This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
File:                     ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json)
Hash identifier:          GA8kw9zayNdlf9AgT6vd3F09z3QqkOG2gL9PaIOiyRw=
Subject key identifier:   A7:A5:04:F6:DF:99:F8:50:49:90:96:12:BD:78:B4:1C:31:64:1F:0E
Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
Certificate issuer:       /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
Manifest number:          022D
Signing time:             Fri 05 Dec 2025 00:21:08 +0000
Manifest this update:     Fri 05 Dec 2025 00:21:07 +0000
Manifest next update:     Fri 12 Dec 2025 00:21:07 +0000
Files and hashes:         1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: eSF8eXfOuljUqESQo+QzmjpuUMZWXU+FBoHKTforF4I=)
                          2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: sHBWYK9XVEHZv+A/fyqhHjEvweQybzBfh5wreKa0iZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
        Validity
            Not Before: Dec  5 00:21:07 2025 GMT
            Not After : Dec 12 00:21:07 2025 GMT
        Subject: CN=69322574-5444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:f2:2a:3f:fa:96:1c:5b:15:25:ea:50:7c:
                    6e:b0:d2:0e:a3:a7:3f:95:af:b2:10:1a:11:b9:b2:
                    ea:76:20:34:6a:ed:1c:aa:04:2c:2e:31:99:88:4d:
                    f6:50:38:c6:ca:e7:e4:bd:4f:d0:ab:24:42:e9:55:
                    56:d6:99:a6:ba:7c:ac:3e:ca:58:1b:b4:c1:b7:ac:
                    32:8f:6d:e2:6d:61:cf:df:ac:d4:97:9b:8f:2f:4b:
                    56:2b:f9:0e:dc:36:87:4f:d5:2e:bd:a2:35:8c:8d:
                    88:c6:2c:36:a3:c3:52:68:88:d6:97:f8:8a:9a:0d:
                    79:22:1e:b7:f0:8f:3b:d2:7c:c5:fa:4e:c5:a9:26:
                    0e:cb:47:9c:a7:c0:85:b5:cc:f3:79:ed:31:bf:dd:
                    58:5c:31:9a:90:cd:04:af:ee:7e:4b:d0:82:bc:d3:
                    92:6c:e8:f7:a0:96:79:fd:c6:d6:d5:45:c2:20:87:
                    56:95:a2:e9:73:ce:8c:30:40:9a:eb:b8:a6:4e:d2:
                    7c:de:e2:d4:cc:b3:52:72:e6:fa:a0:e8:a8:e5:1f:
                    d3:98:fe:a5:3b:b2:5a:b6:76:32:0b:45:0c:d1:2c:
                    d9:5e:64:09:ea:5b:e3:88:4b:e5:d6:a1:c7:fc:a4:
                    35:6e:90:d6:1c:25:33:a9:22:44:c0:69:2a:8c:c1:
                    70:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A5:04:F6:DF:99:F8:50:49:90:96:12:BD:78:B4:1C:31:64:1F:0E
            X509v3 Authority Key Identifier:
                keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:3d:9f:b5:1e:a0:eb:df:47:e7:2d:8a:ce:48:dc:40:94:c4:
         68:14:c1:28:5b:e4:6b:ac:84:0b:0d:0a:ec:a0:c4:3f:d1:11:
         92:a4:44:22:dc:2e:1c:98:c8:28:d4:67:cd:10:b3:7b:86:17:
         42:60:28:d2:e5:23:81:1d:5e:44:1e:c1:d8:6c:5a:26:7a:73:
         9e:a4:7b:ed:43:da:3e:4d:92:0f:61:d1:84:90:32:1f:a5:18:
         c6:69:17:cb:ea:20:9d:0e:5a:15:21:02:df:a5:bb:98:93:98:
         aa:07:c3:ca:22:ce:19:78:d6:c9:41:c8:6e:db:91:a3:38:a4:
         82:c5:46:4f:1a:36:4f:19:ef:11:60:cc:a3:12:de:3e:bd:ed:
         fa:34:b3:4d:0c:42:8b:f9:49:fe:72:4c:09:56:0e:a4:39:dc:
         e2:63:32:e3:7e:0f:cd:f0:e9:f1:f8:cf:85:d2:51:92:ea:8d:
         de:d3:66:74:55:31:02:df:2e:b3:70:73:10:31:27:a4:53:cf:
         8f:9c:69:a1:c3:7a:17:72:85:a1:18:91:e1:52:03:2a:b5:07:
         8b:48:e0:6e:3b:93:da:f2:b1:1c:76:67:b8:21:88:89:00:9b:
         2d:8c:6d:79:7d:3b:e6:30:78:8a:57:a7:02:cf:b5:57:85:ca:
         ea:40:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:38:26 2025 by rpki-client