 GMT
            Not After : Dec 13 15:16:46 2025 GMT
        Subject: CN=693448de-5b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2b:76:ac:3f:ab:3e:32:b6:3d:6f:29:e8:0f:
                    fb:c7:1f:3c:96:de:a8:04:b1:f7:f4:31:35:5b:7b:
                    eb:94:45:6e:57:fb:28:8d:56:ff:fa:93:7e:d3:31:
                    0d:b1:01:11:4c:17:15:ac:a2:54:58:1e:46:94:97:
                    1e:f4:69:bc:61:41:80:ec:6f:3c:c1:96:22:ff:6d:
                    2e:5f:75:14:3b:4d:be:cd:91:d9:20:43:92:e5:5d:
                    83:fb:c1:a5:cb:31:fb:20:21:93:ae:d2:98:30:8a:
                    8f:d4:b1:b4:66:cb:04:b5:cf:d8:68:87:af:ca:6f:
                    22:ea:48:97:1b:52:04:75:8f:e8:2a:ed:a9:63:a2:
                    b9:d5:28:c2:2f:59:12:42:28:56:0d:7f:16:77:78:
                    3f:15:8c:20:16:9f:e6:05:e8:10:84:32:94:e0:5d:
                    fb:14:c9:99:ad:9a:59:ec:f7:33:75:8e:ef:43:a2:
                    90:ab:e1:a0:2f:7b:1a:0e:eb:b5:66:58:66:4a:ef:
                    c4:a6:ea:6f:c4:fe:06:c2:17:06:13:40:50:c6:58:
                    72:a3:c2:e0:10:82:8d:01:86:62:71:ad:0f:4b:2b:
                    ad:d4:ad:a3:23:07:78:12:5d:d3:64:a8:46:e9:06:
                    93:45:d1:8c:6a:7c:a3:9b:1c:b0:78:a1:cf:88:ac:
                    3d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C1:DB:46:66:E9:21:9C:12:7B:9B:7C:E7:3C:FE:00:12:CE:77:B8
            X509v3 Authority Key Identifier:
                keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:59:27:48:33:4c:ef:1e:41:9c:8b:f8:cb:b7:75:4e:06:a0:
         52:ff:42:02:2f:81:d5:0c:46:5e:0d:cf:ca:5e:5c:06:7b:37:
         df:fd:f9:72:66:20:3f:84:04:ac:9a:a8:69:c9:68:e7:51:f9:
         cc:e2:e7:75:7f:8f:e8:0d:07:07:9f:3d:3e:8b:08:75:28:b6:
         52:96:84:8a:8a:c8:08:fd:b3:4e:cd:41:54:ea:63:96:da:97:
         a3:b5:76:be:34:35:35:98:97:7e:f4:09:41:94:b9:ed:1d:5f:
         28:99:df:a0:09:eb:39:b6:10:d8:30:41:ca:1c:76:12:cb:28:
         1a:82:9b:05:5e:81:8d:0f:72:8a:2c:40:33:1b:ca:0c:ad:58:
         58:1b:4c:13:b7:e0:2d:67:a8:40:1d:c3:50:4d:9b:6d:b4:2d:
         8d:62:8e:72:98:bf:07:60:8d:02:9b:c8:ab:d3:41:ba:2c:aa:
         89:c9:4b:9a:28:85:ed:c8:04:8b:b7:06:a3:e6:7e:05:bf:61:
         cb:8b:c5:90:24:a5:80:55:c6:42:38:21:3a:a2:40:fd:7c:a2:
         a2:9e:a2:8e:13:bc:b8:d6:1c:79:12:e3:3e:b4:9d:f4:83:6e:
         10:c6:d4:bc:c4:99:7b:b5:ec:e0:92:2b:dc:bd:50:93:95:c3:
         1e:d1:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:59:14 2025 by rpki-client