This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
File:                     JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json)
Hash identifier:          ty5Pz/MmqQbKCLE+9MRfZMIQrAUqOFET//R75ZzpOEY=
Subject key identifier:   65:54:D3:C1:9E:B7:D8:54:C0:13:C0:DA:CE:6F:75:D2:E0:9B:33:D5
Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
Certificate issuer:       /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
Certificate serial:       0D1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
Manifest number:          0D15
Signing time:             Sat 24 Jan 2026 17:41:39 +0000
Manifest this update:     Sat 24 Jan 2026 17:41:38 +0000
Manifest next update:     Sat 31 Jan 2026 17:41:38 +0000
Files and hashes:         1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: xSN1k8f8y3mVD7JwZ1Xy4NpkLonkjoYC8V4bnZsTto0=)
                          2: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (hash: 70+Nv3dW1TlRVjSfYz9QWyUrypqW/MlYCw/LOgFBLs8=)
                          3: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: V73FrlCjTxW3+OFN4WSdzYBtRymf106sXN4X73EoNpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3358 (0xd1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
        Validity
            Not Before: Jan 24 17:41:38 2026 GMT
            Not After : Jan 31 17:41:38 2026 GMT
        Subject: CN=69750453-9b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:27:f2:d2:cb:a4:6a:62:e5:57:59:b4:f0:
                    5b:6c:53:87:86:59:18:39:a0:37:d6:dd:f1:4d:ed:
                    41:d7:ef:5f:b1:a4:e3:34:c2:83:3e:37:d8:3c:38:
                    4a:47:90:b0:cb:7a:2b:9f:1f:dd:dd:83:1a:ce:1b:
                    5f:85:c7:b1:d7:08:f9:8f:18:80:4b:56:17:ea:79:
                    3b:38:30:8f:53:88:cf:46:4e:33:ac:48:53:f5:66:
                    5a:14:7d:e6:a6:fc:cc:79:3a:29:57:a4:1d:5d:96:
                    ed:56:43:17:ec:6d:f0:c0:ca:c1:7d:6e:84:cb:dc:
                    4e:f7:50:3d:43:a1:8b:f1:ce:45:c8:3c:aa:a8:a1:
                    73:ea:8a:aa:50:f0:a5:68:71:5c:57:b3:68:49:dd:
                    f9:85:31:57:4f:78:17:39:63:d9:aa:5a:7c:bf:dc:
                    c7:ae:26:f9:65:95:f7:90:61:1e:f3:06:82:2c:ab:
                    76:9d:c3:a9:3c:1a:7e:8f:58:e9:1c:9d:8b:d6:ed:
                    96:0d:45:56:f1:15:8a:fb:12:b4:d1:a9:ea:25:88:
                    08:29:4f:65:d3:7b:e6:33:17:c0:40:b1:cb:00:09:
                    29:18:57:7a:71:13:3b:42:be:30:b7:78:64:2f:50:
                    ee:fe:1f:a9:ba:a6:e1:fe:e9:5e:8c:93:c6:9c:a1:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:54:D3:C1:9E:B7:D8:54:C0:13:C0:DA:CE:6F:75:D2:E0:9B:33:D5
            X509v3 Authority Key Identifier:
                keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b0:cc:f1:41:6e:6a:c2:3d:f0:9f:a5:fa:47:1b:78:81:a2:
         e6:10:71:21:e4:b7:18:4f:fe:2b:44:c5:57:13:93:d4:c8:48:
         d6:b2:3b:b9:29:b8:da:82:09:ad:de:5f:f2:57:e3:22:48:d5:
         9d:f3:25:33:98:8c:75:52:1a:35:91:77:9a:99:2a:fe:fc:13:
         9e:60:c8:0a:07:c8:28:23:ed:7a:a6:13:c3:26:31:72:49:63:
         33:7b:27:f7:e2:3c:6c:b0:b2:1b:6c:fd:b5:21:55:d2:e5:a7:
         0d:bd:18:98:fe:2e:ae:bf:e0:28:bf:1d:6d:6a:42:f0:7a:45:
         fc:8c:93:f9:47:14:25:6a:04:4d:0b:d2:39:91:81:6d:03:0b:
         36:9b:bb:a6:1d:f2:b8:d8:2d:45:3e:63:ea:73:91:a8:2b:6b:
         ef:97:bd:87:67:e2:2a:de:b1:15:81:c3:9b:48:5f:df:a5:5f:
         db:10:a2:98:ab:83:87:7b:dc:98:ed:40:c8:4d:52:60:68:46:
         98:9f:e7:0e:53:93:69:fe:45:bf:68:c7:2b:de:7e:ca:6b:91:
         38:03:99:ab:31:13:55:1b:17:b4:d4:2d:f6:34:93:5d:f9:20:
         b2:b2:0f:c3:e5:0a:bd:3e:d8:45:3b:18:68:89:c6:90:b8:48:
         a4:27:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:29:22 2026 by rpki-client