This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
File:                     yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json)
Hash identifier:          GDLn3K1Bvl9LKKKpL7OasFYSjwU8GwNQ4ccuj6KKEM0=
Subject key identifier:   AF:CB:62:BD:CE:26:0E:9C:3B:8F:3C:D8:7F:BF:23:55:27:BE:FD:A4
Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
Certificate issuer:       /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Certificate serial:       0E99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
Manifest number:          203E
Signing time:             Thu 04 Dec 2025 16:48:46 +0000
Manifest this update:     Thu 04 Dec 2025 16:48:46 +0000
Manifest next update:     Thu 11 Dec 2025 16:48:46 +0000
Files and hashes:         1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: yV04PI48VKpc7qDE7zUru53vPLZcS1xFj7Dl9qFCKC0=)
                          2: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: 2QTo+CsdRhAVYGY+SP4UeTuLXQh1z3BW1C7/XMRXisw=)
                          3: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: qTqcBFpr622OYkqG96eDnnoJ09wPpnvN7CHOU2zyZG0=)
                          4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: SV6dYe0/qbcbeBjCTRLSVOKAd3cmZlbo1prAD3jSVSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
                          rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3737 (0xe99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
        Validity
            Not Before: Dec  4 16:48:46 2025 GMT
            Not After : Dec 11 16:48:46 2025 GMT
        Subject: CN=6931bb6e-2b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:6b:9a:ef:5c:3e:fd:4c:97:8b:b4:a1:25:
                    46:bd:6a:54:02:c0:32:f6:12:57:ff:0d:6f:af:32:
                    c9:28:38:ef:67:87:1a:32:28:91:df:45:92:77:dd:
                    96:d0:ca:be:88:33:e5:46:70:ca:44:1e:46:17:02:
                    42:b6:44:e9:16:cb:6c:a6:0e:f8:ab:fd:6d:0b:f8:
                    cf:6d:94:76:48:be:f6:41:57:a9:f7:64:06:b4:c9:
                    13:ed:15:2b:0f:e7:be:de:5d:6f:6b:68:2b:fe:26:
                    88:5f:24:ea:1c:a6:17:68:38:16:14:5b:a2:4d:40:
                    31:9d:0b:b6:0e:cb:99:f9:91:68:d6:49:87:eb:d2:
                    4f:a5:4d:ab:29:69:f0:26:af:c3:5b:81:45:59:07:
                    55:95:9e:e3:0f:a9:3a:a8:6c:66:b8:47:2f:4d:4b:
                    72:7d:6e:0e:c9:39:f9:3e:a2:dd:55:7d:72:2c:43:
                    d7:94:b9:c8:7c:03:8d:92:9c:c1:c8:43:91:39:31:
                    02:71:5b:45:28:24:cb:2c:4e:fe:ec:d7:0c:f6:b8:
                    7d:1c:eb:82:57:18:e6:07:f9:2e:16:b6:e9:0a:79:
                    dc:68:47:4f:30:40:9f:5f:5f:d6:f2:fe:fb:8f:c8:
                    9e:0c:dd:ad:a8:e2:5d:a1:1b:d1:a5:d1:c2:fc:8b:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CB:62:BD:CE:26:0E:9C:3B:8F:3C:D8:7F:BF:23:55:27:BE:FD:A4
            X509v3 Authority Key Identifier:
                keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d0:8f:5b:04:a5:04:b5:c0:b4:2f:53:32:fa:cc:00:1d:42:
         08:64:4c:e2:8b:c6:d4:8a:74:cc:ab:2f:28:31:47:ed:8e:17:
         6a:a0:bf:96:cd:12:50:9d:28:5f:ca:f4:f0:3b:2a:36:14:1a:
         66:81:e2:07:09:a2:05:54:7b:3c:26:b7:9c:72:cd:6b:89:bc:
         b2:8b:9b:eb:2f:72:de:67:4d:dd:4b:6c:ee:64:c0:b2:16:64:
         b8:35:26:71:f2:61:bb:7e:ce:69:9e:8c:ce:97:e0:88:10:86:
         95:7b:b0:86:e6:d1:01:92:ed:76:9d:2e:f8:c0:96:d6:91:77:
         cc:e3:60:15:ba:93:0b:ed:27:96:f3:09:95:7d:01:09:f2:1b:
         6f:9e:0d:1e:5a:c3:d9:9f:63:03:9e:98:3a:6a:cd:ef:66:ff:
         9c:f3:2c:22:3c:f6:ce:6b:84:e3:4e:a9:7e:b2:cb:08:79:3b:
         27:c9:43:64:45:de:d3:00:6e:01:e7:b5:3c:f9:21:82:e9:d7:
         c6:b8:ad:76:b7:0f:92:8c:09:ca:04:9c:3c:8d:30:5e:90:a6:
         db:fe:1c:49:d6:d5:a9:8c:9e:6e:a9:e4:e5:08:cf:48:4c:b8:
         97:17:c3:8c:9f:1d:b0:30:c3:2d:3c:66:06:39:42:cf:63:66:
         2a:aa:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:56:13 2025 by rpki-client