This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
File:                     JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json)
Hash identifier:          FjTTZBqPvITiNYa4fc1qKFabQgNfLoPsFr0f/TIE2gQ=
Subject key identifier:   68:02:10:7F:8D:70:1C:7D:26:F0:44:D0:C6:F3:5D:66:60:C9:6A:09
Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
Certificate issuer:       /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Certificate serial:       0BD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
Manifest number:          0BC5
Signing time:             Sat 06 Dec 2025 18:13:54 +0000
Manifest this update:     Sat 06 Dec 2025 18:13:53 +0000
Manifest next update:     Sat 13 Dec 2025 18:13:53 +0000
Files and hashes:         1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: tBvel4xOHXNvLTovi4p3NFr2e/ySAR/WqEhE6Uit3nw=)
                          2: A540A624378611EABE283384C4F9AE02.roa (hash: ANMKroNAd8SN9uIGuTzwVBbPP9a2iv11Jpq5VopofpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
                          rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3024 (0xbd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
        Validity
            Not Before: Dec  6 18:13:53 2025 GMT
            Not After : Dec 13 18:13:53 2025 GMT
        Subject: CN=69347262-6aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:ec:f5:f4:01:31:d2:f1:66:6b:35:b6:f2:
                    a4:17:9b:82:ae:40:11:a1:ba:74:28:14:07:46:08:
                    7e:d0:47:4b:68:0c:e4:7c:b2:7c:a3:0a:e8:15:6d:
                    89:d6:af:05:d8:f0:72:f0:d9:0a:ce:2c:c9:14:f2:
                    1e:46:ae:65:16:b5:87:35:5d:bb:df:32:51:f1:fc:
                    a4:eb:89:1f:7a:bf:64:59:6d:66:0f:be:a2:1b:a4:
                    4e:71:a6:94:dd:1d:da:c9:24:f1:a6:95:ff:93:1d:
                    4f:35:d6:4e:d3:1a:a9:52:6e:96:3c:ac:bd:23:c9:
                    f0:ab:03:3b:dd:57:7f:0c:ed:f9:c7:0f:30:0f:a5:
                    aa:02:0d:ab:fd:70:21:d7:47:f3:bc:b1:c1:ba:2b:
                    2b:67:56:34:3c:95:78:3b:4b:51:75:fa:19:54:b5:
                    7b:4c:1a:81:90:32:14:d1:c9:c5:43:84:3f:8d:7a:
                    f2:12:86:35:1f:05:a6:9c:82:23:a9:cd:58:4d:5d:
                    a8:07:a8:9f:e0:7c:5e:19:ab:dd:37:0d:19:d8:4b:
                    30:42:60:7f:4b:01:97:55:ae:30:59:c5:f8:6d:fe:
                    de:4c:0e:8c:38:40:eb:41:0a:78:23:fa:94:8e:33:
                    46:4a:bd:e0:09:8f:65:f2:dc:f3:a3:79:43:0b:46:
                    14:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:02:10:7F:8D:70:1C:7D:26:F0:44:D0:C6:F3:5D:66:60:C9:6A:09
            X509v3 Authority Key Identifier:
                keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8b:c7:bd:40:d8:e0:72:c2:7f:a2:4c:5f:9c:43:05:10:82:
         07:e1:94:ab:fa:e5:99:02:d0:10:a8:6c:8e:81:83:c8:b6:36:
         db:e1:d7:61:5e:bc:22:d7:ce:b0:cc:ce:2d:ac:c2:6b:56:a0:
         2b:fb:af:67:ec:8f:54:7f:3a:33:dc:18:1e:65:8a:93:04:7b:
         f2:a4:8d:85:24:d2:90:c7:64:47:a1:10:01:22:ab:bf:5a:79:
         44:29:ce:27:13:3d:4c:be:c8:ee:97:d2:e5:77:12:ed:a4:fd:
         43:82:db:79:5c:d3:6a:12:78:70:13:25:15:f1:7a:bc:90:d9:
         12:10:d3:44:a4:87:08:1c:96:0f:1d:20:de:19:62:9e:5d:28:
         07:33:0e:e8:fe:ba:6e:ce:37:6c:7e:de:ec:9b:04:6d:87:65:
         7b:ea:00:49:79:1e:2c:78:67:d2:ff:6a:86:84:e1:60:a0:9f:
         91:49:b8:20:2e:bd:1e:d8:a1:34:54:09:00:65:66:39:f0:c0:
         6a:7e:4f:8b:21:22:a3:25:a3:d2:19:76:d1:ff:91:c2:1d:d8:
         6a:2b:83:cd:9a:b2:52:0d:90:4d:97:7b:8a:39:49:e5:48:7a:
         c4:62:a3:0a:40:65:5d:40:34:93:f5:5a:6d:74:75:fe:5c:23:
         57:fc:6e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:38 2025 by rpki-client