This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
File:                     jUEzbLXQr_8QKCFtlTS7fgLD54U.mft (raw, json)
Hash identifier:          dNjNVbYpZv9mNJLdYbYtiODLrzeZuQdWIdbNCGZzDSA=
Subject key identifier:   D6:2E:87:2F:BC:E0:1E:A2:C8:1C:2F:A4:CB:F1:8A:E9:D0:98:D9:69
Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85
Certificate issuer:       /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785
Certificate serial:       08E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
Manifest number:          08E0
Signing time:             Thu 18 Dec 2025 19:55:33 +0000
Manifest this update:     Thu 18 Dec 2025 19:55:33 +0000
Manifest next update:     Thu 25 Dec 2025 19:55:33 +0000
Files and hashes:         1: jUEzbLXQr_8QKCFtlTS7fgLD54U.crl (hash: ZY//YL/PNy6GJzbhrjTKgi9GDKIlnP041lDDn+x8HLM=)
                          2: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (hash: oyNqHuI92CZn4/vowEHhL13J2MzcFLxMYrnO9NR1z4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl
                          rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2278 (0x8e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C254D, serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785
        Validity
            Not Before: Dec 18 19:55:33 2025 GMT
            Not After : Dec 25 19:55:33 2025 GMT
        Subject: CN=69445c35-d943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:3b:fd:bf:8f:55:bc:88:61:ac:3b:c6:5c:
                    59:cd:0f:e9:d4:72:0d:58:dd:67:07:fc:30:63:1f:
                    13:85:66:90:67:ee:a3:61:1a:38:6d:46:74:dc:b2:
                    bf:27:96:a0:02:94:69:12:10:46:01:bf:1e:56:06:
                    32:8e:98:19:21:28:ae:84:7b:ed:b6:98:ff:c7:75:
                    11:ce:a3:d3:32:74:2a:1c:83:9b:74:e0:78:5e:95:
                    c8:0b:0d:11:44:8b:ec:e0:c9:a1:60:76:89:32:83:
                    6f:e5:fa:b4:4c:dc:96:07:01:b7:28:dd:3b:6e:98:
                    94:d7:c9:36:2a:42:33:c6:d2:c0:77:56:2e:ae:67:
                    16:28:4b:d3:3a:52:f8:2e:7a:69:03:11:75:6c:0a:
                    3e:32:d6:5b:a4:c9:2b:76:85:ae:f0:50:c8:03:6b:
                    6d:38:c3:d9:39:a8:a8:73:35:6c:64:58:76:d6:68:
                    b5:89:79:48:d0:57:dc:5c:a8:45:fc:28:e5:cd:04:
                    e1:33:68:e2:01:f0:5e:47:19:b8:2d:2a:73:6b:3c:
                    c2:9f:39:28:34:a8:15:20:14:40:de:bd:a1:ff:66:
                    ba:6e:d3:6e:a0:84:e3:03:c4:8f:8d:7c:58:7e:60:
                    fe:dd:9a:6e:9c:55:76:e1:93:49:09:98:74:3b:c1:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2E:87:2F:BC:E0:1E:A2:C8:1C:2F:A4:CB:F1:8A:E9:D0:98:D9:69
            X509v3 Authority Key Identifier:
                keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:52:87:e6:8e:49:c5:a7:81:06:c9:88:5f:4f:29:06:8b:90:
         f1:aa:8b:9f:f6:ef:0c:c2:3e:66:5c:97:68:03:c1:60:13:5e:
         35:3f:c8:39:08:5a:bf:b2:f0:99:6c:a4:8d:04:86:1c:73:95:
         7b:22:20:de:51:01:bb:dd:77:aa:d5:f2:cb:bb:f4:db:c4:7d:
         60:bb:69:05:01:80:cd:89:26:ed:91:20:41:49:19:88:90:ed:
         36:4a:54:1c:e5:4b:ef:db:8a:fa:9f:eb:99:8b:63:4c:84:f3:
         79:02:38:a4:8c:14:39:82:49:6d:73:87:d6:14:c4:4a:47:1e:
         cd:f8:9e:cd:25:07:4e:2a:78:03:43:00:a4:12:f1:14:35:d3:
         45:a1:29:ff:ac:03:ea:50:1e:14:6c:2e:85:03:d3:79:37:75:
         50:72:05:71:1c:44:b8:9b:1d:5b:58:3f:70:2e:48:f4:ce:31:
         ca:cb:86:42:3e:a7:e4:2e:68:ac:28:5a:58:d6:6e:a2:75:e3:
         96:dc:0f:37:49:8a:95:80:02:c9:55:8e:46:57:00:53:e7:e1:
         19:2e:fc:0d:64:af:c3:83:4d:23:1e:a6:42:2e:06:9e:cc:86:
         5b:4f:f3:67:3b:e4:0f:4b:bf:d7:a3:e9:07:b6:a4:d2:9a:7e:
         29:99:97:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:16:58 2025 by rpki-client