This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
File:                     juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json)
Hash identifier:          Vqh8U+8Gb/mKzM9G1VZD2PtgM9+bgIQkwCqvcJt7V1M=
Subject key identifier:   05:FD:EA:34:06:B0:D4:03:C1:F7:B9:D7:72:CA:3A:2B:B5:76:F9:2C
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Certificate issuer:       /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial:       01FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
Manifest number:          01F4
Signing time:             Fri 19 Dec 2025 01:47:31 +0000
Manifest this update:     Fri 19 Dec 2025 01:47:31 +0000
Manifest next update:     Fri 26 Dec 2025 01:47:31 +0000
Files and hashes:         1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: aBhv8TvSi6oXh23uBIvhteFd14obhE+2c3Zlb9FiPSQ=)
                          2: FD678F40214E11F095B05918C4F9AE02.roa (hash: SE2tQtfXNh6RaSGSNFmLS6aWkLKk1NZamBIU1kOWDMs=)
                          3: 45399802215111F0B94CA13FC4F9AE02.roa (hash: 4P/ZavUH4NM6wMd2wGqcFK1zMWVNSTlldDMPOXOpXSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
                          rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
        Validity
            Not Before: Dec 19 01:47:31 2025 GMT
            Not After : Dec 26 01:47:31 2025 GMT
        Subject: CN=6944aeb3-7bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:1e:ae:8d:ca:51:15:5e:6f:2e:74:db:96:
                    f4:65:f4:28:e0:67:d6:7d:58:b8:92:e0:e0:49:62:
                    4f:3c:ce:5d:1a:92:2f:a1:8a:33:34:6a:3b:03:80:
                    eb:78:be:9b:73:08:c7:bc:05:b2:7a:a8:26:cf:0c:
                    2a:12:e4:bf:e0:82:91:c0:bd:e2:fb:d4:eb:cd:3f:
                    0e:ab:db:a3:6a:6f:71:c3:fd:35:b3:bf:ce:38:1d:
                    d5:f8:c0:bb:26:76:1c:ab:91:8b:f8:bf:31:33:1d:
                    ef:0a:69:ef:2a:af:1e:40:6a:94:c9:ce:6d:80:67:
                    99:48:4d:f2:4f:17:a1:ae:9e:5f:5d:cf:e7:18:ae:
                    f5:ce:1b:73:9f:03:b0:7c:8e:06:de:c4:01:4d:1c:
                    b2:0e:39:78:92:47:30:35:81:f0:70:4c:cd:7b:cd:
                    23:0b:79:1b:b1:b9:42:68:fb:71:b4:ce:62:97:3b:
                    77:8c:e9:55:dd:df:cf:ef:5f:37:6a:2e:00:23:9c:
                    a7:fa:cb:12:47:58:6c:65:50:6a:70:ed:e1:bd:f9:
                    b6:4d:b5:25:74:f4:5f:64:5e:e1:b6:b2:9b:6f:17:
                    90:42:b6:52:86:9e:d2:0d:db:f2:3d:39:02:91:07:
                    11:84:22:dc:53:2c:61:ed:91:f1:f1:ed:1f:1a:89:
                    02:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FD:EA:34:06:B0:D4:03:C1:F7:B9:D7:72:CA:3A:2B:B5:76:F9:2C
            X509v3 Authority Key Identifier:
                keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:88:38:b2:8c:e2:47:3f:ef:b0:d4:0e:66:d4:b3:e5:81:d7:
         f7:e1:fa:0d:df:14:d1:df:4f:f2:96:59:59:72:08:8c:bc:9d:
         69:b0:eb:c2:38:a4:94:0c:2f:fc:12:d7:a2:ab:17:f9:bc:67:
         eb:74:b5:0b:08:bf:6b:41:95:ae:53:36:f4:1f:66:28:25:4b:
         bd:74:60:70:27:f0:82:b3:4b:60:a3:54:f1:86:d6:69:a5:45:
         e3:fa:48:95:2e:4b:c0:11:72:d2:da:fa:82:5b:8a:0d:dd:d2:
         63:42:d1:c2:d6:fb:b1:ff:37:f8:16:73:03:2f:a7:c0:4a:12:
         0e:b2:bd:45:cf:da:08:33:42:f2:a1:f4:20:37:53:4a:99:ed:
         30:01:f4:db:35:30:a4:d9:33:38:5c:db:04:76:db:29:5c:04:
         a5:d0:d9:bb:97:5b:71:63:e6:e2:8e:f8:ff:d4:58:6a:55:66:
         f9:3a:f8:34:52:3d:09:d9:19:21:de:d2:d4:2c:61:3e:1d:69:
         36:1e:1e:f3:26:bb:91:26:d8:b2:c8:8e:f8:e0:86:89:98:ce:
         98:9c:d0:79:17:9d:0f:29:c8:04:be:4e:ce:fc:7e:97:5a:71:
         d6:31:0f:12:5f:9f:30:93:a4:37:7c:72:d0:c5:ad:b0:d9:e5:
         52:cd:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:43 2025 by rpki-client