This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
File:                     YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json)
Hash identifier:          aH4GN7wb1whtWkIryjH8SvDyA3FK/cvTR++PntgNpIQ=
Subject key identifier:   B0:44:54:39:4A:A0:F1:71:CB:B3:F4:81:4F:C6:83:BB:FB:21:6C:7A
Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41
Certificate issuer:       /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41
Certificate serial:       0623
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
Manifest number:          0614
Signing time:             Thu 04 Dec 2025 21:37:27 +0000
Manifest this update:     Thu 04 Dec 2025 21:37:26 +0000
Manifest next update:     Thu 11 Dec 2025 21:37:26 +0000
Files and hashes:         1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: 24pCoqwlWNo1EFWgUke3TwNLH2FBxWlkzM/d6WJWhB4=)
                          2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: c8i5qCn+gNkfv/5fNHvXAX8xBeJK6Bb9xy8HlWH9b64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl
                          rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1571 (0x623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41
        Validity
            Not Before: Dec  4 21:37:26 2025 GMT
            Not After : Dec 11 21:37:26 2025 GMT
        Subject: CN=6931ff16-7037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:62:2a:6e:e7:ce:50:12:5f:48:6a:72:77:
                    03:22:a8:d1:38:95:1e:96:4a:a2:09:15:d8:d9:3d:
                    30:a4:7e:ae:98:8c:34:0c:e8:4a:91:cc:ad:59:02:
                    f1:80:36:48:78:ad:23:82:02:a7:e4:f4:58:af:84:
                    db:aa:5e:0b:53:b5:19:e9:e7:6c:43:68:68:44:06:
                    4e:df:97:01:28:35:4b:62:c5:3f:75:a4:c6:95:4c:
                    34:10:b0:fb:21:90:2c:fa:7c:79:99:e0:5b:a4:22:
                    81:f1:c0:87:af:b0:0d:21:f6:44:32:bb:6c:9a:3c:
                    04:0c:19:e3:a3:4d:a0:24:6d:d1:ec:2f:c7:ae:8f:
                    e9:03:cf:50:64:c5:47:d2:f2:e4:b7:eb:8d:99:1f:
                    fe:e9:b9:e3:9f:87:3f:02:c5:8f:c0:f1:fa:a8:62:
                    98:2f:14:aa:25:4e:ca:66:c1:95:03:6c:9d:bc:24:
                    8a:14:da:5e:fa:d9:ee:cf:d1:7e:e3:dc:2d:77:98:
                    49:6d:50:cb:02:15:2b:b6:50:da:0c:14:a4:46:99:
                    4c:2c:b8:66:26:67:7e:1c:ae:62:dd:40:49:29:c9:
                    0d:2d:76:75:b9:2f:6b:98:c3:11:65:fe:79:2f:44:
                    39:57:9b:a2:9a:0d:8e:ec:ad:f6:db:8e:1b:9c:cf:
                    90:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:44:54:39:4A:A0:F1:71:CB:B3:F4:81:4F:C6:83:BB:FB:21:6C:7A
            X509v3 Authority Key Identifier:
                keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4a:1e:59:4c:da:43:c2:d9:cd:9b:7a:00:34:90:c6:dd:d5:
         f8:55:71:5c:c1:30:9c:29:e0:d9:8b:37:f0:5e:e0:e6:af:5d:
         df:24:4d:ac:6d:d4:30:55:d7:04:ca:92:49:57:3d:30:49:f4:
         34:d2:4a:65:ac:a0:35:51:83:27:5a:29:77:5b:12:52:c7:73:
         c4:b6:6a:29:81:b5:e3:43:00:50:90:bc:c2:ac:9f:ce:3b:a5:
         c1:b2:f4:bc:cd:95:fe:69:81:aa:72:a9:95:43:b7:89:6d:b4:
         50:ac:e1:e6:3a:5c:78:77:ca:92:d0:84:13:85:75:73:8f:98:
         57:50:14:61:cc:4f:2f:d1:e4:89:04:f3:89:48:80:64:c2:0e:
         8c:84:f3:31:37:d7:8b:d7:e9:e0:55:4e:55:16:39:a4:5d:39:
         cb:3a:fb:85:ae:28:e7:15:ad:02:ba:6f:d7:29:5f:9f:50:bd:
         c4:1b:77:89:c9:52:04:d3:af:e2:61:ee:26:1a:eb:d3:47:83:
         83:ff:cc:bc:aa:db:96:0c:f0:b1:0e:d8:49:04:88:43:27:04:
         4f:f4:c8:ed:94:99:74:26:80:a4:30:a1:63:21:f7:05:be:be:
         52:a7:bc:0e:8d:3a:f7:13:72:ec:f4:e5:03:bc:95:d2:77:de:
         a3:d1:a3:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky
NjE0MTdDNDEwHhcNMjUxMjA0MjEzNzI2WhcNMjUxMjExMjEzNzI2WjAYMRYwFAYD
VQQDEw02OTMxZmYxNi03MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdxiKm7nzlASX0hqcncDIqjROJUelkqiCRXY2T0wpH6umIw0DOhKkcytWQLx
gDZIeK0jggKn5PRYr4Tbql4LU7UZ6edsQ2hoRAZO35cBKDVLYsU/daTGlUw0ELD7
IZAs+nx5meBbpCKB8cCHr7ANIfZEMrtsmjwEDBnjo02gJG3R7C/Hro/pA89QZMVH
0vLkt+uNmR/+6bnjn4c/AsWPwPH6qGKYLxSqJU7KZsGVA2ydvCSKFNpe+tnuz9F+
49wtd5hJbVDLAhUrtlDaDBSkRplMLLhmJmd+HK5i3UBJKckNLXZ1uS9rmMMRZf55
L0Q5V5uimg2O7K32244bnM+Q7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBEVDlK
oPFxy7P0gU/Gg7v7IWx6MB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE
RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjFFNi82MjdFRjE0MkNERTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGts
TjlYOG9sbHBUUGttRkJmRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4Sh5ZTNpDwtnNm3oANJDG3dX4VXFcwTCcKeDZizfwXuDmr13fJE2s
bdQwVdcEypJJVz0wSfQ00kplrKA1UYMnWil3WxJSx3PEtmopgbXjQwBQkLzCrJ/O
O6XBsvS8zZX+aYGqcqmVQ7eJbbRQrOHmOlx4d8qS0IQThXVzj5hXUBRhzE8v0eSJ
BPOJSIBkwg6MhPMxN9eL1+ngVU5VFjmkXTnLOvuFrijnFa0Cum/XKV+fUL3EG3eJ
yVIE06/iYe4mGuvTR4OD/8y8qtuWDPCxDthJBIhDJwRP9MjtlJl0JoCkMKFjIfcF
vr5Sp7wOjTr3E3Ls9OUDvJXSd96j0aPW
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:17 2025 by rpki-client