This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
File:                     yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json)
Hash identifier:          1sDwBOxBhXiMWkVLXyecndTOCXzNgjloBNmSnzz8zEE=
Subject key identifier:   A5:62:7B:B7:45:87:BE:F1:D0:DD:BB:D1:15:48:AB:62:80:F6:96:A8
Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
Certificate issuer:       /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Certificate serial:       0585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
Manifest number:          057F
Signing time:             Thu 04 Dec 2025 21:55:35 +0000
Manifest this update:     Thu 04 Dec 2025 21:55:34 +0000
Manifest next update:     Thu 11 Dec 2025 21:55:34 +0000
Files and hashes:         1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: KafoPiCoWfQmSD2Dej10lx2R0r8XDOywqEr8MDnruT4=)
                          2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: azq2/w0vOg+2swjHdLzDRr5hvzTCb3H9CNSdtAvO6hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
                          rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413 (0x585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
        Validity
            Not Before: Dec  4 21:55:34 2025 GMT
            Not After : Dec 11 21:55:34 2025 GMT
        Subject: CN=69320357-1126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:05:b6:a4:3d:e6:17:33:3a:d0:7f:01:bb:b8:
                    d8:cd:5c:58:24:ec:57:31:23:c6:d2:b9:8f:aa:7e:
                    34:e6:59:90:d4:14:77:01:d0:3e:39:3b:9a:a9:f7:
                    27:af:e7:70:32:fa:a0:e6:e6:73:8e:b9:7c:3c:66:
                    c3:7c:60:c1:f8:bf:5f:70:6a:03:c1:85:5e:fe:d6:
                    89:d8:28:c0:b5:b7:74:9e:7c:0c:55:fc:16:85:20:
                    5d:62:ce:93:e6:10:55:9a:2c:32:71:90:a0:8c:84:
                    b5:ce:dd:c1:2a:5c:10:21:78:e3:3e:2c:ab:c1:33:
                    30:f0:9e:21:40:1d:bc:6a:93:fc:69:b0:ad:15:e6:
                    6f:5c:93:43:c6:46:91:22:04:9d:b8:1f:c6:cf:03:
                    7f:a9:d5:3e:24:88:d1:71:11:65:90:a5:8e:30:ca:
                    95:1a:5f:67:5a:b9:c1:10:65:aa:47:ad:b0:d7:75:
                    7a:e4:8c:5a:74:23:98:50:9c:e4:18:4e:db:ba:1d:
                    6f:63:4d:26:74:da:91:a9:e6:8d:0b:4c:ab:da:8d:
                    f9:d4:2f:ef:37:12:b0:55:28:30:a6:d8:6b:fd:5a:
                    3d:f5:ec:c9:a3:c4:47:1c:a4:2b:f7:3f:2e:26:cb:
                    04:36:ec:a6:1a:ca:b6:a9:e7:26:49:4d:ca:96:69:
                    96:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:62:7B:B7:45:87:BE:F1:D0:DD:BB:D1:15:48:AB:62:80:F6:96:A8
            X509v3 Authority Key Identifier:
                keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c7:ce:a1:0b:1f:73:52:43:b5:59:84:78:04:bd:17:69:6c:
         db:fb:6c:ec:83:98:ee:4b:c8:a4:b0:dc:ba:43:59:59:65:1d:
         d2:8f:80:0a:48:52:3d:39:75:52:6e:c5:af:9e:4c:07:15:2e:
         e0:d8:70:e0:df:20:89:6e:a3:ea:a3:9f:d4:a1:c9:a3:d1:bd:
         7b:d2:6c:0a:89:cc:8c:1d:e4:a8:25:57:7f:9e:a5:85:36:5c:
         a2:20:ce:a5:1a:f9:72:5e:4e:f5:80:46:2d:77:b3:bd:d8:a2:
         16:1e:02:13:b4:cb:27:6b:e4:c2:56:68:0f:76:37:7a:52:a1:
         24:96:50:ae:19:76:8a:47:43:b5:5d:b4:5a:7a:c5:10:07:a7:
         09:be:99:77:64:89:1a:78:c6:2c:72:a7:84:68:99:5a:d7:7f:
         18:14:11:61:3c:35:91:c3:5c:66:df:00:ae:e0:ec:f8:6a:f8:
         af:fa:dc:db:a8:58:dc:06:98:35:db:89:bb:77:e7:b4:13:f2:
         ef:cf:7e:59:dd:ca:66:fc:17:78:e6:36:3b:4c:2c:10:05:8b:
         c2:cd:93:e6:d6:ac:f2:4d:cc:b4:08:fa:7f:c7:33:53:c4:16:
         05:52:48:6c:da:6c:e3:04:9b:e6:46:a6:4a:45:9c:c1:6d:b1:
         19:c7:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:25 2025 by rpki-client