This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
File:                     JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json)
Hash identifier:          AGTfhobAfy0kjs2YL/E/8pAR+FT0QGXqKmCQkTtKu2A=
Subject key identifier:   61:A7:40:AA:FF:F7:97:9A:47:A5:71:40:1C:E4:26:E3:35:A8:95:C6
Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
Certificate issuer:       /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Certificate serial:       0BD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
Manifest number:          0BCB
Signing time:             Thu 18 Dec 2025 18:36:31 +0000
Manifest this update:     Thu 18 Dec 2025 18:36:30 +0000
Manifest next update:     Thu 25 Dec 2025 18:36:30 +0000
Files and hashes:         1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: BDMJW4GKeKwL8P2L1bxczuyqZlhSNYuCIhAS24oTbTg=)
                          2: A540A624378611EABE283384C4F9AE02.roa (hash: ANMKroNAd8SN9uIGuTzwVBbPP9a2iv11Jpq5VopofpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
                          rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3030 (0xbd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
        Validity
            Not Before: Dec 18 18:36:30 2025 GMT
            Not After : Dec 25 18:36:30 2025 GMT
        Subject: CN=694449af-b819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:37:d4:e0:a1:ee:72:6a:f4:10:d1:50:5c:
                    ed:9e:64:28:07:3a:14:2f:17:4e:b2:2c:4d:1f:88:
                    47:92:1f:1d:26:2d:06:9e:a5:6a:f6:7b:ed:1e:8c:
                    fb:b8:03:42:7a:39:ab:22:96:75:79:2a:1e:09:59:
                    fb:db:1f:13:2e:aa:19:4b:75:b5:b5:a3:e2:a5:8e:
                    c2:9a:7a:7d:69:c2:8c:64:7e:0e:5a:24:58:12:5c:
                    af:b7:92:bf:5e:1b:60:bf:51:1c:42:90:ed:b7:1f:
                    14:83:72:84:4c:49:08:9a:56:2a:19:92:2c:c0:c7:
                    6c:ce:dc:0b:34:da:c8:9d:65:90:26:06:e7:3f:3f:
                    c0:7d:6f:d6:e1:40:6c:a3:e2:a6:53:b0:d4:4c:88:
                    1a:fa:17:f3:73:fb:b5:d0:9e:87:60:f2:82:07:58:
                    42:86:8e:f4:79:21:ab:46:84:56:c0:08:d6:fa:2f:
                    df:93:3d:4f:94:22:8e:f7:52:7a:64:35:43:48:47:
                    49:fd:84:dc:ef:c0:80:60:e2:d8:b0:ab:16:15:8d:
                    20:2f:06:e5:cc:69:29:07:97:4a:32:4f:16:a7:34:
                    50:a9:6b:51:f4:c4:3a:23:c9:f1:cc:12:4d:51:85:
                    48:e5:e1:37:7e:1a:b0:0e:69:86:86:12:0d:fd:74:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A7:40:AA:FF:F7:97:9A:47:A5:71:40:1C:E4:26:E3:35:A8:95:C6
            X509v3 Authority Key Identifier:
                keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:1c:ee:fd:62:f9:85:e5:b3:ee:67:8a:b2:aa:4b:6d:18:03:
         db:6e:81:40:51:7c:7c:01:57:70:6a:39:68:26:ec:88:80:fb:
         ee:94:60:a7:1e:43:51:db:6a:e8:b3:28:76:cd:18:12:2b:a7:
         bb:19:de:c4:3f:35:e1:5f:e9:68:a4:32:1b:de:a1:32:66:da:
         77:8f:73:55:57:1f:e5:eb:5d:26:24:39:59:4d:74:a5:9b:86:
         0d:39:27:b5:e9:c5:80:79:88:da:3b:98:18:6e:45:6b:78:1d:
         60:b2:d3:5a:c3:d1:d1:33:a0:8e:a3:9f:ae:f0:c1:44:e6:6b:
         9f:7b:b8:f7:37:95:83:b2:f7:3e:c9:e7:f6:83:7c:3c:f9:b3:
         95:00:c6:85:71:d3:d8:84:c0:4e:a3:dd:56:78:2b:c3:e5:8e:
         e3:90:5e:5f:7a:ac:ad:74:96:f1:ae:3e:26:51:0a:68:f9:1e:
         4d:1b:61:f5:bd:47:43:84:a4:32:5e:f5:4b:ad:4e:41:8e:52:
         57:3c:76:10:f0:5e:98:e4:58:c5:48:a6:ea:8b:51:54:b6:ba:
         12:3f:84:06:83:af:58:e8:74:8d:d9:48:b5:51:69:98:0a:ec:
         d0:2e:ee:f4:b2:17:95:2f:a2:51:f7:54:56:6b:5b:3a:59:1d:
         41:66:d2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:57 2025 by rpki-client