This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
File:                     JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json)
Hash identifier:          40O3RoI9XGCc5h86Ze0q2LnwZD0SqRyB4NyzLZutQpc=
Subject key identifier:   C3:FD:43:C1:41:43:02:FD:66:F2:41:C8:71:52:A2:14:72:81:4A:8A
Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
Certificate issuer:       /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Certificate serial:       187A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
Manifest number:          185B
Signing time:             Sun 28 Dec 2025 16:17:38 +0000
Manifest this update:     Sun 28 Dec 2025 16:17:38 +0000
Manifest next update:     Sun 04 Jan 2026 16:17:38 +0000
Files and hashes:         1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: YSexZ6yxvNFQipPA2KeomOVPUNHV/dMGmExXUIhH01A=)
                          2: FCD95792C21111E792F4785EC4F9AE02.roa (hash: BMiJfLefqeIikFuUPpDExSa3UsAxL9dNs6RKiD88uUQ=)
                          3: 1E76B980C4BA11E78E05EE70C4F9AE02.roa (hash: d7zKEGh0lk8izfNZY0knPSNCV7Y5mFUGLfE2IWUfUWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
                          rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 16:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6266 (0x187a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
        Validity
            Not Before: Dec 28 16:17:38 2025 GMT
            Not After : Jan  4 16:17:38 2026 GMT
        Subject: CN=69515822-6110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:d5:50:56:8a:74:e1:cc:d3:02:90:d4:0d:
                    82:d1:57:69:de:79:f5:21:74:6d:6a:2a:31:ef:ae:
                    21:9d:ad:e4:1b:33:be:07:c5:69:93:b7:6e:52:d3:
                    07:08:0f:bd:83:3b:14:d4:c5:c8:56:6c:3a:27:9d:
                    ad:ac:d5:6f:5f:fd:32:92:f0:04:99:d0:03:db:de:
                    59:5f:6a:34:4c:d2:79:05:11:48:4b:b8:1a:70:0c:
                    94:9e:d4:72:a5:ab:10:9c:1e:8e:68:4c:d1:67:cd:
                    c6:70:c9:c0:0b:9a:a9:fc:37:b4:70:db:9f:ef:b1:
                    a2:97:19:28:c0:c1:27:b3:a3:98:3e:1e:e8:36:b7:
                    b4:8c:54:cd:81:ad:ba:77:2a:48:0f:5a:2c:d5:41:
                    92:85:af:e2:54:9d:ea:23:d4:3c:4b:ce:a6:f2:57:
                    f3:02:3a:70:9a:f3:b0:b7:ac:84:5c:66:6c:cf:a9:
                    a8:58:69:1e:41:88:35:a0:22:f3:16:de:3f:47:76:
                    19:d5:8f:14:b0:db:0c:1f:e7:9d:d9:70:f2:97:09:
                    40:6f:a0:4a:9b:38:f2:a2:a3:bf:55:90:d5:09:96:
                    c6:7f:c8:72:1f:dd:25:03:17:9f:71:f6:fb:55:d2:
                    e1:73:5a:c2:c5:f5:7e:9b:fc:6f:d9:4b:b0:5d:2c:
                    75:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FD:43:C1:41:43:02:FD:66:F2:41:C8:71:52:A2:14:72:81:4A:8A
            X509v3 Authority Key Identifier:
                keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:94:f6:e7:66:31:6f:47:c4:17:65:f0:99:9e:12:d3:38:4a:
         ff:2d:7a:98:d8:67:b1:99:71:0d:45:e8:0c:ae:dc:87:75:f1:
         64:ba:b0:08:78:62:a2:c7:48:55:12:1d:dd:6d:17:44:5c:e2:
         c7:b6:2c:f6:3d:7d:87:3d:8e:f5:61:35:3e:c1:43:95:52:cc:
         dd:53:43:c2:b8:80:50:8d:0c:f3:61:46:f4:1e:13:8c:e1:a7:
         68:25:e8:d5:af:13:ba:d9:9d:03:32:1c:6b:a8:50:46:1b:dc:
         30:c6:37:23:8c:9b:68:51:0f:dc:66:c3:19:cf:78:5d:5d:54:
         43:d9:41:8a:12:72:89:41:ef:7f:d3:5b:7d:57:a3:05:c3:00:
         e1:9b:2d:77:3c:09:28:a3:d4:0d:9e:b6:d7:ae:ad:1f:2e:10:
         e5:f3:1b:ff:d3:87:58:98:db:58:1e:46:d1:b6:ff:1d:a2:92:
         84:9e:c5:98:3c:c7:1a:b7:a1:41:14:50:9a:aa:a4:83:74:20:
         71:e4:40:5a:ad:dc:42:e1:6c:fb:64:65:f7:1b:eb:11:64:2a:
         d8:36:be:28:6d:dd:df:5b:b4:a9:d3:55:fb:64:b6:6c:db:7b:
         cc:55:37:58:5b:88:b8:2d:44:d9:00:7b:9d:d3:f6:9a:09:d6:
         56:03:8f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 08:25:43 2025 by rpki-client