This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
File:                     jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft (raw, json)
Hash identifier:          fFbg/7c1GM8f2MrNeST3rk8Og+fuN4ZFCzhuGhbXL/A=
Subject key identifier:   13:D3:43:AA:35:15:4F:2A:2F:DE:65:EB:7E:9B:3D:F8:7F:7E:00:3F
Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55
Certificate issuer:       /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
Manifest number:          A6
Signing time:             Tue 23 Dec 2025 05:11:26 +0000
Manifest this update:     Tue 23 Dec 2025 05:11:26 +0000
Manifest next update:     Tue 30 Dec 2025 05:11:26 +0000
Files and hashes:         1: jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl (hash: zFgf8lQcQtfmwFJuPZYU2H13LvdabW8Nv9iSesXLsrM=)
                          2: 6C22134AE21D11EFA8E87E7DC4F9AE02.roa (hash: L3zDn/PUeHX+V2qmelbUl0Crjpgwx3ngnDdVfBLcBmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl
                          rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
        Validity
            Not Before: Dec 23 05:11:26 2025 GMT
            Not After : Dec 30 05:11:26 2025 GMT
        Subject: CN=694a247e-ed01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:80:96:1b:b8:06:fe:25:e0:3e:76:7c:2c:
                    c2:0a:b7:46:fc:54:19:a1:8e:25:19:97:b7:ac:09:
                    0e:69:60:ca:0e:e4:23:5d:37:9a:96:09:63:2d:86:
                    f4:2d:82:ac:0b:a4:b4:21:a6:d8:f4:63:22:ec:72:
                    8c:31:1b:bd:8c:69:fe:db:7f:32:64:38:a8:1f:ff:
                    e8:a1:14:2a:18:2b:9e:79:01:ba:a2:06:d8:f6:89:
                    4c:a1:53:60:e7:e4:66:59:00:cc:a6:9c:09:fd:36:
                    37:06:ba:3f:d9:7a:69:55:60:2b:8e:16:28:1a:47:
                    5f:e3:05:8e:2c:ec:ea:b8:a0:bd:f4:2b:fc:c2:cf:
                    9c:9b:94:d9:7a:a3:c9:f5:3c:cd:6b:18:b3:03:5c:
                    24:30:7f:d9:90:e4:03:cd:05:41:c4:61:f4:d3:9c:
                    95:b4:bb:e0:30:be:08:02:12:b3:eb:90:6e:6a:82:
                    80:f5:e8:ab:62:0f:29:7e:94:67:86:7e:03:0c:a4:
                    61:62:c4:e1:2e:36:c2:ad:d7:c7:21:26:e7:b2:92:
                    54:d5:53:0b:12:4b:db:4c:a2:1a:37:49:57:7a:b3:
                    8b:f8:71:8f:b1:bb:fa:de:e1:03:2d:6d:6d:41:65:
                    1f:26:bc:03:b8:0a:d6:89:16:68:e7:3b:55:fe:c8:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D3:43:AA:35:15:4F:2A:2F:DE:65:EB:7E:9B:3D:F8:7F:7E:00:3F
            X509v3 Authority Key Identifier:
                keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fd:db:1a:8c:c8:96:02:c0:3f:24:3b:3a:45:43:b5:d8:43:
         bc:29:0b:ce:4c:05:67:fe:9f:ab:28:f1:b6:8e:49:e9:52:31:
         57:3a:5b:05:58:ec:0d:2f:47:4a:6e:36:5d:f5:c6:79:b2:89:
         e3:65:20:db:78:57:e7:a6:5b:66:07:88:cd:11:99:91:cb:00:
         80:0f:a7:8a:c2:a2:54:ad:b4:af:47:51:4b:b6:b4:ae:0d:0f:
         ab:14:86:e8:47:f1:a7:bf:79:2e:a9:6d:76:32:9c:88:a1:be:
         83:cd:2a:aa:f1:89:e7:47:63:53:f9:ca:1f:d8:dd:87:c3:07:
         bb:ab:be:8c:8c:1c:57:17:51:c4:84:8b:f2:fd:1b:54:47:a1:
         f3:21:61:35:be:e5:13:04:96:4f:d5:f7:bc:a0:d4:9f:28:1b:
         af:22:f9:c3:8d:a5:0f:bf:24:ca:eb:6e:53:05:ce:4c:0e:0f:
         96:18:7e:35:43:7d:25:87:39:f8:11:f1:c8:28:e3:fe:6a:83:
         30:3c:a7:79:95:c7:fd:be:9b:d0:98:af:f7:39:11:40:19:c8:
         2f:b2:79:2b:a5:1f:ca:52:8f:bd:7d:e8:14:17:b3:0a:27:71:
         8d:7b:ea:92:95:7a:b0:19:d5:c3:55:98:64:5f:98:2f:65:9c:
         db:88:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:17:18 2025 by rpki-client