This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
File:                     YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft (raw, json)
Hash identifier:          bGY6BXjP6uraZqpe9ZUUksYxhL/eC508CfYh3rSCG9U=
Subject key identifier:   41:0A:68:7E:80:DB:71:F3:2C:A0:52:F3:00:E7:F8:29:F6:56:CE:AA
Authority key identifier: 62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B
Certificate issuer:       /CN=A91DD1F9/serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
Manifest number:          FE
Signing time:             Fri 05 Dec 2025 03:10:28 +0000
Manifest this update:     Fri 05 Dec 2025 03:10:27 +0000
Manifest next update:     Fri 12 Dec 2025 03:10:27 +0000
Files and hashes:         1: YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl (hash: sSyzQqYirVjpZ+c4pqAPzq1iUhZvb1IZny596po7EJs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1F9, serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
        Validity
            Not Before: Dec  5 03:10:27 2025 GMT
            Not After : Dec 12 03:10:27 2025 GMT
        Subject: CN=69324d23-ab2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:79:22:c3:f1:94:e4:46:4b:54:81:bb:86:
                    03:53:8c:fc:75:83:60:5c:da:1d:36:2c:57:e2:03:
                    ba:4d:e3:28:75:ea:b2:dc:e8:c5:2d:fc:bf:43:51:
                    1f:95:d8:a9:d0:0c:3c:02:c8:b9:ea:19:d9:e8:07:
                    ba:8b:f0:b2:a5:7b:bb:cf:93:f7:39:8b:4e:95:8f:
                    41:cf:fa:40:c4:c2:c2:c8:38:51:4d:f0:d9:40:6b:
                    0f:d4:75:92:12:25:c0:62:4d:a5:ba:4b:d3:cf:f7:
                    3a:06:39:5c:71:7c:1b:00:9d:e0:9e:48:c2:ed:37:
                    c6:c5:8e:cd:53:01:8f:3c:7e:af:78:a2:66:f8:59:
                    b1:dc:92:0b:b2:b4:5c:fa:e3:d4:de:04:12:eb:cf:
                    2a:ea:88:1f:86:13:dd:f9:0a:e1:cb:9a:ae:25:f5:
                    23:53:3f:6e:ba:4d:c5:d4:95:4e:40:2b:54:57:2b:
                    f0:62:48:60:c5:c7:b6:0a:01:b4:a5:f6:3d:3b:d9:
                    d0:a0:b4:52:e8:2f:cd:ec:36:b8:8b:fc:b7:c4:76:
                    2c:27:07:44:5c:b3:a0:7c:50:65:55:ea:0c:9c:77:
                    08:16:8e:eb:92:a9:19:03:9b:f5:f0:2e:5d:72:ea:
                    cc:47:d1:d4:73:aa:c1:eb:1e:a5:81:6e:c8:e8:61:
                    4e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0A:68:7E:80:DB:71:F3:2C:A0:52:F3:00:E7:F8:29:F6:56:CE:AA
            X509v3 Authority Key Identifier:
                keyid:62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:16:a4:60:08:a3:8c:3d:5e:8e:6b:45:37:f0:f2:13:ca:e8:
         d8:fb:d2:d8:84:8e:27:a8:cb:c4:4a:e9:c3:d1:3c:8d:65:ca:
         5f:34:b8:53:90:96:3b:9f:64:a3:be:55:15:59:81:fa:1e:43:
         f1:99:33:85:02:16:3c:d4:66:c8:b3:e3:1e:d1:94:fd:bf:59:
         95:84:cc:f0:59:e8:59:e6:df:7c:f9:67:96:b7:6b:5d:c7:64:
         d9:c7:7a:02:c2:95:ae:77:7e:41:4e:64:57:ce:32:24:6f:6f:
         b7:b3:81:ac:66:a1:b0:f3:6d:86:7f:bd:b2:9b:c4:52:ff:ae:
         9f:27:84:34:ec:af:73:34:af:d9:1c:c6:55:38:1e:74:21:56:
         fe:5e:34:da:d1:d4:79:ef:70:33:ed:9c:b5:d6:e0:c3:3d:91:
         7a:2f:60:f9:88:67:cd:fe:d9:6c:cc:6a:18:b5:df:15:d7:04:
         a8:1c:87:b2:b8:28:49:58:b7:84:49:2e:e1:3a:39:9a:c8:b3:
         61:b2:b6:51:fd:51:02:86:94:f3:43:91:0e:ba:48:e6:3d:47:
         79:b6:01:03:eb:38:30:c6:a3:c4:8b:d4:77:e2:bd:4a:ea:26:
         7a:94:e6:1a:7f:43:bc:99:d7:43:ab:90:7d:9b:2f:77:59:67:
         f8:26:29:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQxRjkxMTAvBgNVBAUTKDYyQ0E5QzEyNkUxNEZGQkJCQzNENjQwNzEwNUVCRTE1
MUI5OTYwNUIwHhcNMjUxMjA1MDMxMDI3WhcNMjUxMjEyMDMxMDI3WjAYMRYwFAYD
VQQDEw02OTMyNGQyMy1hYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0xV5IsPxlORGS1SBu4YDU4z8dYNgXNodNixX4gO6TeModeqy3OjFLfy/Q1Ef
ldip0Aw8Asi56hnZ6Ae6i/CypXu7z5P3OYtOlY9Bz/pAxMLCyDhRTfDZQGsP1HWS
EiXAYk2lukvTz/c6BjlccXwbAJ3gnkjC7TfGxY7NUwGPPH6veKJm+Fmx3JILsrRc
+uPU3gQS688q6ogfhhPd+Qrhy5quJfUjUz9uuk3F1JVOQCtUVyvwYkhgxce2CgG0
pfY9O9nQoLRS6C/N7Da4i/y3xHYsJwdEXLOgfFBlVeoMnHcIFo7rkqkZA5v18C5d
curMR9HUc6rB6x6lgW7I6GFOYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEKaH6A
23HzLKBS8wDn+Cn2Vs6qMB8GA1UdIwQYMBaAFGLKnBJuFP+7vD1kBxBevhUbmWBb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80ODRGMjZFNjRB
Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi9Zc3FjRW00VV83dThQV1FIRUY2LUZSdVpZ
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lzcWNFbTRVXzd1OFBXUUhFRjYtRlJ1WllGcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDFGOS80ODRGMjZFNjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi9Zc3FjRW00VV83
dThQV1FIRUY2LUZSdVpZRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBoFqRgCKOMPV6Oa0U38PITyujY+9LYhI4nqMvESunD0TyNZcpfNLhT
kJY7n2SjvlUVWYH6HkPxmTOFAhY81GbIs+Me0ZT9v1mVhMzwWehZ5t98+WeWt2td
x2TZx3oCwpWud35BTmRXzjIkb2+3s4GsZqGw822Gf72ym8RS/66fJ4Q07K9zNK/Z
HMZVOB50IVb+XjTa0dR573Az7Zy11uDDPZF6L2D5iGfN/tlszGoYtd8V1wSoHIey
uChJWLeESS7hOjmayLNhsrZR/VEChpTzQ5EOukjmPUd5tgED6zgwxqPEi9R34r1K
6iZ6lOYaf0O8mddDq5B9my93WWf4Jilm
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:38 2025 by rpki-client