This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/MyY-skb1TUyj_JCJ9MA3Be7qLIY.mft
File:                     MyY-skb1TUyj_JCJ9MA3Be7qLIY.mft (raw, json)
Hash identifier:          LnwBjJ4izJ3sN1Qi/GWCTcsBW+KeXelsMsBTkLn/N6k=
Subject key identifier:   98:46:10:39:74:45:85:D6:3F:CE:F9:75:4C:FF:85:21:28:9A:9A:57
Authority key identifier: 33:26:3E:B2:46:F5:4D:4C:A3:FC:90:89:F4:C0:37:05:EE:EA:2C:86
Certificate issuer:       /CN=A91C78A7/serialNumber=33263EB246F54D4CA3FC9089F4C03705EEEA2C86
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MyY-skb1TUyj_JCJ9MA3Be7qLIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/MyY-skb1TUyj_JCJ9MA3Be7qLIY.mft
Manifest number:          16
Signing time:             Fri 05 Dec 2025 05:43:36 +0000
Manifest this update:     Fri 05 Dec 2025 05:43:35 +0000
Manifest next update:     Fri 12 Dec 2025 05:43:35 +0000
Files and hashes:         1: MyY-skb1TUyj_JCJ9MA3Be7qLIY.crl (hash: LYRrGstaFBGiR7XUjsoqDMusp0b7PcFUSjjamdYdK5A=)
                          2: 2F5B1648B62311F0A558E184C4F9AE02.roa (hash: K6eGXo3Vijm55v1VXh8nvzzF5i7OhAZe7582+PIuLlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/MyY-skb1TUyj_JCJ9MA3Be7qLIY.crl
                          rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/MyY-skb1TUyj_JCJ9MA3Be7qLIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MyY-skb1TUyj_JCJ9MA3Be7qLIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C78A7, serialNumber=33263EB246F54D4CA3FC9089F4C03705EEEA2C86
        Validity
            Not Before: Dec  5 05:43:35 2025 GMT
            Not After : Dec 12 05:43:35 2025 GMT
        Subject: CN=69327108-7415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:f9:c4:55:31:24:26:38:d5:aa:30:57:0d:
                    af:cf:c5:99:bc:79:a4:4b:ea:2a:0e:59:0d:76:55:
                    6d:8e:82:b0:d1:b9:7f:c4:15:b7:b0:ea:bd:17:fc:
                    a9:5c:f5:3f:4b:08:33:9b:f8:ac:23:c5:49:04:58:
                    b4:db:94:36:31:fc:99:5b:20:cd:1b:30:8a:90:6e:
                    98:73:97:8d:39:46:05:36:63:9a:ae:5c:ea:4a:08:
                    1e:7b:79:2c:3d:15:2b:f7:f1:ea:79:44:25:71:81:
                    ee:8d:ea:9f:97:47:c7:fb:17:ae:ca:55:34:f1:91:
                    05:37:d8:fe:b6:a2:fe:48:5a:8c:86:9f:9f:5e:38:
                    55:2b:0c:ff:5c:45:9e:d4:a8:65:5a:ea:78:03:ed:
                    59:ae:bc:69:e6:c0:65:bd:7c:65:a8:c5:e5:ae:5a:
                    dc:8d:6c:40:fb:81:ac:62:ea:e6:f3:67:81:ec:c8:
                    9d:11:ba:f5:e6:10:dc:78:11:d6:a7:e6:bc:e3:2c:
                    2b:54:65:4d:14:ee:d2:eb:df:5a:8d:ab:c5:3e:b1:
                    e9:3a:df:98:00:73:94:43:90:a9:66:ee:a0:bc:13:
                    86:87:5b:17:cd:6f:83:88:e9:5d:20:54:c4:64:b9:
                    f6:18:7f:db:e4:46:b9:86:a5:c6:98:91:b3:a4:13:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:46:10:39:74:45:85:D6:3F:CE:F9:75:4C:FF:85:21:28:9A:9A:57
            X509v3 Authority Key Identifier:
                keyid:33:26:3E:B2:46:F5:4D:4C:A3:FC:90:89:F4:C0:37:05:EE:EA:2C:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/MyY-skb1TUyj_JCJ9MA3Be7qLIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MyY-skb1TUyj_JCJ9MA3Be7qLIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/MyY-skb1TUyj_JCJ9MA3Be7qLIY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:21:cb:af:bb:e1:70:71:7c:9a:68:09:11:81:86:a4:17:bc:
         34:ca:35:8e:bf:10:e4:f9:37:52:b0:e6:fd:96:72:e8:90:61:
         68:66:0d:16:98:04:04:34:8a:69:9b:54:dc:5d:ff:4e:0f:f8:
         e0:17:68:7e:37:f6:1f:76:b6:31:d6:74:c4:a4:14:fd:09:b2:
         ca:a6:cf:58:a2:ef:80:f7:c5:cc:17:f6:98:98:dc:3d:b5:d2:
         b8:4d:85:d4:71:f0:1f:7e:44:87:3d:dc:8c:15:65:2a:31:d9:
         e0:1b:5c:2d:48:e0:a7:09:e3:c7:44:26:b9:b8:cc:c5:fa:9d:
         7d:90:56:e9:c3:09:16:ce:60:d8:74:9b:b3:13:e2:41:9a:ea:
         29:63:d5:8b:d1:b7:21:8f:e7:9c:ab:eb:1e:30:27:33:97:39:
         1d:c9:04:41:91:23:93:bb:e6:80:0b:21:e5:1c:96:25:08:87:
         8d:c2:a3:5e:ff:ae:bd:1a:de:53:5a:94:5a:5d:b8:71:2a:37:
         f9:c9:4c:a3:fa:81:46:31:40:24:fc:6f:ac:a7:f1:3a:bd:a3:
         11:74:66:6e:80:81:1a:b3:57:99:c0:e1:1a:a1:3e:38:60:89:
         10:ef:4c:20:7e:43:13:23:15:0d:da:21:75:d3:44:1a:90:ad:
         1e:c7:3a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:45:23 2025 by rpki-client