This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
File:                     JbYXi6T4b_C18lUXgJvfINlGjmk.mft (raw, json)
Hash identifier:          WiIDoAi2g7/XgQOAVjpVbCaV/gjOdZYon2GSkKixiWk=
Subject key identifier:   B7:50:BE:DB:06:8B:05:9A:E4:6B:14:C6:66:22:47:0C:F0:0B:15:F0
Authority key identifier: 25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69
Certificate issuer:       /CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69
Certificate serial:       06D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
Manifest number:          06CF
Signing time:             Sat 10 Jan 2026 21:26:40 +0000
Manifest this update:     Sat 10 Jan 2026 21:26:39 +0000
Manifest next update:     Sat 17 Jan 2026 21:26:39 +0000
Files and hashes:         1: JbYXi6T4b_C18lUXgJvfINlGjmk.crl (hash: 8NxHejNDpZi9yEnmbJs0vd8R5NoXv/MARoI85aoNyA4=)
                          2: A74155FC835911EBBAB4A13CC4F9AE02.roa (hash: IYSv1L8CrFfVZhb7vVnKxPTFDHznaeEotmtw/x51wYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl
                          rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 21:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748 (0x6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114B57, serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69
        Validity
            Not Before: Jan 10 21:26:39 2026 GMT
            Not After : Jan 17 21:26:39 2026 GMT
        Subject: CN=6962c410-2e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:ea:10:1a:ec:83:5d:bb:b6:ee:0c:ab:dd:
                    1a:91:f2:4c:bd:84:b6:7c:2f:da:f5:e0:09:6c:84:
                    26:fe:2d:70:bf:62:d8:8c:4f:03:07:91:95:16:a6:
                    26:6c:f2:a3:de:92:ce:2b:9e:a1:fe:f6:b6:f6:4c:
                    0e:c4:c8:0a:a5:28:82:67:99:9d:c7:f3:b1:1b:98:
                    85:0b:13:41:52:55:4a:04:23:c4:20:cc:3d:44:b2:
                    b2:e8:e1:85:68:84:99:70:b8:57:5c:9f:ca:f5:e6:
                    41:aa:0b:17:a8:13:d2:e5:2d:58:37:f5:42:10:4e:
                    1d:cd:79:e6:13:43:e7:a3:07:a4:4c:28:c9:b9:0a:
                    94:c0:63:ab:52:4b:ea:a9:c0:ef:9f:94:b9:c8:a2:
                    20:aa:fd:ff:61:4e:3f:55:52:cf:22:14:4f:b5:dc:
                    17:71:d9:7c:e2:b1:29:6e:b1:d9:64:5f:d4:31:d6:
                    0c:bb:18:b5:15:f5:c6:cd:60:f6:80:b7:c3:be:3b:
                    2f:6e:ea:2a:c0:95:83:d1:9c:4a:56:bd:1e:bd:fe:
                    a8:b6:0f:c9:a8:d9:e2:a4:68:5e:43:db:46:93:a8:
                    f8:a2:d1:cf:be:53:88:0f:79:8f:2f:d3:9e:b0:16:
                    c7:07:81:4d:d8:4f:a4:ef:56:a6:b5:9e:26:5a:8a:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:50:BE:DB:06:8B:05:9A:E4:6B:14:C6:66:22:47:0C:F0:0B:15:F0
            X509v3 Authority Key Identifier:
                keyid:25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9e:be:d0:a7:1d:92:4d:fa:c9:56:0a:14:35:ad:35:ad:9f:
         66:c0:58:48:29:ac:be:9f:fd:d2:5f:3b:60:dc:c5:83:de:78:
         68:af:28:5f:59:d0:5e:6f:85:60:a9:49:98:9c:7b:5c:e0:d5:
         56:be:72:62:78:07:60:95:27:b0:7c:26:5b:37:00:7a:e6:6f:
         d4:76:f4:12:5a:64:b0:6f:a9:0b:7e:82:a6:6b:36:b5:83:0f:
         03:03:46:a1:f4:1e:ad:4c:2e:b2:a6:be:23:b8:7c:15:c0:db:
         86:69:ef:c2:ee:ac:13:92:3c:7b:87:c1:08:e8:18:61:5f:9f:
         e7:f5:db:56:88:c5:f3:02:d3:00:99:ea:34:15:cc:86:d4:7f:
         a3:1f:a0:76:83:4f:ff:6d:d9:44:19:eb:b7:9c:a9:1f:9e:7c:
         97:7c:97:15:f6:57:ac:fd:62:a2:a1:7a:36:5d:24:5f:6a:45:
         a5:1a:46:11:b0:42:d4:6c:dc:cc:dc:4d:c2:b2:69:f6:41:a2:
         cf:a6:c6:7e:1f:c1:66:f8:e0:08:68:7f:90:28:7e:4d:4b:08:
         fa:4a:c6:0e:6d:88:62:d4:ed:79:40:22:62:ca:b8:97:a7:48:
         20:34:d1:85:8d:8e:e1:16:2b:1d:e4:43:85:75:08:1f:d4:c2:
         fd:f6:a7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:58:53 2026 by rpki-client