This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
File:                     3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json)
Hash identifier:          MLBgm+kPzVu0tCpjiBg8Y85kcKXpS+ZCVI/mgTCbWj4=
Subject key identifier:   2F:55:B1:90:1E:A4:50:3E:B3:FB:4C:19:22:7E:F6:D3:8D:5A:A9:E5
Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09
Certificate issuer:       /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
Certificate serial:       03B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
Manifest number:          03AB
Signing time:             Thu 04 Dec 2025 23:09:30 +0000
Manifest this update:     Thu 04 Dec 2025 23:09:29 +0000
Manifest next update:     Thu 11 Dec 2025 23:09:29 +0000
Files and hashes:         1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: RzMoI+FLz6c3YlXQenSWKzHKMXiTBl/7L/ptIMMiVWU=)
                          2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: NYEcly+S03KH8Gz/ED4JBmnf9asUtp3vEim2ZrMueG0=)
                          3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: /dpglo9CFx73F4sqDk7WZ21gpjG8xDFFFJkPbHJ8/V0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl
                          rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
        Validity
            Not Before: Dec  4 23:09:29 2025 GMT
            Not After : Dec 11 23:09:29 2025 GMT
        Subject: CN=693214aa-1bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:a5:e4:27:a8:21:3a:00:f6:58:05:66:a2:
                    ae:ef:f3:73:6f:8b:61:17:50:d1:75:1f:56:bd:cf:
                    72:03:22:0a:88:fd:e8:fd:a8:05:e9:7f:f4:ab:e6:
                    4d:49:15:57:99:26:f3:4b:ce:c5:cc:e5:1a:18:df:
                    58:d5:ac:20:f7:e1:ef:39:6b:ab:eb:5b:92:82:0a:
                    31:b4:cc:6d:ab:71:8f:aa:be:83:cd:1d:f6:fc:65:
                    7e:a7:f0:0b:0e:5b:ff:43:14:e1:d8:72:af:d1:90:
                    63:f5:b6:46:32:3b:a7:d8:a3:35:2d:80:2d:5b:8b:
                    bf:94:f3:b0:8c:c1:7d:b3:94:00:a3:de:dd:b1:6c:
                    95:d6:4a:a7:44:69:92:01:ed:d5:36:81:9c:09:64:
                    88:84:c4:37:59:2e:b1:1a:b9:52:a1:c4:ea:94:74:
                    47:5c:35:08:4b:64:ee:01:5a:a0:c3:9e:71:16:95:
                    c1:80:83:87:0d:06:a9:bf:d5:2e:7b:04:41:a0:6b:
                    62:55:d8:8b:9c:79:de:78:00:15:59:b9:69:f2:23:
                    6c:bd:7a:24:7c:1c:90:b1:15:05:19:c6:06:87:f5:
                    6a:1e:57:25:06:d6:6d:ff:a5:e1:6e:98:52:f4:ee:
                    60:ac:5c:de:6e:a5:8d:3a:0e:82:09:d9:cf:5c:0a:
                    27:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:55:B1:90:1E:A4:50:3E:B3:FB:4C:19:22:7E:F6:D3:8D:5A:A9:E5
            X509v3 Authority Key Identifier:
                keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:74:7e:cc:da:18:5d:a9:6f:c6:fc:ab:87:a1:4f:e8:10:2e:
         5d:52:71:d1:c8:ec:d3:2f:85:eb:a7:7d:b2:57:d8:cc:04:bc:
         9a:b0:eb:28:27:7d:61:be:b0:07:12:8f:55:47:5a:a9:25:6f:
         f0:fe:8d:3d:55:f1:17:9b:ec:78:76:ba:95:ef:63:91:9e:3f:
         25:b7:ce:50:c0:8d:5a:22:9c:af:b1:da:6a:20:d9:eb:02:73:
         a8:83:5c:6e:90:db:30:1c:b3:c2:30:44:5b:fb:87:78:b4:e1:
         1f:ca:ac:10:92:b4:09:1b:62:bb:23:2b:ea:88:a5:99:a2:cd:
         fc:25:ee:4e:ed:d7:ab:69:9a:83:8d:07:f0:50:0e:6d:96:e2:
         12:df:98:a2:64:6a:9e:2f:af:8a:76:9a:f3:7a:97:d7:6b:ac:
         a4:7d:16:68:14:6f:e4:41:25:3b:cf:b9:55:5e:89:6d:14:31:
         a8:d8:51:18:6b:30:5c:98:97:90:34:90:4a:b4:67:ec:9f:93:
         21:6b:15:f6:fa:42:47:c7:bc:7d:f8:e8:9d:2a:18:e7:82:13:
         0f:a2:12:43:92:cc:7f:23:8f:27:2d:70:79:67:a4:b5:78:df:
         ff:27:c8:68:6c:cb:c5:3c:3d:e9:ef:e8:6d:08:a2:86:dd:f7:
         78:d8:ad:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:29:54 2025 by rpki-client