This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
File:                     JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft (raw, json)
Hash identifier:          fdJBUlXRZgeMh+fdzVYCvqUq0Ag9w9BwdHlqNgIljOE=
Subject key identifier:   C3:A7:26:62:01:F7:1C:BB:1E:70:B3:14:8B:3B:87:0B:9C:D2:E0:AB
Authority key identifier: 27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61
Certificate issuer:       /CN=A91E5D61/serialNumber=272307B227936DB3EE3B6540602C32D958309F61
Certificate serial:       3518
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
Manifest number:          481C
Signing time:             Sat 20 Dec 2025 14:20:54 +0000
Manifest this update:     Sat 20 Dec 2025 14:20:53 +0000
Manifest next update:     Sat 27 Dec 2025 14:20:53 +0000
Files and hashes:         1: JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl (hash: DWfMLbOXbzAaXycFmcZBZ3xKjzs77bnWvPA2fc+oCIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13592 (0x3518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=272307B227936DB3EE3B6540602C32D958309F61
        Validity
            Not Before: Dec 20 14:20:53 2025 GMT
            Not After : Dec 27 14:20:53 2025 GMT
        Subject: CN=6946b0c6-c1f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7f:3b:fa:5a:e7:f0:86:ea:c9:f0:f9:29:cd:
                    ae:cb:33:e1:07:99:83:2b:21:b3:f8:2a:cc:e7:7d:
                    c3:d7:1c:9a:8b:07:c0:77:37:68:cd:78:bd:67:5a:
                    28:f7:6f:a0:46:b3:ad:4a:1f:85:d8:a6:6d:0a:54:
                    eb:80:b1:e9:04:05:3c:ba:dc:f5:87:71:0e:06:04:
                    2e:4c:16:fe:70:66:ee:cf:b5:07:cf:fb:17:8e:89:
                    75:28:4f:bf:c5:c1:82:f4:4f:23:c3:b1:31:ba:f8:
                    8f:39:58:06:ad:89:36:e6:ca:e9:65:b4:8c:e8:d7:
                    0f:29:b9:a7:51:2a:d7:8f:a3:ce:88:77:d3:2b:42:
                    e1:a4:88:08:2f:65:cc:b0:42:eb:dc:ee:68:fb:f4:
                    0f:de:41:1a:1e:a3:7d:8f:89:54:24:bf:1d:d8:d7:
                    ce:3b:99:fa:ea:46:70:06:9c:fb:ce:4b:50:fc:5d:
                    06:a6:21:10:e5:d1:e0:ac:b9:94:fe:56:ac:fb:e5:
                    36:5d:cc:d6:c9:71:46:7f:3b:f2:8f:a3:95:9a:7c:
                    f4:3f:42:24:8d:8b:09:3c:a4:05:3d:df:f6:c3:6d:
                    05:7e:8c:17:98:8c:2b:4e:c1:10:da:5d:f9:f8:dd:
                    e2:89:df:b4:0c:b5:e8:e6:b6:ce:68:ea:87:c6:cf:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A7:26:62:01:F7:1C:BB:1E:70:B3:14:8B:3B:87:0B:9C:D2:E0:AB
            X509v3 Authority Key Identifier:
                keyid:27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5e:cc:76:ab:d3:a3:09:83:4d:1d:e3:02:f5:a3:ed:95:e7:
         8e:e1:dc:d3:b1:03:33:a8:0f:1f:3e:c1:74:c4:3c:df:8f:ca:
         c5:5f:b5:42:1c:32:e0:23:98:0a:7e:ab:2e:9f:7d:e2:7d:66:
         21:99:66:47:a5:3b:4f:26:93:54:76:27:07:7c:63:fb:e0:23:
         34:0d:c1:6c:d9:71:ff:f1:ed:b9:89:ad:ad:b3:fa:e8:37:c9:
         e4:ad:a5:56:6e:e6:2d:a1:db:aa:6d:fd:16:93:ab:31:fa:1d:
         68:59:c7:ad:8d:4a:1f:83:8a:f7:03:f1:b7:4d:a9:f5:21:47:
         29:d8:ad:fe:a5:e8:4a:1f:b9:f6:9e:6e:95:1b:b6:4f:28:2b:
         8b:b9:08:19:01:ab:85:3c:29:8b:97:ea:b6:3a:45:5b:22:2a:
         4f:30:be:2b:2b:65:bd:e8:48:06:a2:1f:cb:13:43:56:07:59:
         1f:5d:89:46:05:ce:ee:d3:a8:ef:25:4a:65:e6:12:74:9a:9c:
         7e:7c:15:56:cb:81:b8:1e:6d:5d:d9:5f:16:78:1c:8d:f0:f7:
         66:58:74:99:9e:61:7a:6e:47:64:69:0c:ee:6c:d9:57:e7:e7:
         4a:af:37:01:71:6c:9d:3f:c0:f1:89:7b:72:b1:19:de:39:53:
         76:9b:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:08:20 2025 by rpki-client