This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
File:                     YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json)
Hash identifier:          VO6jREpRrfIFQnFUmSKbqWD4psgUVOGXyhMIqylDiKI=
Subject key identifier:   7F:AB:B6:05:02:D8:21:89:12:09:87:F3:7C:FD:87:A6:5C:F6:F8:E0
Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00
Certificate issuer:       /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
Manifest number:          D8
Signing time:             Fri 05 Dec 2025 03:36:41 +0000
Manifest this update:     Fri 05 Dec 2025 03:36:41 +0000
Manifest next update:     Fri 12 Dec 2025 03:36:40 +0000
Files and hashes:         1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: H1MFJnFlrG6Ib7J/hOMP7eFlxdrlZ5LrYy3fYql/OF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl
                          rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2F8C, serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
        Validity
            Not Before: Dec  5 03:36:41 2025 GMT
            Not After : Dec 12 03:36:40 2025 GMT
        Subject: CN=69325349-e21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:94:5b:d2:c0:21:98:04:5a:84:87:65:52:d8:
                    09:6c:13:dd:65:fd:45:8a:ab:85:a7:fd:32:20:5f:
                    87:c0:c8:a8:2b:58:34:c6:9f:4e:3c:45:34:f2:38:
                    95:fb:87:e6:02:94:74:f6:40:fc:e6:e0:3d:82:7e:
                    85:72:03:b5:29:09:ca:11:0b:fd:41:70:c4:3b:ac:
                    a4:19:d7:f7:13:73:4b:c0:52:5b:ee:ba:97:98:d8:
                    bd:73:66:bc:93:be:5a:31:40:61:d0:e9:c4:e3:2e:
                    18:60:99:ec:0c:2c:c0:eb:f4:96:62:62:0e:96:d2:
                    1c:43:1b:a4:46:cb:b9:64:96:7b:4d:f3:ba:da:f2:
                    96:73:20:ce:6d:9f:50:b4:13:93:d9:83:54:54:16:
                    e5:84:86:22:0e:a8:77:bb:70:c0:a7:8c:cb:c6:1d:
                    39:c3:b7:bd:18:1b:40:56:9a:0e:ed:72:07:28:46:
                    7c:9d:1e:87:99:d0:6c:0c:38:39:af:b9:2d:b3:80:
                    4f:8d:31:60:4a:f4:90:70:dc:18:8a:9e:d2:59:0e:
                    4c:e5:00:2c:c2:46:a7:d0:e6:64:75:3a:54:66:7a:
                    ad:8d:1f:e0:16:49:22:63:12:fb:67:aa:29:b1:54:
                    68:81:ce:05:6b:23:b4:6f:5c:c5:8b:ae:b9:d4:b4:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AB:B6:05:02:D8:21:89:12:09:87:F3:7C:FD:87:A6:5C:F6:F8:E0
            X509v3 Authority Key Identifier:
                keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c9:71:e6:00:83:f7:65:96:58:76:22:60:1d:05:0a:14:fa:
         18:6e:a2:ee:68:fc:13:bb:a3:41:4a:e8:e3:04:cb:e3:a0:8e:
         cd:bb:55:cb:73:8e:19:22:f9:24:29:3c:f9:b3:54:6d:e4:ba:
         06:52:08:9b:1e:d2:05:a6:ff:93:20:60:5d:c2:df:06:ef:7f:
         c9:47:5b:e0:c7:ed:06:0e:7a:03:1e:7e:81:35:e1:cf:44:68:
         10:79:6b:4e:d0:4a:83:86:4d:9f:89:0c:db:df:ab:34:cc:ad:
         35:37:ad:71:97:fd:80:5e:14:7c:45:c8:55:ba:5b:2a:11:24:
         c2:d6:f7:08:96:62:65:9e:f9:da:c5:bb:40:0a:dc:2b:bf:89:
         71:19:bd:3b:9c:34:26:02:ba:5c:ce:5d:8d:02:c5:aa:2a:ef:
         bc:6f:84:f7:b4:e0:99:c6:1d:c4:08:cb:2c:8b:77:41:e5:5b:
         9e:0e:90:23:bc:53:b2:08:00:7a:91:ad:9d:94:b7:b6:32:d9:
         c2:5d:a9:8c:1f:33:c7:4b:75:20:54:c2:c7:b1:f1:9c:63:c9:
         dc:87:e7:23:87:e7:3d:5e:bd:bc:e1:32:5a:ca:f8:e8:1b:4f:
         e7:30:4b:29:1c:24:7c:bb:43:c9:1b:d6:4c:26:01:cd:97:04:
         5e:49:ee:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:37:51 2025 by rpki-client