This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
File:                     JLEMMdaR-EX86uP-MjG-VgArrGo.mft (raw, json)
Hash identifier:          +6kNvwVC9uN9yxVIGrDmo1GxZjyrKuaWLlLcVCLY1fg=
Subject key identifier:   D0:DB:F3:86:B0:BB:EA:7D:9D:D8:44:68:A4:11:E7:EB:CE:9B:F8:A3
Authority key identifier: 24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A
Certificate issuer:       /CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
Manifest number:          0104
Signing time:             Fri 19 Dec 2025 04:12:44 +0000
Manifest this update:     Fri 19 Dec 2025 04:12:44 +0000
Manifest next update:     Fri 26 Dec 2025 04:12:44 +0000
Files and hashes:         1: JLEMMdaR-EX86uP-MjG-VgArrGo.crl (hash: Q7imxH4o2x/joxYoWWDanMX11ce4jLA05xw5E0RS/r0=)
                          2: 8955AA3A55F511EF986BFA6AC4F9AE02.roa (hash: 5sDQjXbl18fKKFVRqOqglNb9vyijRd3VDxj0IGPTpDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl
                          rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7B4, serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
        Validity
            Not Before: Dec 19 04:12:44 2025 GMT
            Not After : Dec 26 04:12:44 2025 GMT
        Subject: CN=6944d0bc-8813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:d3:11:20:b8:32:7a:c5:c7:69:92:16:f6:
                    05:5c:7b:d0:45:72:94:c0:bd:ea:2d:0b:31:33:bf:
                    60:db:23:17:5d:5b:fb:48:a4:fb:f7:9c:b7:27:34:
                    d1:f0:18:89:3b:f3:ff:67:f8:c7:1f:9e:06:6c:37:
                    46:9d:be:b7:2d:f3:35:4e:1f:dd:98:98:d8:fa:b5:
                    de:84:1b:8a:e5:2e:3a:f2:bb:01:05:01:98:7c:ea:
                    b4:c6:bb:ca:c7:c3:19:22:34:f9:b9:f3:59:ea:68:
                    49:2e:2f:70:ee:e5:b8:ef:5b:da:fb:79:cf:e7:7b:
                    05:03:fb:e1:24:62:10:50:f9:61:26:cc:ed:4f:86:
                    08:04:31:08:01:92:1d:13:7e:d3:46:15:ff:f1:68:
                    1d:b1:ed:62:e6:dd:48:ef:91:14:4b:a3:24:60:41:
                    f6:a3:e0:3e:38:d6:b3:f8:a3:a0:ce:0a:f6:6b:dc:
                    e6:db:98:b8:55:0d:7e:e5:af:28:a3:b2:f6:d8:17:
                    09:9e:e5:b9:3a:de:bf:a3:4a:d2:ba:70:47:7b:a3:
                    bc:73:5f:19:39:e8:1d:38:bc:c7:c8:95:95:38:19:
                    86:51:33:92:db:b3:2c:20:a6:d1:b6:62:32:d6:ba:
                    75:7e:8d:6e:c2:4e:18:c8:71:bc:fd:fa:b1:43:68:
                    df:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DB:F3:86:B0:BB:EA:7D:9D:D8:44:68:A4:11:E7:EB:CE:9B:F8:A3
            X509v3 Authority Key Identifier:
                keyid:24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c5:98:89:93:cd:84:7f:86:57:2f:bd:e9:83:a2:c0:39:3b:
         ce:c1:0b:db:2b:84:13:b0:83:53:9b:ab:8d:86:09:5d:d2:44:
         0d:b6:8c:cd:af:a3:d8:8e:a1:68:92:f8:a4:dc:c3:3d:aa:8d:
         ba:f6:a2:10:d9:1f:c7:34:6c:a3:ee:87:ee:56:a4:b4:07:8b:
         6b:83:23:37:b3:b6:3e:a1:5b:16:28:c6:4a:22:21:30:ef:fc:
         88:45:02:15:c4:16:8e:e3:f3:21:1b:e9:72:7e:71:81:25:63:
         b9:a8:34:e4:48:35:50:5e:95:79:57:98:d4:a1:b1:36:b4:23:
         01:72:ae:43:b1:79:1f:0d:80:c7:c3:26:ac:9e:5f:02:c1:25:
         ee:a3:06:45:95:8f:24:01:c2:84:f5:b3:96:68:54:85:b6:75:
         9a:00:d7:cb:25:4f:64:f9:f9:7b:f8:10:82:71:81:77:84:a9:
         df:f8:b2:a6:fc:7b:38:55:ff:86:5a:e3:05:25:1b:04:75:87:
         ff:69:7e:f1:0c:0c:4b:43:84:e4:c1:82:3a:c4:bb:df:8c:59:
         2b:98:30:0f:d4:65:57:f3:44:c3:de:b1:60:08:f0:04:51:89:
         7c:cf:71:aa:3e:b7:91:4e:f3:94:51:f8:c0:7f:bf:71:07:88:
         77:5a:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:59:28 2025 by rpki-client