This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
File:                     yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json)
Hash identifier:          sOgtxrzSMlNO9aqQMEKER3rqKF7Sf1tl4fwt/20/K/0=
Subject key identifier:   1C:9B:78:F9:F8:72:8C:34:11:C5:F9:AF:D9:A0:4E:98:24:6A:81:A4
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Certificate issuer:       /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
Manifest number:          0107
Signing time:             Sat 06 Dec 2025 20:32:37 +0000
Manifest this update:     Sat 06 Dec 2025 20:32:36 +0000
Manifest next update:     Sat 13 Dec 2025 20:32:36 +0000
Files and hashes:         1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: vIPV4icH2O9wUrVq354sdnn4YIlVxNMiKcF7FBTjM94=)
                          2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: p1NZ9NnirQbZI+pUJKRFnk/LQesx95uqpmbnkuNBqak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
                          rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
        Validity
            Not Before: Dec  6 20:32:36 2025 GMT
            Not After : Dec 13 20:32:36 2025 GMT
        Subject: CN=693492e5-e85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:34:81:cd:ee:49:70:d9:98:1a:8d:c7:6e:
                    66:af:07:7b:ce:f9:96:78:c5:85:c2:7d:e3:8c:48:
                    e1:30:1b:b3:c9:ea:b5:99:f6:b2:40:b4:b6:38:d6:
                    9a:92:0a:ee:c3:2a:61:4c:f4:30:d5:e9:54:6a:0f:
                    14:cf:94:78:ba:15:76:d2:d6:3a:d0:22:e4:cd:b8:
                    8f:f6:3a:3c:d4:1c:79:ec:bc:d5:cf:d7:9a:76:de:
                    e3:6d:a3:54:96:4c:c2:84:88:7c:03:fe:07:a3:f9:
                    80:01:3c:f9:2b:bb:04:0d:54:e6:bf:e5:e9:83:74:
                    4e:37:07:00:70:1d:3b:69:8d:1f:89:ab:14:e3:a1:
                    ef:f0:0b:ad:51:65:83:df:60:e3:12:72:f8:4b:c6:
                    f3:72:56:e1:83:21:77:71:5e:d6:61:a3:e1:ab:ef:
                    dd:21:37:e3:f3:0d:6d:73:74:b5:5a:2a:8a:b8:ac:
                    a8:ae:e3:5e:f2:2f:d0:40:ed:bd:90:c3:18:92:27:
                    86:b8:e4:4c:35:9e:23:20:75:be:2a:47:be:26:66:
                    94:c2:50:38:88:3a:2b:6a:d7:48:aa:5a:22:f2:90:
                    64:94:b4:d4:45:5f:9b:e1:d9:b6:d5:21:af:63:da:
                    b3:93:ec:c0:04:59:24:8e:7c:71:a4:7b:6c:0e:5e:
                    f6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9B:78:F9:F8:72:8C:34:11:C5:F9:AF:D9:A0:4E:98:24:6A:81:A4
            X509v3 Authority Key Identifier:
                keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:06:a8:72:5e:30:07:cb:02:66:c5:12:59:b6:95:ba:80:71:
         f6:77:0c:4b:dc:e4:03:31:bd:27:0c:db:91:09:03:ed:51:79:
         9c:c6:ae:0b:79:86:8d:6e:86:fb:18:9b:ad:2c:f1:66:cc:b1:
         20:39:54:03:13:d3:2e:a3:02:ce:15:7d:18:cf:20:5f:34:cb:
         2a:67:8a:7f:eb:81:5a:5f:1f:30:77:97:1a:54:5b:e0:09:7a:
         30:43:87:57:02:8b:c5:dd:81:34:c9:34:29:e9:3a:d6:45:98:
         5c:c6:b3:c5:24:d2:03:5a:fd:c2:aa:fd:87:c1:c2:a2:97:0e:
         b9:20:cd:1a:c2:02:3e:29:4a:ea:45:e0:ea:14:a9:94:b7:3b:
         62:84:84:e7:06:ad:43:7b:7b:fc:91:33:91:09:25:48:21:75:
         c9:ef:f9:bf:2f:51:84:3a:78:48:15:22:ad:6b:92:a0:89:5c:
         06:4a:25:1d:94:a8:3b:00:ae:78:85:7a:9b:57:b6:46:ae:bc:
         4f:96:b8:51:19:7d:98:a5:76:18:86:97:34:de:a4:dc:fe:0c:
         c9:ac:98:70:42:9f:b4:22:58:56:ee:c4:16:49:52:95:a2:ab:
         d0:db:70:fd:78:51:8e:f5:47:f4:f1:60:03:d3:06:32:19:f4:
         3c:d8:83:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUEwNTMxMTAvBgNVBAUTKENBODc3QTdBRUYxREJCMDQ1NjQ4N0Y2MUZFRTY5OTM2
Mzc1NDFFNUQwHhcNMjUxMjA2MjAzMjM2WhcNMjUxMjEzMjAzMjM2WjAYMRYwFAYD
VQQDEw02OTM0OTJlNS1lODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1II0gc3uSXDZmBqNx25mrwd7zvmWeMWFwn3jjEjhMBuzyeq1mfayQLS2ONaa
kgruwyphTPQw1elUag8Uz5R4uhV20tY60CLkzbiP9jo81Bx57LzVz9eadt7jbaNU
lkzChIh8A/4Ho/mAATz5K7sEDVTmv+Xpg3RONwcAcB07aY0fiasU46Hv8AutUWWD
32DjEnL4S8bzclbhgyF3cV7WYaPhq+/dITfj8w1tc3S1WiqKuKyoruNe8i/QQO29
kMMYkieGuORMNZ4jIHW+Kke+JmaUwlA4iDoratdIqloi8pBklLTURV+b4dm21SGv
Y9qzk+zABFkkjnxxpHtsDl72DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBybePn4
cow0EcX5r9mgTpgkaoGkMB8GA1UdIwQYMBaAFMqHenrvHbsEVkh/Yf7mmTY3VB5d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My84NzIwMzA1RTQ0
OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3UldTSDloX3VhWk5qZFVI
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3lvZDZldThkdXdSV1NIOWhfdWFaTmpkVUhsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTA1My84NzIwMzA1RTQ0OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3
UldTSDloX3VhWk5qZFVIbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgBqhyXjAHywJmxRJZtpW6gHH2dwxL3OQDMb0nDNuRCQPtUXmcxq4L
eYaNbob7GJutLPFmzLEgOVQDE9MuowLOFX0YzyBfNMsqZ4p/64FaXx8wd5caVFvg
CXowQ4dXAovF3YE0yTQp6TrWRZhcxrPFJNIDWv3Cqv2HwcKilw65IM0awgI+KUrq
ReDqFKmUtztihITnBq1De3v8kTORCSVIIXXJ7/m/L1GEOnhIFSKta5KgiVwGSiUd
lKg7AK54hXqbV7ZGrrxPlrhRGX2YpXYYhpc03qTc/gzJrJhwQp+0IlhW7sQWSVKV
oqvQ23D9eFGO9Uf08WAD0wYyGfQ82IP7
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:11:08 2025 by rpki-client