This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
File:                     JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft (raw, json)
Hash identifier:          HwagePcmFlaBczm2B0N1W3eY54B0iAneeVQj+k0TSoY=
Subject key identifier:   B3:D4:A6:D5:5A:55:76:EA:68:8F:CA:7E:61:9A:BC:B5:44:6C:B3:94
Authority key identifier: 27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61
Certificate issuer:       /CN=A91E5D61/serialNumber=272307B227936DB3EE3B6540602C32D958309F61
Certificate serial:       3521
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
Manifest number:          482E
Signing time:             Tue 06 Jan 2026 14:20:47 +0000
Manifest this update:     Tue 06 Jan 2026 14:20:47 +0000
Manifest next update:     Tue 13 Jan 2026 14:20:47 +0000
Files and hashes:         1: JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl (hash: i5KoboHq9aMtOgMMR03hDuPT5nMohH2n234YtHl3fTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Jan 2026 14:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13601 (0x3521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=272307B227936DB3EE3B6540602C32D958309F61
        Validity
            Not Before: Jan  6 14:20:47 2026 GMT
            Not After : Jan 13 14:20:47 2026 GMT
        Subject: CN=695d1a3f-bb74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:50:c4:40:50:b0:c7:cf:84:07:7b:3b:c9:27:
                    d2:f6:be:21:ef:d4:07:9b:e7:af:31:78:d9:3b:f7:
                    5c:b9:d4:ef:0b:ee:e1:b4:4f:40:3b:bf:08:5d:cc:
                    22:75:c5:7c:43:4e:a5:14:31:7a:d1:0b:e8:73:75:
                    ae:df:5a:b6:ab:bb:61:27:c6:3c:90:be:01:8e:b6:
                    04:7d:01:4f:c7:50:3d:cf:42:f0:85:f0:d8:bf:a3:
                    0d:bd:6a:ed:aa:d3:32:d5:15:6b:f6:97:c1:24:6c:
                    42:5b:35:57:71:27:c7:1a:62:94:8b:61:59:7b:38:
                    e3:ee:02:19:bc:a9:61:41:c1:9c:f4:14:32:84:81:
                    a3:5c:96:95:49:92:cd:0d:10:de:7f:3c:fb:34:7d:
                    93:ae:61:ca:61:31:a7:fe:de:0b:3f:d4:bb:77:1f:
                    a5:bb:51:a2:49:47:59:e6:28:81:06:b0:f6:a9:27:
                    39:ff:93:cd:8e:a6:1e:30:2e:bf:37:ee:4d:3b:2b:
                    80:4f:a9:43:17:2e:15:29:e3:ae:0d:a0:1f:7d:86:
                    f5:db:31:98:83:03:40:37:be:8e:5c:92:24:4a:c3:
                    81:ce:9c:ba:a8:a1:ef:21:bb:25:a9:0a:10:6e:bb:
                    d9:60:3e:c8:15:4d:85:30:88:06:83:8d:cf:b7:5e:
                    6a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D4:A6:D5:5A:55:76:EA:68:8F:CA:7E:61:9A:BC:B5:44:6C:B3:94
            X509v3 Authority Key Identifier:
                keyid:27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:59:cb:4d:1f:8b:b2:af:24:75:f1:07:a7:45:fd:32:8a:35:
         56:51:34:ff:d3:d6:3e:aa:3b:a5:2a:da:ce:02:01:e7:5f:ea:
         4e:1a:26:54:a3:74:1b:47:b2:a5:c7:7f:88:7a:e7:b3:77:32:
         4b:c7:87:77:ec:14:de:01:36:dc:af:b4:13:a7:07:4b:7a:ba:
         e5:0c:63:d6:1a:85:51:a2:75:76:f6:bd:97:1e:6b:cb:b5:41:
         bb:6a:e7:7c:4e:ac:5a:77:62:df:a1:2e:b7:18:e6:0a:3c:be:
         e0:38:f8:22:c9:b4:a7:51:d4:85:71:86:5f:e0:8e:4e:81:51:
         f7:c6:c9:86:34:a9:9e:7b:5a:fc:62:8f:10:a4:1f:84:74:b5:
         63:ad:ea:e8:aa:f9:d1:89:96:c5:1d:cc:e0:64:68:9b:ba:d3:
         a6:28:2d:25:a4:47:36:41:55:6e:91:fb:23:ad:b9:38:8b:fe:
         5d:f1:9d:91:e2:cb:2b:8b:50:08:ce:f7:02:42:da:21:fa:f7:
         2f:00:49:c4:3d:cc:d2:67:af:75:8b:6c:92:93:bc:7c:3c:e7:
         1d:9b:01:73:c4:eb:43:c9:cf:e0:93:ad:ef:47:91:e9:28:f6:
         c8:b7:d1:1a:42:3a:d9:0b:56:5c:25:fd:30:82:73:57:6c:09:
         de:12:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 10:23:12 2026 by rpki-client