This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
File:                     JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json)
Hash identifier:          luuRfg7wkXgAboiD2aBFml1oaTwyohPZFnX1hMmOk7o=
Subject key identifier:   DF:3C:DB:03:42:53:72:B8:D9:38:A5:1C:84:69:B3:2F:50:3D:B8:8D
Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA
Certificate issuer:       /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
Manifest number:          B1
Signing time:             Thu 25 Dec 2025 05:06:24 +0000
Manifest this update:     Thu 25 Dec 2025 05:06:24 +0000
Manifest next update:     Thu 01 Jan 2026 05:06:24 +0000
Files and hashes:         1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: 8wJHFWKW2PeIoP4ItKc/5e4Xus3N/Qov0TvIywMJ6OY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 05:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
        Validity
            Not Before: Dec 25 05:06:24 2025 GMT
            Not After : Jan  1 05:06:24 2026 GMT
        Subject: CN=694cc650-91ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:60:8c:de:52:f1:f8:bd:ec:1a:22:84:08:
                    38:e6:e3:44:b6:a4:b5:2a:61:57:79:de:e2:bd:02:
                    9e:80:22:16:b8:df:f3:a6:a2:79:d9:10:a2:f3:dc:
                    12:ed:3e:2e:b7:96:e0:c8:d4:d3:91:30:f1:d6:57:
                    03:8f:df:ba:ba:e1:b5:e4:43:2e:54:2b:26:55:3f:
                    ff:16:d6:7e:36:58:1a:67:9f:9a:cb:3c:c6:91:ff:
                    30:5a:53:b8:58:37:51:7e:13:28:5f:60:de:d8:0b:
                    f0:87:4f:ca:71:47:30:8b:b9:ba:6e:f1:bb:58:76:
                    b5:bb:29:10:90:87:cd:c9:42:89:b5:38:25:eb:35:
                    42:89:fa:98:cc:3e:57:8f:63:c0:ee:47:4c:3b:52:
                    7a:31:00:33:09:80:e3:72:75:42:f7:f3:b6:2f:05:
                    b8:b1:f9:04:53:68:6e:0a:0c:99:3c:c5:93:66:a9:
                    f2:e7:74:dd:40:6e:22:d0:c0:62:88:65:cf:29:9b:
                    86:2a:de:a6:b5:ca:9b:4b:ee:51:9f:76:9b:3b:b5:
                    49:63:2e:d5:70:40:9c:73:1b:d7:35:3b:b5:27:b8:
                    0b:e3:65:1d:10:99:e5:d8:92:e0:93:1d:b8:21:4a:
                    30:12:6e:14:be:8e:89:02:92:ee:7b:59:c5:1d:18:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3C:DB:03:42:53:72:B8:D9:38:A5:1C:84:69:B3:2F:50:3D:B8:8D
            X509v3 Authority Key Identifier:
                keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:49:ba:26:93:0a:eb:1b:c3:6f:33:2c:78:0d:9a:e5:99:a1:
         9f:ea:dc:5b:27:b9:17:14:f7:16:85:ca:40:e4:4a:a5:a7:58:
         01:11:f1:94:20:fb:9c:38:04:e5:45:b4:f0:ce:11:8d:d3:4a:
         f2:cd:aa:9c:60:05:68:3c:aa:69:74:71:38:cb:42:2b:fc:2a:
         12:34:1f:32:11:b6:8c:93:ca:08:a6:12:a3:0c:39:d7:f0:28:
         19:29:48:f6:da:f1:04:ab:83:e0:02:9b:d5:30:85:65:17:0d:
         4c:6c:73:cc:62:d0:45:d5:96:8d:9a:96:00:d8:c1:92:b2:01:
         34:16:4a:73:e8:46:23:ba:29:f1:61:e6:0d:a3:a0:94:96:18:
         ff:6a:b0:aa:f9:fd:99:fd:21:fc:5d:06:8c:0e:19:85:b2:11:
         1f:f4:36:ab:36:fd:42:06:b5:7d:09:26:d5:7b:7f:34:81:c6:
         b1:db:5b:c2:f7:64:68:5a:5e:75:8c:91:1f:f0:0d:fb:58:e8:
         eb:54:ea:4b:5b:22:f4:18:d2:bc:89:62:24:9d:f2:9b:d9:08:
         13:ec:93:5b:c2:d7:72:81:7d:58:7c:43:4f:92:e8:4d:e0:84:
         98:37:4a:5c:fd:af:fe:78:5f:9a:c8:25:4e:f8:46:33:71:e2:
         46:d8:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 11:15:16 2025 by rpki-client