This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
File:                     Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json)
Hash identifier:          kBKchJxg5UfVNA/xXCks/PnZHN5Da76uq98sUut6bCQ=
Subject key identifier:   29:CA:16:EF:41:D0:74:4C:A5:97:25:CB:33:97:D8:9A:42:64:3A:E4
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Certificate issuer:       /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial:       0603
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
Manifest number:          05F9
Signing time:             Wed 31 Dec 2025 22:25:52 +0000
Manifest this update:     Wed 31 Dec 2025 22:25:52 +0000
Manifest next update:     Wed 07 Jan 2026 22:25:52 +0000
Files and hashes:         1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: rb8nW+/vu4CDbeyfKtEGY998+/MjG02dWqOAl9XbGb4=)
                          2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: GHWxrMyj8cTLBR3x3Zxqpb0ny9iM0klScYyqOL/kuUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
                          rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 22:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
        Validity
            Not Before: Dec 31 22:25:52 2025 GMT
            Not After : Jan  7 22:25:52 2026 GMT
        Subject: CN=6955a2f0-acd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:69:e5:5f:2d:4b:e5:df:c0:bb:30:c1:54:
                    ae:f6:74:e8:9e:02:67:d8:47:38:ec:3b:79:ae:06:
                    54:89:f8:e6:f3:68:ee:7c:9d:12:59:f5:14:94:8b:
                    4c:34:db:2e:02:33:c3:89:40:c7:00:6b:3e:d2:67:
                    0b:fb:3e:76:11:e4:74:d4:44:29:26:4f:13:a7:9e:
                    15:99:ca:f0:1f:e5:17:68:0f:81:cc:0a:37:e3:e5:
                    94:18:88:b7:c7:df:a5:ef:13:13:dc:78:9e:68:46:
                    29:25:84:77:17:70:5f:bb:07:d9:d4:bd:7e:6c:21:
                    99:54:4d:ff:54:2b:26:a1:e9:bf:af:b9:36:a8:fe:
                    97:eb:47:b8:10:98:13:b5:55:b3:31:ec:1b:b0:c1:
                    58:7b:7d:80:57:3f:7a:f2:a2:83:c6:da:f6:35:06:
                    f9:78:e2:20:3c:d9:e6:bc:17:01:6c:d3:4c:88:79:
                    96:e1:72:94:1b:b9:36:fd:1b:64:2b:79:da:18:25:
                    66:cc:79:19:b6:29:8e:62:d9:30:31:39:74:18:73:
                    14:56:a1:19:9b:14:4a:85:e4:af:a4:1f:c3:54:a4:
                    82:9b:0b:1d:dc:a2:1f:6c:96:6b:cd:38:d9:5a:4c:
                    d5:2c:ed:23:fb:94:56:cb:57:17:37:a6:68:6e:5d:
                    6e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CA:16:EF:41:D0:74:4C:A5:97:25:CB:33:97:D8:9A:42:64:3A:E4
            X509v3 Authority Key Identifier:
                keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:69:80:a1:17:5d:ad:96:84:9c:e0:dd:36:6e:65:ef:e5:2f:
         6b:88:94:4d:bf:be:f1:8b:da:8f:81:b5:73:d6:a6:9b:c2:da:
         9e:e4:7c:dd:ab:35:94:ce:3d:a0:a4:12:81:11:70:98:7c:a2:
         b0:4c:2b:3c:03:1e:42:cc:49:65:af:12:54:45:f5:e0:c3:c9:
         a2:01:6c:6b:f8:6b:3c:c2:d2:a5:e1:3b:67:42:b9:ce:03:86:
         28:46:96:af:b6:d1:00:d4:3a:22:9c:96:c0:23:0e:b3:23:86:
         22:a3:5a:46:f1:5e:c4:45:97:e3:3f:aa:25:d7:fc:3f:27:4e:
         79:7f:fd:75:cf:4b:d4:48:89:f6:8f:55:d8:a1:b7:7b:88:df:
         ae:a4:ca:47:b0:ef:52:d6:83:61:66:ff:3f:1e:70:45:af:f2:
         fe:e1:fc:a5:b5:f0:34:47:a0:4f:20:9b:3a:1e:1a:2f:8d:2a:
         b3:14:72:fa:88:13:61:6e:ac:7b:6e:da:43:ad:b7:93:8f:6e:
         46:d1:3f:10:88:cd:4b:6d:b8:ae:84:8b:0c:07:df:e8:92:16:
         bc:e0:d9:90:66:f6:11:bd:16:0f:a4:4b:98:6d:42:78:eb:e6:
         8b:0c:6c:e4:9a:e9:6d:46:34:d8:f3:67:61:c3:b5:94:90:f0:
         bc:10:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 12:33:27 2026 by rpki-client