This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
File:                     jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json)
Hash identifier:          07geOHmthQg0G11RwcvsMYjbXLFeefqx9ZlCd0hMkR4=
Subject key identifier:   97:E5:38:66:65:6E:A6:9A:5D:04:0B:0B:C5:2F:2A:AC:69:F6:1A:20
Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71
Certificate issuer:       /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
Certificate serial:       097B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
Manifest number:          096D
Signing time:             Wed 31 Dec 2025 19:45:29 +0000
Manifest this update:     Wed 31 Dec 2025 19:45:29 +0000
Manifest next update:     Wed 07 Jan 2026 19:45:29 +0000
Files and hashes:         1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: rImsZOku1RTDsAMb5QLp4RLoD1oiPbdJkkI2pgn1oY4=)
                          2: B8753568229D11F0A5CF4B78C4F9AE02.roa (hash: hBbziGq3cc8hGTM4JIZcIJ31hPsOyUFUIPkanCNnaOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl
                          rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 19:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2427 (0x97b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
        Validity
            Not Before: Dec 31 19:45:29 2025 GMT
            Not After : Jan  7 19:45:29 2026 GMT
        Subject: CN=69557d59-fefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:c3:6f:f0:82:d3:be:f6:db:47:ec:a7:6d:
                    3b:2f:66:12:cb:75:2e:ec:e9:44:ea:35:5c:d3:cd:
                    37:39:cc:b8:58:13:45:97:15:b9:25:c1:96:c4:89:
                    f3:5d:29:37:dc:6b:c9:0a:75:9d:d9:9a:f4:43:c4:
                    ca:14:9d:c8:72:0b:b2:0b:48:58:69:5f:64:97:5e:
                    6b:09:31:33:74:b5:30:e1:b6:1b:9a:d0:0d:76:3e:
                    fc:5a:e9:5d:56:3f:79:a5:20:07:4e:d8:f7:1d:19:
                    fc:6a:c2:1a:67:48:ff:89:7b:20:e9:e3:9b:4e:d9:
                    0b:98:6b:a8:78:0c:36:d3:58:49:8b:2f:93:13:b9:
                    50:db:ca:07:ef:0b:11:23:8b:cc:0f:3d:3d:42:77:
                    e1:0c:9a:b1:a2:38:ad:e2:a5:dc:81:a2:fd:07:b1:
                    a0:97:c0:ac:07:fb:72:44:a8:3b:0b:df:6c:41:86:
                    39:47:a3:e6:ee:83:fb:a7:88:f4:10:c9:0c:7a:c5:
                    e8:f4:fa:2a:be:7e:87:b2:1a:31:df:2e:2d:9b:d3:
                    9e:ad:b5:76:08:32:99:08:d4:14:fa:1c:1a:59:5c:
                    c4:b6:ed:e7:6a:8e:bc:8c:3b:6e:93:8a:b8:fc:b5:
                    6a:31:f1:4e:31:08:a4:43:db:ee:75:ab:dd:59:ae:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E5:38:66:65:6E:A6:9A:5D:04:0B:0B:C5:2F:2A:AC:69:F6:1A:20
            X509v3 Authority Key Identifier:
                keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:c5:87:0c:bc:25:89:a1:b4:89:3e:0d:86:51:bf:d3:93:0f:
         c3:66:93:e0:8d:76:cc:7f:39:44:66:e2:64:31:7d:be:88:d9:
         80:69:7d:89:e2:59:a9:10:26:be:a4:4d:8a:62:db:ac:a0:d6:
         a6:a8:84:e6:73:e8:49:5c:b0:fb:73:c8:21:f4:e0:97:18:ab:
         6d:b1:9d:a6:69:d6:ed:79:04:89:43:45:31:e8:7a:66:fc:20:
         0d:75:fa:9d:95:d7:1e:0a:ef:08:83:d8:90:96:1f:e3:4f:f5:
         99:a4:c7:de:34:f7:06:32:e4:d1:dd:22:f8:51:1d:bb:fb:43:
         5e:04:7e:b9:7d:fe:99:37:2d:94:68:eb:45:21:2c:24:bb:8e:
         4c:17:56:bd:2c:76:8d:e4:5b:1c:cc:71:3c:15:0f:b9:ec:04:
         20:5e:95:7e:6f:87:b9:3f:5d:8e:64:5d:60:d5:7f:4e:b8:f8:
         25:26:a0:7d:f8:13:a7:82:d0:ee:0e:7a:91:2a:05:90:e4:e5:
         b9:13:6e:3c:28:ff:66:f1:df:91:10:ed:89:2a:6a:bf:10:7c:
         67:fd:68:dd:c8:8f:ce:42:b3:bf:1d:92:80:c4:b2:d0:29:31:
         ab:76:61:11:5f:79:2d:08:b1:02:44:64:e1:d1:b0:eb:5a:7b:
         6f:96:06:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 06:29:49 2026 by rpki-client