This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
File:                     yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json)
Hash identifier:          3iQKO/VVLo6hww/YZhuodyWcmRAUeKdpz3qbGyXQQ/U=
Subject key identifier:   83:A7:63:EF:F3:66:0A:6F:AD:40:79:DE:2B:98:50:F9:D5:4D:25:2C
Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
Certificate issuer:       /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
Manifest number:          A5
Signing time:             Fri 05 Dec 2025 04:16:30 +0000
Manifest this update:     Fri 05 Dec 2025 04:16:29 +0000
Manifest next update:     Fri 12 Dec 2025 04:16:29 +0000
Files and hashes:         1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: iycRRKstrFrx2uby2JjQ4g2zDmnm/AhKEeldLqe2nuo=)
                          2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: vXg2V9oSq+UecV6UR/hi4Z0CckYReJT3wpjl4H/MqsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
                          rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
        Validity
            Not Before: Dec  5 04:16:29 2025 GMT
            Not After : Dec 12 04:16:29 2025 GMT
        Subject: CN=69325c9d-1fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:57:3a:25:d8:0a:f3:a6:3d:ba:ca:6d:00:
                    ae:71:19:c0:76:fb:5b:c0:1d:99:0a:3e:b1:c5:04:
                    54:be:6f:bf:df:c3:61:6e:8c:28:2a:6b:4c:81:c5:
                    dc:63:24:fd:35:bd:a4:f6:35:36:c0:02:c8:e8:16:
                    bd:f6:98:1c:70:2b:01:52:c6:d2:84:b9:f1:5a:cf:
                    ca:80:f8:3d:17:74:74:fe:a9:55:0f:b9:68:71:c6:
                    28:90:75:29:22:f0:b4:39:b0:f6:67:32:3a:2e:37:
                    da:b8:ae:4a:b3:9e:86:49:ff:92:40:76:ab:3e:56:
                    33:57:e5:fe:22:47:f7:53:4f:fa:9f:29:06:01:06:
                    c6:3b:0b:b1:51:98:6f:64:36:ff:58:10:f1:b5:73:
                    53:c5:55:11:5f:cc:e0:8e:0d:c9:11:ac:9f:8b:49:
                    04:c2:e1:a4:76:fb:ed:3b:3f:76:6b:4d:3d:bd:21:
                    d6:67:39:f6:7a:f1:20:7c:b0:f6:88:7e:96:75:6c:
                    4b:33:97:f0:f1:aa:08:6e:60:2b:e8:95:0a:dd:6a:
                    cc:7a:c9:bb:40:55:2c:8d:cc:7e:7f:da:d3:a4:da:
                    75:90:1b:a9:fe:f1:95:9d:4b:47:b0:fd:ac:28:27:
                    0a:89:cc:b3:56:7b:45:0c:57:50:01:af:59:90:cf:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A7:63:EF:F3:66:0A:6F:AD:40:79:DE:2B:98:50:F9:D5:4D:25:2C
            X509v3 Authority Key Identifier:
                keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:12:08:ff:9a:cd:b1:ca:49:dc:22:3d:34:58:a8:ce:ad:f5:
         9b:48:a0:8b:c1:a0:49:cd:41:8b:ac:2c:d4:72:ec:c3:ae:8d:
         03:a7:1b:8b:9a:bc:ad:4c:af:8b:b3:5f:25:a1:70:54:3c:7d:
         7e:30:14:77:57:b7:ac:a7:c7:a9:00:1f:e2:65:0b:bc:a7:a8:
         4f:23:e7:b3:89:89:c0:89:ec:fe:7a:c3:eb:07:57:b7:d0:49:
         ad:30:64:24:08:ca:2a:21:2b:0e:24:b3:10:9a:d7:0d:72:68:
         b3:9e:78:8d:72:ca:49:88:70:83:79:66:35:ef:8b:56:3c:6f:
         a2:d9:15:9f:47:6f:9f:62:d9:af:3a:6f:6c:e9:8f:21:80:13:
         a0:aa:79:e2:b9:17:06:b6:92:15:cc:a5:8f:d5:d8:f4:2d:4f:
         c0:f8:fd:01:73:d6:01:56:30:06:9c:08:a8:78:3e:05:68:ba:
         6b:e2:93:43:40:d0:14:d0:36:96:1d:c1:76:5b:6f:77:9c:b1:
         46:ab:82:76:ab:f2:c1:c0:93:ef:8d:35:ef:67:0a:f7:c0:33:
         16:2d:d1:3e:01:61:e7:cb:3c:7e:82:c7:26:28:bf:43:d8:cd:
         8d:cf:31:91:4e:0c:d0:15:88:bf:1e:3e:9e:49:aa:a6:d8:f1:
         2c:c9:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:46:52 2025 by rpki-client