This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
File:                     JVXtObFvbItoFdVBudg2K50_2Co.mft (raw, json)
Hash identifier:          G/DyNi07dVY0dug3AephYMvXO7o+3XYANNWNQgQHoqA=
Subject key identifier:   39:35:A5:C4:3A:8D:5A:FC:3C:1F:45:5C:03:79:5D:F1:91:BF:3C:AF
Authority key identifier: 25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A
Certificate issuer:       /CN=A91ED836/serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
Manifest number:          0246
Signing time:             Thu 25 Dec 2025 00:56:56 +0000
Manifest this update:     Thu 25 Dec 2025 00:56:56 +0000
Manifest next update:     Thu 01 Jan 2026 00:56:56 +0000
Files and hashes:         1: JVXtObFvbItoFdVBudg2K50_2Co.crl (hash: oQ8rkWb7MflfIRDfjd1IV8DSuQmoMcSP/9vCbpayCeI=)
                          2: B37444BA7B3711ED9820E681C4F9AE02.roa (hash: +VcgRf6z1VT/qmLUhorkYqe7TBDudTQ2zcHHrZKRu3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl
                          rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 00:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED836, serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
        Validity
            Not Before: Dec 25 00:56:56 2025 GMT
            Not After : Jan  1 00:56:56 2026 GMT
        Subject: CN=694c8bd8-920c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:5f:ce:ef:d2:ca:72:29:b8:07:47:f7:1e:
                    e0:77:a4:82:fe:62:74:c3:5a:40:73:df:5e:a1:fd:
                    84:b8:07:7c:3d:1a:5a:56:c3:72:8c:46:10:af:97:
                    7d:06:ce:d3:99:aa:51:60:f6:f5:44:54:72:05:81:
                    6e:43:aa:4f:23:06:2b:de:51:87:0f:02:68:4b:5e:
                    56:c3:bf:ea:67:cd:83:fe:f3:66:e7:40:5b:cc:79:
                    a8:bf:7a:9b:9a:45:68:16:47:06:dc:7d:10:b9:37:
                    ca:a5:b5:8b:ba:05:0c:3c:97:dd:e0:01:b6:59:86:
                    0c:aa:2a:bf:7c:52:13:78:f3:d7:24:71:16:78:29:
                    5e:a8:aa:22:61:ad:5a:b0:03:35:14:4f:f4:d0:71:
                    9f:66:81:9b:83:1f:cd:0e:42:11:5d:1f:6c:f7:c9:
                    c2:df:e0:d1:ad:7f:29:7a:03:15:49:63:c2:5d:9d:
                    1e:2c:87:ba:ef:a7:bf:08:ea:6b:de:55:1e:59:a0:
                    3a:08:88:c9:f2:10:91:a3:a2:8a:31:bd:63:06:f6:
                    15:a5:66:51:be:d3:5e:c5:2a:b8:d7:ce:44:dd:be:
                    05:01:6c:1f:f9:73:44:eb:a5:a1:da:8d:18:f1:99:
                    1b:f7:e2:a2:d2:b6:11:80:cb:9b:c7:a7:e4:61:3c:
                    16:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:35:A5:C4:3A:8D:5A:FC:3C:1F:45:5C:03:79:5D:F1:91:BF:3C:AF
            X509v3 Authority Key Identifier:
                keyid:25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ff:4e:09:7f:7e:35:30:ae:97:99:1a:bf:5d:cb:72:99:a0:
         a6:fa:92:f1:74:bf:df:72:5e:32:95:c4:75:2e:e5:e5:e5:63:
         bc:06:d8:7a:b7:bd:51:cd:e6:cf:b3:e8:85:07:2f:e2:85:b6:
         fe:bf:cc:59:22:e3:59:55:e9:2f:d1:d5:5b:bb:46:f2:d1:51:
         f4:4b:8a:7a:4d:0a:0a:59:51:e5:61:17:cc:3f:5b:84:d0:2c:
         0e:1e:08:23:c6:7f:b2:7a:e4:c5:ac:40:c5:7a:8b:86:89:ff:
         91:74:c4:85:28:0c:85:e5:eb:b1:da:4b:94:25:b8:20:92:4d:
         97:e5:0a:70:98:bb:f0:83:da:56:a0:b2:86:d6:63:fd:52:0e:
         a8:85:70:00:b4:66:a2:be:c6:96:b3:34:52:e5:89:1f:85:1d:
         45:71:d0:2d:4d:d8:a5:48:76:b8:f6:9d:40:73:bc:3f:46:50:
         25:66:f0:de:70:31:81:93:76:e3:87:aa:89:92:bf:54:c0:d2:
         8f:9c:75:3f:1e:32:b6:2a:f6:16:8c:6e:3b:83:78:c8:dd:45:
         64:38:b1:95:23:9d:7b:08:24:bd:f2:16:82:ad:f5:44:8e:e6:
         94:20:f1:0e:b9:f0:ea:42:4d:46:55:90:b5:8c:24:e3:b8:a0:
         11:2a:c9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 05:11:45 2025 by rpki-client