This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
File:                     JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json)
Hash identifier:          G/Q+OdNcxTaFD8a7BsuMKQHRx0OvHysEzaRh0FqoTAA=
Subject key identifier:   D8:90:D2:61:AF:33:B5:9B:40:40:A3:6A:A1:A4:40:78:45:22:69:D5
Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
Certificate issuer:       /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Certificate serial:       0CCE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
Manifest number:          0CC5
Signing time:             Thu 18 Dec 2025 17:57:03 +0000
Manifest this update:     Thu 18 Dec 2025 17:57:02 +0000
Manifest next update:     Thu 25 Dec 2025 17:57:02 +0000
Files and hashes:         1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: xG1HaRScGa9Bkr5ngGVzi7uhM0whA6z3wHGE5s+vU3E=)
                          2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: yPNuIBhOcR1Mr6lLidK3MeZlRO1wbqE9iAxDy/a++Gk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3278 (0xcce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
        Validity
            Not Before: Dec 18 17:57:02 2025 GMT
            Not After : Dec 25 17:57:02 2025 GMT
        Subject: CN=6944406f-64fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:00:aa:68:e7:94:b4:ee:27:3d:cf:13:27:
                    d5:d7:70:c0:ec:4e:37:0d:0c:fe:42:e5:3f:2b:8f:
                    ee:8a:fd:99:24:b5:50:2d:6f:6e:12:4e:c4:31:12:
                    70:e4:1f:1f:de:e9:43:2b:4e:ab:43:50:32:15:c8:
                    26:62:7e:a2:45:1a:86:45:5d:43:15:aa:b3:fa:99:
                    26:a8:e5:c4:f3:b8:56:34:b7:87:70:27:97:cf:1c:
                    a4:1e:09:6d:b1:58:fa:ec:6b:c5:8b:f4:9a:2b:7d:
                    86:ed:ca:56:5b:2d:be:02:d0:84:43:68:a6:a2:7f:
                    b1:40:c3:24:90:ac:98:66:42:f2:d3:70:06:46:6c:
                    4d:8a:63:10:68:c9:c9:18:5e:04:09:00:f9:b0:7c:
                    65:da:51:a1:5a:ed:06:99:9e:cd:3e:b6:67:09:33:
                    f5:10:9e:c7:36:2b:8c:79:94:57:ac:ce:00:c1:60:
                    ec:91:36:24:fc:86:b5:6f:67:9b:38:b4:13:99:73:
                    25:b9:5a:d7:b6:d9:92:38:24:8c:74:80:aa:74:b0:
                    97:3c:70:d0:a9:98:dc:ab:11:b8:df:f0:f5:1a:36:
                    5d:02:92:e1:a2:47:dd:94:0b:c8:02:be:1f:79:5b:
                    0d:33:f9:dd:93:0b:fd:a6:ba:86:89:99:7b:03:56:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:90:D2:61:AF:33:B5:9B:40:40:A3:6A:A1:A4:40:78:45:22:69:D5
            X509v3 Authority Key Identifier:
                keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ec:11:a6:75:59:7e:91:d0:a0:69:b9:84:dd:98:2d:b3:64:
         bd:40:e1:7a:31:95:28:30:d6:9d:cd:a3:5e:41:92:f6:ba:b5:
         90:a3:59:14:49:af:95:63:26:9f:1b:d2:5c:33:40:35:5c:57:
         b1:29:af:bb:78:f1:d7:00:b6:78:4d:cb:18:56:bc:56:d4:1e:
         b3:ce:28:f3:b8:5f:41:0f:58:6c:a8:19:84:08:e7:a7:fd:80:
         fe:fd:6f:cf:6c:85:1f:fe:a4:c7:a3:9f:a5:a0:c0:57:0d:bf:
         ee:05:36:04:e0:91:7b:5b:dd:18:2b:bc:5f:0b:ed:a6:aa:92:
         c5:bc:eb:19:2b:d3:88:41:a3:ac:0d:9d:75:d1:20:88:84:f0:
         6a:8e:c5:1f:39:c0:4c:b1:24:6a:9b:9f:ec:d7:53:1d:ef:80:
         1d:88:cb:d7:c4:a1:79:c4:e4:d0:17:3b:7a:6c:77:1e:1e:1d:
         04:b0:4f:3e:0c:91:c5:d4:ef:97:3e:2c:83:7e:79:c2:f3:56:
         47:c9:27:0a:cb:fc:b4:97:14:27:97:a1:10:86:8c:89:83:84:
         5d:9d:ff:a0:b5:91:7b:eb:e3:47:a8:7e:d6:5a:5a:da:eb:85:
         7c:c7:a6:98:26:85:33:b7:2f:0b:99:ae:2a:ed:4b:66:f8:03:
         88:e5:89:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1
M0REMTQ1MzQwHhcNMjUxMjE4MTc1NzAyWhcNMjUxMjI1MTc1NzAyWjAYMRYwFAYD
VQQDDA02OTQ0NDA2Zi02NGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwUIAqmjnlLTuJz3PEyfV13DA7E43DQz+QuU/K4/uiv2ZJLVQLW9uEk7EMRJw
5B8f3ulDK06rQ1AyFcgmYn6iRRqGRV1DFaqz+pkmqOXE87hWNLeHcCeXzxykHglt
sVj67GvFi/SaK32G7cpWWy2+AtCEQ2imon+xQMMkkKyYZkLy03AGRmxNimMQaMnJ
GF4ECQD5sHxl2lGhWu0GmZ7NPrZnCTP1EJ7HNiuMeZRXrM4AwWDskTYk/Ia1b2eb
OLQTmXMluVrXttmSOCSMdICqdLCXPHDQqZjcqxG43/D1GjZdApLhokfdlAvIAr4f
eVsNM/ndkwv9prqGiZl7A1aGkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiQ0mGv
M7WbQECjaqGkQHhFImnVMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG
QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH
SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAM7BGmdVl+kdCgabmE3Zgts2S9QOF6MZUoMNadzaNeQZL2urWQo1kU
Sa+VYyafG9JcM0A1XFexKa+7ePHXALZ4TcsYVrxW1B6zzijzuF9BD1hsqBmECOen
/YD+/W/PbIUf/qTHo5+loMBXDb/uBTYE4JF7W90YK7xfC+2mqpLFvOsZK9OIQaOs
DZ110SCIhPBqjsUfOcBMsSRqm5/s11Md74AdiMvXxKF5xOTQFzt6bHceHh0EsE8+
DJHF1O+XPiyDfnnC81ZHyScKy/y0lxQnl6EQhoyJg4Rdnf+gtZF76+NHqH7WWlra
64V8x6aYJoUzty8Lma4q7Utm+AOI5Ymc
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:41 2025 by rpki-client