This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
File:                     YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json)
Hash identifier:          HrMQkn1/qdU43sG+4cxtOcEXkEKSJg4mjbgI1cSbMBw=
Subject key identifier:   48:8F:1B:18:72:9A:09:05:E2:19:9E:FA:E4:BC:80:2E:F5:26:44:37
Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01
Certificate issuer:       /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
Certificate serial:       0641
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
Manifest number:          063A
Signing time:             Thu 04 Dec 2025 21:28:12 +0000
Manifest this update:     Thu 04 Dec 2025 21:28:11 +0000
Manifest next update:     Thu 11 Dec 2025 21:28:11 +0000
Files and hashes:         1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: 4cSLn0gsYmvhUQ+WvSjwAycy/6Z0F+4l0OZS4KBZuDc=)
                          2: 6D5F7C74B99611EBB5E9AE5EC4F9AE02.roa (hash: bUC1i6U8bBn9UfWkY4L4fN9q3qdDlIRzcJbNDpJZl6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl
                          rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1601 (0x641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162CCE, serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
        Validity
            Not Before: Dec  4 21:28:11 2025 GMT
            Not After : Dec 11 21:28:11 2025 GMT
        Subject: CN=6931fceb-e491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:e1:6a:57:02:b7:2c:9f:a7:e8:e4:a3:a4:
                    e3:88:bc:f7:4c:48:eb:f4:25:44:47:84:b2:65:26:
                    68:a3:d4:f2:80:24:63:34:7a:1a:e4:3c:74:32:fa:
                    a4:fa:6d:22:27:eb:0e:62:10:45:91:ce:b2:8c:7a:
                    17:54:9a:94:e1:1e:64:b5:8a:62:3f:7f:56:17:a1:
                    a2:26:bb:b7:21:47:46:66:54:b3:52:f7:77:f5:94:
                    39:ca:00:a4:1d:0c:b4:e0:84:01:81:7d:4c:8f:fd:
                    0d:82:20:93:ce:5c:55:9e:3c:31:11:6a:a9:6b:b9:
                    4c:47:09:48:ea:9a:3d:15:c3:26:80:2b:57:be:c9:
                    45:0f:c8:91:97:6f:14:18:b4:37:58:a7:d8:39:0a:
                    1b:fd:85:61:bf:b1:f2:4c:a5:a4:3c:d8:f8:07:ac:
                    64:c0:45:7a:f7:4f:bf:f5:8c:b9:6b:1b:af:8a:d9:
                    26:b8:bc:9b:45:bf:d0:54:94:d8:1c:df:41:07:8f:
                    28:58:6b:fa:7d:0e:2c:66:e3:f6:cc:68:ec:f4:f9:
                    da:fd:70:12:4e:2f:df:af:b8:c3:ad:1e:8e:d8:14:
                    db:8e:3e:fb:09:8a:7d:3b:1e:8c:52:7d:2c:a9:8d:
                    bf:97:2e:80:d5:1f:1a:67:e5:69:1b:58:58:c8:12:
                    d3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8F:1B:18:72:9A:09:05:E2:19:9E:FA:E4:BC:80:2E:F5:26:44:37
            X509v3 Authority Key Identifier:
                keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:28:6b:ff:4e:11:3e:51:7c:9a:d2:8a:86:f0:75:66:73:17:
         d8:36:79:9a:cb:e0:19:1c:1e:57:50:1a:52:e9:98:d9:58:30:
         d9:0a:d7:13:ca:bf:10:b1:93:f8:60:1c:cc:08:ec:cd:2e:f7:
         95:80:68:5a:1b:55:f5:0c:ea:22:4e:73:ee:ef:9d:42:d7:e0:
         4a:0e:bf:b3:5c:95:89:18:0e:6a:fb:19:c3:18:52:23:b5:60:
         f2:35:45:c3:a5:ee:06:a3:ae:90:5e:7c:12:a2:89:f9:cc:2f:
         1e:45:22:91:e5:ed:7a:02:4c:0a:50:a2:c8:e1:50:c1:78:01:
         20:d7:b7:dd:b9:c1:88:99:b1:b6:bc:db:41:c4:7d:e2:be:ab:
         2f:2c:3d:b9:e5:4c:03:96:08:e6:77:e0:b2:9e:06:c1:de:de:
         5b:43:a7:69:a2:45:0d:07:57:01:8b:61:b8:68:40:53:0c:88:
         73:b6:20:8f:ca:45:71:93:b0:8a:e3:76:e1:20:40:b8:db:5c:
         79:63:92:a6:e8:ac:a8:c9:95:c8:0e:3e:06:a3:f0:ba:59:46:
         54:df:bb:c2:74:e2:8f:fa:18:64:25:e1:02:ad:1a:a9:05:9e:
         59:33:58:88:27:e7:b0:2a:84:8b:b2:21:f4:6f:4a:42:33:e9:
         b6:d7:19:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjJDQ0UxMTAvBgNVBAUTKDYxRjQ1REM1NEY0N0UyNTJGQUM2NTUyRERCQjM5NjU4
NTRDNkM4MDEwHhcNMjUxMjA0MjEyODExWhcNMjUxMjExMjEyODExWjAYMRYwFAYD
VQQDEw02OTMxZmNlYi1lNDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArRThalcCtyyfp+jko6TjiLz3TEjr9CVER4SyZSZoo9TygCRjNHoa5Dx0Mvqk
+m0iJ+sOYhBFkc6yjHoXVJqU4R5ktYpiP39WF6GiJru3IUdGZlSzUvd39ZQ5ygCk
HQy04IQBgX1Mj/0NgiCTzlxVnjwxEWqpa7lMRwlI6po9FcMmgCtXvslFD8iRl28U
GLQ3WKfYOQob/YVhv7HyTKWkPNj4B6xkwEV690+/9Yy5axuvitkmuLybRb/QVJTY
HN9BB48oWGv6fQ4sZuP2zGjs9Pna/XASTi/fr7jDrR6O2BTbjj77CYp9Ox6MUn0s
qY2/ly6A1R8aZ+VpG1hYyBLTfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiPGxhy
mgkF4hme+uS8gC71JkQ3MB8GA1UdIwQYMBaAFGH0XcVPR+JS+sZVLduzllhUxsgB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkNDRS9CNzU1REEyOEI5
OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRsTDZ4bFV0MjdPV1dGVEd5
QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lmUmR4VTlINGxMNnhsVXQyN09XV0ZUR3lBRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MkNDRS9CNzU1REEyOEI5OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRs
TDZ4bFV0MjdPV1dGVEd5QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsKGv/ThE+UXya0oqG8HVmcxfYNnmay+AZHB5XUBpS6ZjZWDDZCtcT
yr8QsZP4YBzMCOzNLveVgGhaG1X1DOoiTnPu751C1+BKDr+zXJWJGA5q+xnDGFIj
tWDyNUXDpe4Go66QXnwSoon5zC8eRSKR5e16AkwKUKLI4VDBeAEg17fducGImbG2
vNtBxH3ivqsvLD255UwDlgjmd+CyngbB3t5bQ6dpokUNB1cBi2G4aEBTDIhztiCP
ykVxk7CK43bhIEC421x5Y5Km6KyoyZXIDj4Go/C6WUZU37vCdOKP+hhkJeECrRqp
BZ5ZM1iIJ+ewKoSLsiH0b0pCM+m21xkx
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:21:48 2025 by rpki-client