This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
File:                     jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json)
Hash identifier:          U01pFMdaYlsL09mBrxtidJlzjnKwQJktmVwVnoFLkso=
Subject key identifier:   65:0D:7D:AA:E2:56:62:0D:DF:2F:0B:FE:76:68:9E:BF:87:9F:30:FC
Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB
Certificate issuer:       /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
Certificate serial:       02EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
Manifest number:          02E5
Signing time:             Thu 25 Dec 2025 00:24:57 +0000
Manifest this update:     Thu 25 Dec 2025 00:24:56 +0000
Manifest next update:     Thu 01 Jan 2026 00:24:56 +0000
Files and hashes:         1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: Hba0Kz3wgd/6RYDLHim2iARrxpnDnEm9aLfPoPKyxco=)
                          2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: SkZtMkxJP09Yd2B5Onq8UT9Pvo6N0SWw7PtHEg8gn3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl
                          rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 00:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747 (0x2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
        Validity
            Not Before: Dec 25 00:24:56 2025 GMT
            Not After : Jan  1 00:24:56 2026 GMT
        Subject: CN=694c8459-e268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:2d:d6:81:c6:81:33:f1:de:2c:22:6b:79:
                    5e:54:40:d5:ec:f8:42:03:79:d4:e8:be:e7:23:6b:
                    a3:28:84:7a:82:f4:17:6d:28:79:cc:25:e1:1d:e3:
                    d6:87:c8:e2:e9:33:7f:28:38:57:8b:db:83:4a:4a:
                    ef:f5:7c:fc:a9:96:f3:7b:a8:1a:0a:dd:93:0c:29:
                    8f:37:09:ac:07:eb:95:13:2f:7c:f8:78:8a:f0:7b:
                    9c:e4:ad:5a:63:94:77:1c:08:e3:8b:a3:97:ec:01:
                    8b:a5:02:5b:3f:a1:97:a6:5d:31:13:50:c6:00:af:
                    f5:16:d4:51:96:d4:5a:16:e8:89:37:80:90:ae:f5:
                    7f:4f:47:cd:5f:46:f4:06:9a:f0:40:c8:83:de:0f:
                    b4:f4:3d:30:54:7d:6d:34:09:02:b2:1d:21:4c:46:
                    42:74:b0:93:34:d7:0f:0e:a8:db:06:ed:bf:18:96:
                    13:70:48:1c:31:05:0c:61:96:61:e6:3f:38:83:e6:
                    c4:60:a4:1c:a7:91:57:c6:7c:da:ec:16:eb:e9:5d:
                    a9:83:a4:15:8f:82:a0:ce:e1:a5:d9:c8:21:4c:11:
                    bc:a9:9e:e8:ab:6d:17:f6:48:b4:e4:ca:d1:91:fa:
                    5f:d6:5e:7d:a5:29:21:16:b1:8d:19:db:38:d0:26:
                    17:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0D:7D:AA:E2:56:62:0D:DF:2F:0B:FE:76:68:9E:BF:87:9F:30:FC
            X509v3 Authority Key Identifier:
                keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:9f:92:a3:9d:45:65:01:6a:64:c3:d8:b2:01:dc:b2:03:
         17:4f:69:9e:45:31:7b:0c:5e:a2:b1:55:50:1c:2c:97:b0:32:
         06:ea:2b:72:98:1f:ae:3d:ae:fe:0c:53:15:58:0b:94:83:fc:
         f8:3f:0e:f1:36:72:1d:5c:06:6b:43:bf:b6:c7:67:fe:d3:17:
         4e:11:bf:ee:b3:ac:ed:b8:e5:21:74:5f:9a:67:8e:ef:ef:4a:
         a6:d8:f1:76:21:4f:70:66:62:41:4a:f9:b7:8e:ae:43:79:d9:
         05:f5:6a:69:94:d9:6f:8c:39:b8:57:48:a2:d5:bf:a8:d1:79:
         62:3a:2c:3d:bc:92:78:32:06:42:b5:da:0c:8c:82:88:42:0c:
         ca:c2:20:ce:2b:4b:36:88:32:7f:b1:3b:7e:02:52:35:64:62:
         b5:02:ef:22:69:b0:42:89:fd:ff:2f:6a:40:11:2a:60:bd:54:
         e7:6a:a3:42:eb:66:0f:b4:ce:58:db:ec:7e:17:d5:9b:69:4e:
         71:bc:24:26:d5:5a:dc:d8:9e:a7:10:70:5c:91:fe:1e:82:95:
         68:a0:4d:89:66:21:9f:04:ce:7c:ea:fb:9b:02:f8:74:e6:ee:
         8c:50:50:0b:51:76:5a:2c:6e:fe:69:c9:bd:86:f7:2d:ed:1d:
         82:11:3f:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE
MTc0NEM4REIwHhcNMjUxMjI1MDAyNDU2WhcNMjYwMTAxMDAyNDU2WjAYMRYwFAYD
VQQDDA02OTRjODQ1OS1lMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHgt1oHGgTPx3iwia3leVEDV7PhCA3nU6L7nI2ujKIR6gvQXbSh5zCXhHePW
h8ji6TN/KDhXi9uDSkrv9Xz8qZbze6gaCt2TDCmPNwmsB+uVEy98+HiK8Huc5K1a
Y5R3HAjji6OX7AGLpQJbP6GXpl0xE1DGAK/1FtRRltRaFuiJN4CQrvV/T0fNX0b0
BprwQMiD3g+09D0wVH1tNAkCsh0hTEZCdLCTNNcPDqjbBu2/GJYTcEgcMQUMYZZh
5j84g+bEYKQcp5FXxnza7Bbr6V2pg6QVj4KgzuGl2cghTBG8qZ7oq20X9ki05MrR
kfpf1l59pSkhFrGNGds40CYXlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUNfari
VmIN3y8L/nZonr+HnzD8MB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF
MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi
RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsdJ+So51FZQFqZMPYsgHcsgMXT2meRTF7DF6isVVQHCyXsDIG6ity
mB+uPa7+DFMVWAuUg/z4Pw7xNnIdXAZrQ7+2x2f+0xdOEb/us6ztuOUhdF+aZ47v
70qm2PF2IU9wZmJBSvm3jq5DedkF9WpplNlvjDm4V0ii1b+o0XliOiw9vJJ4MgZC
tdoMjIKIQgzKwiDOK0s2iDJ/sTt+AlI1ZGK1Au8iabBCif3/L2pAESpgvVTnaqNC
62YPtM5Y2+x+F9WbaU5xvCQm1Vrc2J6nEHBckf4egpVooE2JZiGfBM586vubAvh0
5u6MUFALUXZaLG7+acm9hvct7R2CET8H
-----END CERTIFICATE-----
Generated at Fri Dec 26 09:36:05 2025 by rpki-client