This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
File:                     YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json)
Hash identifier:          mwZZvgSpDwaaeLB6V6+izBdN/nJgToWShgD7YrMzEwE=
Subject key identifier:   11:85:BC:AF:3D:21:9D:1A:6A:8B:37:69:CF:C5:C0:2C:15:CF:88:CF
Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00
Certificate issuer:       /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
Manifest number:          DE
Signing time:             Wed 17 Dec 2025 05:03:45 +0000
Manifest this update:     Wed 17 Dec 2025 05:03:44 +0000
Manifest next update:     Wed 24 Dec 2025 05:03:44 +0000
Files and hashes:         1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: EMuGHvvazdVitf9nwR7e4hafP+PzAH6wrPuJV+vzxKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl
                          rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 05:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2F8C, serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
        Validity
            Not Before: Dec 17 05:03:44 2025 GMT
            Not After : Dec 24 05:03:44 2025 GMT
        Subject: CN=694239b1-3885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:14:a1:37:f4:33:b3:de:a8:a9:2e:ce:a8:
                    80:c3:14:fc:4a:96:06:f3:3a:ac:ac:f2:ff:07:f5:
                    fa:39:2b:41:c6:ba:29:b1:59:7f:43:bf:0d:4c:97:
                    3c:25:27:f5:a9:a6:1a:0a:f4:ec:17:6d:0a:50:1e:
                    a0:f6:9c:04:95:6a:36:00:72:08:87:9f:5c:49:5d:
                    c0:f1:9f:ab:46:a9:77:1d:a7:2c:e6:0d:4a:a0:da:
                    37:6d:66:98:22:61:80:5d:75:40:8f:38:a4:84:03:
                    63:62:3f:e8:24:80:9e:1d:ba:4e:b4:3a:92:bc:d1:
                    0a:4c:48:c0:0e:06:f6:6e:d8:55:0f:03:7d:93:d0:
                    d8:ba:26:bc:60:63:b7:24:67:4d:da:f6:91:b6:1b:
                    33:32:21:ae:3b:4a:52:27:cf:bf:79:eb:9a:91:60:
                    f2:6a:5c:8a:11:99:f7:1c:48:7d:fb:02:55:89:57:
                    c9:f1:c5:d4:18:ac:00:2d:15:37:97:c2:4c:be:c3:
                    76:f7:30:be:97:6d:8b:66:5f:8d:ef:5f:df:0f:48:
                    92:3b:a0:d7:54:0f:c0:a5:11:b8:23:35:e6:77:56:
                    c9:9b:46:6c:9d:a5:f8:60:b6:10:4c:c2:2c:37:9e:
                    eb:ef:2e:80:0d:c5:9b:ce:ad:74:5b:b2:1f:ac:77:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:85:BC:AF:3D:21:9D:1A:6A:8B:37:69:CF:C5:C0:2C:15:CF:88:CF
            X509v3 Authority Key Identifier:
                keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:48:d4:6a:f1:47:3f:f1:20:a7:78:ce:8c:c1:18:fa:36:9c:
         9a:a9:44:7c:ad:88:b7:e4:21:7a:a1:7c:d7:85:b2:28:57:f1:
         ad:6f:da:82:72:d7:39:7e:5c:c5:71:6d:70:48:b6:ad:dd:fe:
         d7:35:a6:2b:64:ee:09:dd:3d:00:b8:4e:65:1c:1c:49:fd:03:
         b5:b8:d9:e7:49:80:57:c8:0f:e4:e9:5a:ec:fd:6f:45:b5:e8:
         18:01:f6:f0:a3:74:da:df:7c:17:65:7a:1c:77:95:8d:47:68:
         bc:bc:24:a0:e4:59:4d:de:d4:a9:57:09:5b:88:c1:14:38:33:
         35:19:38:cd:60:1f:c9:6d:8f:40:a5:81:f5:e1:83:09:0c:81:
         d6:f6:0f:43:b8:32:bf:38:0b:67:16:bf:fc:8a:5d:da:a2:65:
         e8:f3:ef:48:61:25:9b:f9:4b:00:f6:01:41:5f:21:94:1d:f7:
         e0:fd:71:26:4f:92:30:01:bb:c2:eb:97:5a:f8:f3:fd:bf:9a:
         82:12:05:32:33:02:14:5c:56:5d:d6:2d:4f:89:23:8d:28:77:
         65:9b:ee:a2:4a:16:6c:15:69:58:b9:75:96:18:dc:9c:8e:8c:
         70:b7:02:9e:8c:45:f7:93:f4:fb:ed:2b:e5:f8:76:f1:97:f5:
         8b:c4:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 02:29:40 2025 by rpki-client