This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File:                     rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier:          jY1y+AwrLFuFrGwGE3hnLDBIMvqPp+y0YMpSGGSqRi8=
Subject key identifier:   09:79:88:43:21:AE:E3:83:46:A1:2F:56:03:66:7F:F5:7E:CC:E7:3B
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number:          01C7
Signing time:             Fri 05 Dec 2025 01:12:15 +0000
Manifest this update:     Fri 05 Dec 2025 01:12:14 +0000
Manifest next update:     Fri 12 Dec 2025 01:12:14 +0000
Files and hashes:         1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: p7YeWHnWxPyklAkPZCz0FRkOJMKUCBD0WKlFmPV/Z0E=)
                          2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: p81EH8N+mq+tuXFMTqadpbhtGnx8x8sovmy9swXxzCM=)
                          3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: GGQZQXITbCi35kDi1cszvpoNDF4GQHNFV1AYsPL4NFA=)
                          4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Dec  5 01:12:14 2025 GMT
            Not After : Dec 12 01:12:14 2025 GMT
        Subject: CN=6932316f-3235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:e5:c6:3b:4b:f0:84:3e:a7:5b:c1:15:44:
                    d7:9f:26:b5:58:19:2a:88:a1:dd:ec:eb:a6:6c:45:
                    ca:ed:55:9c:1a:0e:3f:4d:18:c8:ce:75:49:d9:14:
                    04:55:42:24:a1:0d:31:3c:68:d6:cf:1d:d7:64:81:
                    38:94:44:3d:19:fb:da:59:a2:83:b8:0f:bc:c9:0a:
                    ce:d6:cc:c3:4a:2b:d8:96:5e:42:fb:a6:cc:ac:94:
                    48:b5:aa:00:6c:39:13:3e:01:28:5b:36:3c:07:3b:
                    55:01:fc:9c:1c:0c:75:ee:7c:34:8f:9c:77:1b:d7:
                    41:36:91:44:44:b4:92:ed:f3:9c:83:df:a5:a1:3c:
                    cb:d1:4b:06:4e:fc:4c:a5:4b:71:85:e6:64:2a:8b:
                    4f:47:3c:33:2a:77:b2:a4:ee:6a:b4:55:d4:8b:4a:
                    15:dd:ef:fe:30:74:53:5f:b5:d0:d7:c1:52:87:4d:
                    eb:1c:94:a6:3e:b7:c0:73:e3:e9:be:8f:b1:47:3a:
                    80:13:6e:8d:d2:bf:7e:53:4f:43:23:87:fe:91:88:
                    3b:7b:bb:27:ce:27:91:ee:0a:8b:c5:f1:5d:f8:e2:
                    be:16:b4:e4:c7:68:3c:cf:4b:71:02:15:cc:17:12:
                    d4:9c:4e:e5:b6:93:ae:4b:c4:af:e7:f7:95:b7:d6:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:79:88:43:21:AE:E3:83:46:A1:2F:56:03:66:7F:F5:7E:CC:E7:3B
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a7:be:e4:46:73:d5:a1:4d:34:e2:f6:8a:a6:9c:a7:1f:1b:
         3f:07:16:ba:2a:c6:53:ba:b5:fe:65:71:62:9b:6c:67:76:fa:
         c2:dc:3e:4c:b6:dd:76:23:79:d4:b0:c3:45:da:d3:cf:aa:18:
         c4:5f:d2:3c:f1:26:2a:5c:e1:94:bb:f4:62:c7:4d:4b:bf:05:
         a7:24:e7:a4:18:ea:da:1c:82:6e:a7:ab:a5:7e:80:cb:9c:0d:
         4d:3b:92:c6:6e:04:db:bb:f7:29:a4:f1:7b:40:cb:3f:09:dc:
         30:31:43:2f:e6:5f:cd:0a:13:c7:c1:67:0f:78:a2:68:e0:64:
         64:a5:05:92:3e:d2:40:e7:85:74:08:81:38:a2:34:3b:ad:dc:
         59:f2:3b:92:8e:49:81:8f:7b:6a:db:a3:74:cb:37:f0:9e:b3:
         d0:45:9e:f2:3a:b3:e5:6e:ef:b9:af:b6:0c:9c:3e:84:60:42:
         0a:1e:bd:0f:40:ec:ce:91:2c:75:08:06:a2:e3:9b:0d:4a:9f:
         e7:10:9c:a8:f9:e7:2c:60:99:4f:d1:c4:3b:b2:88:ef:7d:2b:
         ca:0d:c2:8d:7f:2e:43:62:35:27:a0:e5:dc:4c:8a:6c:9d:d7:
         5f:f0:a5:aa:f5:f1:b0:5b:41:26:d6:db:f9:ac:c5:32:f9:83:
         9b:4e:da:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:33 2025 by rpki-client