This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
File:                     -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json)
Hash identifier:          JuhvNblLg0NTjEHXaM3GH41AV+KB839JhMuUZLzVohc=
Subject key identifier:   C6:D7:28:52:15:9C:AF:FA:4B:D4:5A:BA:B9:2B:19:00:DB:96:8F:95
Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C
Certificate issuer:       /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C
Certificate serial:       0B4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
Manifest number:          0B47
Signing time:             Thu 04 Dec 2025 18:33:50 +0000
Manifest this update:     Thu 04 Dec 2025 18:33:50 +0000
Manifest next update:     Thu 11 Dec 2025 18:33:50 +0000
Files and hashes:         1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: z63V75RXQVLymj0+tNH/gK3fGVBBw9Mqy9MWxBZyp2E=)
                          2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: gMyJ+7eXQOz2lZ7oRn13QHvOh0RqD5UbZBYLXAXV9no=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl
                          rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2894 (0xb4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCC44, serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C
        Validity
            Not Before: Dec  4 18:33:50 2025 GMT
            Not After : Dec 11 18:33:50 2025 GMT
        Subject: CN=6931d40e-875c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:e0:d5:9d:d8:ab:11:c9:1c:43:2b:10:31:
                    c9:c8:91:2e:76:6d:15:b0:bd:1d:a0:0c:c0:ce:c7:
                    8a:6c:fc:f5:e0:0b:db:c5:27:e8:d2:2d:62:75:bd:
                    8d:a4:ad:8b:c7:8c:fe:d1:5f:ee:bf:67:e3:a6:1f:
                    09:fe:ba:e4:37:d5:1c:da:77:bb:39:8c:5b:3d:7f:
                    65:63:46:13:38:c6:2d:a7:9c:f3:3f:20:14:15:a4:
                    36:ce:90:15:77:74:69:9c:67:c9:51:f9:36:82:f4:
                    45:33:52:0d:47:1c:51:85:b2:d3:e6:d8:33:72:b0:
                    49:f1:c3:29:6f:d0:e2:13:53:fe:c9:2b:e2:9e:75:
                    71:76:31:3f:d0:45:85:bd:10:7e:80:ba:a0:ff:fa:
                    ae:4d:bb:a7:f1:ed:2d:13:9e:61:2f:34:78:a6:c8:
                    e2:f0:d9:55:62:6a:2d:ac:7f:a5:14:73:ef:4c:77:
                    bf:c2:13:fb:a4:fd:2c:bb:77:e5:f1:01:3d:79:62:
                    ff:81:11:fb:f9:94:19:34:e4:0c:3d:d1:37:ed:f1:
                    9d:73:d3:49:41:b1:83:90:7a:87:91:ec:c9:48:78:
                    b8:fc:da:b4:5a:47:1e:6f:bd:8b:f0:e2:7f:e8:fd:
                    1d:87:05:09:5a:1a:0c:08:d6:c6:5d:08:e2:1d:e7:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D7:28:52:15:9C:AF:FA:4B:D4:5A:BA:B9:2B:19:00:DB:96:8F:95
            X509v3 Authority Key Identifier:
                keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:27:ff:94:75:1c:48:f4:65:83:40:62:08:8b:b5:ca:38:c4:
         01:10:3d:76:be:fb:e7:5c:d1:af:f5:d3:39:37:b4:c0:7f:b3:
         4f:15:3e:db:ac:b3:cf:9d:12:12:9f:e5:e1:ba:ee:2c:cb:fe:
         35:ba:78:6f:9d:8f:94:b6:cb:3f:98:3a:0a:ed:67:9b:de:47:
         22:fe:59:5d:27:fd:67:7c:7d:e8:46:fa:c2:e6:f1:e0:4f:da:
         f5:9d:13:b3:b5:3b:3d:65:c2:55:c9:98:75:09:b2:a4:60:7b:
         b2:19:4d:d9:fa:4a:7c:b7:b8:5a:18:01:6c:f0:db:e2:f6:dc:
         e2:a1:e0:26:5c:6c:8b:09:78:6e:b0:d9:5d:03:54:c9:78:c5:
         cd:a5:ec:ff:6d:88:53:c1:14:1f:c0:20:23:2e:e2:bb:06:ec:
         93:85:32:4d:d4:88:82:86:48:e3:2d:37:66:6e:8e:dd:78:c2:
         fc:0f:fc:06:29:cf:f1:32:2e:16:2d:5f:7d:be:8d:0e:d6:47:
         ae:c8:b1:30:eb:71:23:da:29:67:2c:0a:67:70:50:62:64:fd:
         36:6e:e4:e4:cd:1f:5b:67:42:22:58:3c:b1:04:ac:1d:0c:07:
         40:bf:60:e7:44:e3:3f:e2:6d:a5:91:e2:82:d7:ad:f8:af:0e:
         8c:ba:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:24:52 2025 by rpki-client