This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
File:                     bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft (raw, json)
Hash identifier:          9a+KCMGf9iawiGOu/VS+dx1M49AXoelRjF4pJ9D4hlQ=
Subject key identifier:   50:79:3B:90:4F:94:6C:02:B6:94:C3:B4:DB:4D:34:14:F4:1A:79:06
Authority key identifier: 6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
Certificate issuer:       /CN=A913695E/serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
Manifest number:          53
Signing time:             Fri 05 Dec 2025 05:04:41 +0000
Manifest this update:     Fri 05 Dec 2025 05:04:40 +0000
Manifest next update:     Fri 12 Dec 2025 05:04:40 +0000
Files and hashes:         1: bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl (hash: xRlIlkQwoBZ1WrGIp5ABfJmDGGuJym+dsxotnOH+lw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl
                          rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913695E, serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
        Validity
            Not Before: Dec  5 05:04:40 2025 GMT
            Not After : Dec 12 05:04:40 2025 GMT
        Subject: CN=693267e9-73ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:56:9c:8a:3f:5c:15:2b:a6:60:c2:e8:4e:
                    ec:c9:1b:a0:ab:c5:2a:6d:59:93:f6:8e:da:cb:6f:
                    73:ef:1e:c4:f6:0d:34:ae:85:a8:67:32:8c:3a:99:
                    9b:81:c6:43:93:e2:e7:6a:fd:3f:b1:50:07:40:4b:
                    11:d3:fe:cc:71:d7:7a:f2:0d:47:e4:f8:6b:4d:e8:
                    ae:8e:95:fa:bf:cd:6c:4b:13:d1:ab:d9:2b:bb:12:
                    50:e3:15:af:6a:a7:5d:f6:08:8f:8c:ac:2d:da:32:
                    ad:b5:26:9c:4e:41:63:de:de:9c:cc:d4:bb:32:c4:
                    03:72:a2:d9:78:2d:3b:ba:8c:11:19:f1:c2:05:a3:
                    ae:48:08:96:59:bf:38:1e:84:88:dc:3b:d4:e9:a8:
                    ba:fc:e5:a9:8e:60:47:e9:b8:17:77:46:00:a8:07:
                    f3:7c:4d:5c:d2:cc:ce:46:15:4f:1a:1c:fc:6a:42:
                    d3:76:8e:02:c4:d0:64:a9:5e:58:f9:f4:b3:55:b5:
                    eb:9c:28:98:15:e7:d2:7c:a9:bc:49:b9:81:42:4f:
                    ec:91:ad:9c:a1:f1:74:4a:f9:37:82:d8:e1:8d:8c:
                    73:f4:d1:8c:78:31:25:d2:fa:11:00:ee:f4:63:d1:
                    80:01:ef:d3:ff:48:c3:52:a0:e2:bf:f3:9f:1d:19:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:79:3B:90:4F:94:6C:02:B6:94:C3:B4:DB:4D:34:14:F4:1A:79:06
            X509v3 Authority Key Identifier:
                keyid:6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:27:8e:45:ce:b5:44:14:d5:56:f1:4e:34:af:56:67:ff:a4:
         68:26:43:8c:f8:e9:27:4b:7c:6f:12:17:52:52:19:9b:1e:60:
         70:34:48:41:61:c7:75:e0:ac:17:0d:64:bd:5c:2c:90:7b:b7:
         3c:04:09:51:39:08:9e:60:d2:35:13:e1:36:d0:9a:a9:49:a1:
         f8:78:1b:3a:47:d1:68:84:ea:9c:92:65:ff:41:9c:a4:3b:68:
         80:9b:b8:b6:f5:6f:ca:c5:b5:09:ae:03:88:57:b0:fd:9f:83:
         6f:16:c5:a6:98:13:ee:f0:79:db:77:88:f4:89:d4:b2:63:8c:
         2b:d7:60:48:26:82:8f:38:89:68:58:43:c0:e8:e8:63:63:ed:
         29:bc:59:3a:8d:5e:a4:d9:37:bc:26:4b:53:1b:30:57:b3:57:
         5c:5a:91:05:ca:01:68:b5:89:c0:00:b0:58:9e:06:ec:d1:77:
         41:17:d6:2a:a3:cf:48:27:d1:2e:e3:f2:b8:95:5c:cb:6e:05:
         2a:99:aa:0d:93:58:90:fe:11:63:ac:93:00:82:21:ec:5f:ad:
         95:af:7c:73:0a:fa:b9:bf:36:05:cb:ee:f0:82:47:c2:a5:36:
         0f:f0:7a:04:e7:3d:79:10:5f:95:9d:61:8a:b8:ff:45:39:cb:
         ac:dd:52:94
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Njk1RTExMC8GA1UEBRMoNkQ4NDE3NjE3MjU4MDM5MkJBMkEzMjVGNzE3QjFFQ0E0
RjBEODc5MzAeFw0yNTEyMDUwNTA0NDBaFw0yNTEyMTIwNTA0NDBaMBgxFjAUBgNV
BAMTDTY5MzI2N2U5LTczZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/sVacij9cFSumYMLoTuzJG6CrxSptWZP2jtrLb3PvHsT2DTSuhahnMow6mZuB
xkOT4udq/T+xUAdASxHT/sxx13ryDUfk+GtN6K6Olfq/zWxLE9Gr2Su7ElDjFa9q
p132CI+MrC3aMq21JpxOQWPe3pzM1LsyxANyotl4LTu6jBEZ8cIFo65ICJZZvzge
hIjcO9TpqLr85amOYEfpuBd3RgCoB/N8TVzSzM5GFU8aHPxqQtN2jgLE0GSpXlj5
9LNVteucKJgV59J8qbxJuYFCT+yRrZyh8XRK+TeC2OGNjHP00Yx4MSXS+hEA7vRj
0YAB79P/SMNSoOK/858dGZKlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUHk7kE+U
bAK2lMO02000FPQaeQYwHwYDVR0jBBgwFoAUbYQXYXJYA5K6KjJfcXseyk8Nh5Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2OTVFL0YwQTFGRTUyNTM0
MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL2JZUVhZWEpZQTVLNktqSmZjWHNleWs4Tmg1
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYllRWFlYSllBNUs2S2pKZmNYc2V5azhOaDVNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2
OTVFL0YwQTFGRTUyNTM0MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL2JZUVhZWEpZQTVL
NktqSmZjWHNleWs4Tmg1TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFAnjkXOtUQU1VbxTjSvVmf/pGgmQ4z46SdLfG8SF1JSGZseYHA0SEFh
x3XgrBcNZL1cLJB7tzwECVE5CJ5g0jUT4TbQmqlJofh4GzpH0WiE6pySZf9BnKQ7
aICbuLb1b8rFtQmuA4hXsP2fg28WxaaYE+7wedt3iPSJ1LJjjCvXYEgmgo84iWhY
Q8Do6GNj7Sm8WTqNXqTZN7wmS1MbMFezV1xakQXKAWi1icAAsFieBuzRd0EX1iqj
z0gn0S7j8riVXMtuBSqZqg2TWJD+EWOskwCCIexfrZWvfHMK+rm/NgXL7vCCR8Kl
Ng/wegTnPXkQX5WdYYq4/0U5y6zdUpQ=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:06:48 2025 by rpki-client