This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
File:                     LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json)
Hash identifier:          zNbYU4ZSsT10P9ijVBHusguht9ku85M7OUOGMtg1Qco=
Subject key identifier:   E4:BB:95:F4:51:86:25:1E:96:3E:0A:9E:1D:53:BD:02:6E:D5:F8:77
Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8
Certificate issuer:       /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
Manifest number:          01D1
Signing time:             Tue 09 Dec 2025 01:22:49 +0000
Manifest this update:     Tue 09 Dec 2025 01:22:49 +0000
Manifest next update:     Tue 16 Dec 2025 01:22:49 +0000
Files and hashes:         1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: vFsdmSpGXNr9zIht7KV+4tyG606YzBz0ea1IV8Wv0UA=)
                          2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: uvZ2Q94gPhmYQwiI4YLVYozC9g+L2KL5OS58nY+uLv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl
                          rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 01:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
        Validity
            Not Before: Dec  9 01:22:49 2025 GMT
            Not After : Dec 16 01:22:49 2025 GMT
        Subject: CN=693779e9-35ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:22:57:7a:97:f7:f3:04:2f:fa:4e:0d:f0:72:
                    bb:98:09:0d:9f:ac:57:61:99:c1:d0:d9:8b:4a:c9:
                    e1:5b:ab:95:80:dd:9a:dd:06:a3:d6:d3:d8:48:0f:
                    a6:fd:0e:9f:7a:3e:fe:32:33:31:c2:07:85:2f:a0:
                    57:f5:a7:c4:4c:69:aa:6b:8a:94:ef:40:7e:b6:7e:
                    d8:24:5f:29:f7:bf:5d:41:f2:46:a6:2b:10:d7:22:
                    ad:4c:2f:7e:c6:8d:81:6b:3b:cc:e1:bf:37:36:dc:
                    7a:84:d4:06:b3:72:a6:9d:bd:32:a8:71:b4:26:59:
                    0a:0c:d9:f1:20:ce:72:f5:0e:54:95:87:84:97:e6:
                    3c:8d:8f:71:0c:43:92:d7:8f:4c:4c:76:f0:fb:30:
                    38:6c:de:61:e5:54:a5:bd:97:c8:bd:59:30:00:db:
                    d4:dc:20:10:0d:75:51:b9:74:83:44:86:fa:48:4a:
                    36:7f:2e:89:1c:90:18:a9:51:09:2c:41:15:14:36:
                    d7:eb:3e:63:9d:e5:46:8a:57:85:a6:6b:53:45:76:
                    ca:7e:2a:67:3a:98:69:5c:57:56:28:75:aa:f2:e1:
                    bd:eb:10:37:30:61:b5:32:5f:a2:70:84:60:1c:44:
                    c8:62:bd:af:b9:9c:d2:03:1a:82:ee:51:0a:2b:07:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BB:95:F4:51:86:25:1E:96:3E:0A:9E:1D:53:BD:02:6E:D5:F8:77
            X509v3 Authority Key Identifier:
                keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d8:a6:6b:ef:21:e7:ab:c8:66:49:d1:08:dd:ac:56:de:59:
         33:15:14:b5:2b:c1:38:e2:d8:75:5c:75:25:b7:ba:72:27:2f:
         1e:be:a2:c9:f8:8b:ac:fb:e0:86:59:5e:e0:02:10:0e:41:a9:
         ab:1f:40:29:60:3b:72:c6:6a:66:9d:94:e0:c9:21:3f:8f:fb:
         b7:3f:3d:6a:66:6d:72:e8:3c:c4:a8:7f:20:c0:cf:fb:48:33:
         98:d9:fe:2c:07:7e:8e:3c:3e:5a:e0:fb:35:2b:cb:c7:33:ba:
         de:c2:6c:c1:e2:3c:27:e1:71:ac:37:28:1e:19:74:29:83:44:
         ec:da:bf:fa:e2:96:14:49:96:df:a8:c5:04:4f:f8:ed:2b:20:
         e4:bc:ef:84:09:13:05:d6:44:1f:3c:17:64:8b:c6:a8:09:7b:
         d5:8d:17:01:67:93:cd:23:a0:5f:d4:06:f9:7d:28:a3:1d:40:
         d8:2c:2e:1b:c3:b9:fd:b7:c5:ae:f7:02:47:48:4b:c7:b0:83:
         75:dc:e8:ca:e0:82:5a:e5:41:94:ea:d8:e3:61:44:9f:f2:f1:
         68:6f:c5:7b:b4:58:ec:73:7d:1b:65:cd:22:da:13:35:9b:a1:
         e8:07:47:11:31:c8:04:f3:6a:e7:77:c9:63:90:de:79:65:c9:
         80:45:bd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 16:57:15 2025 by rpki-client