This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
File:                     YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft (raw, json)
Hash identifier:          +SPn9YAtEYe/XEPM3aXfv9bV2BBXK7hPz4Xbu2aezHk=
Subject key identifier:   EA:14:21:9B:EC:E0:1E:5A:BC:00:00:D1:3E:82:B3:95:DD:87:DA:B7
Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
Certificate issuer:       /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Certificate serial:       0602
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
Manifest number:          05F7
Signing time:             Thu 04 Dec 2025 21:38:36 +0000
Manifest this update:     Thu 04 Dec 2025 21:38:35 +0000
Manifest next update:     Thu 11 Dec 2025 21:38:35 +0000
Files and hashes:         1: YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl (hash: crt89+YkvBbXLOYnZrcEDu+KatgtMg7OHTI9WPLJGyQ=)
                          2: 8504C794D12411EBAD06CD48C4F9AE02.roa (hash: zqhHb4EuNxIhj0MsDdGRZBLgZ5b4JdLttiLWNXtELcI=)
                          3: 84706C70D12411EBAD06CD48C4F9AE02.roa (hash: +VQvv+uWVXkQstiOmhvQpZ3+r0zEs8UArQ0Y/mZ6P60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1538 (0x602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
        Validity
            Not Before: Dec  4 21:38:35 2025 GMT
            Not After : Dec 11 21:38:35 2025 GMT
        Subject: CN=6931ff5c-24c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:78:2e:71:28:2f:46:15:01:a3:4a:75:68:48:
                    e9:4b:5c:4a:92:4a:98:9c:d4:7d:14:7a:36:33:92:
                    22:21:d7:99:ea:0e:9a:9c:fe:4f:f6:be:26:60:71:
                    4f:5e:18:35:55:19:c0:dd:dc:c8:c2:df:fe:86:b3:
                    98:a7:c0:3c:7d:95:0e:3c:f2:7f:e7:4b:8f:b7:38:
                    d8:46:74:b6:5b:59:7a:cd:86:3e:79:bb:7c:6d:dc:
                    f1:a9:b1:c1:d2:d6:21:8f:2a:bc:85:ea:64:c7:8e:
                    de:df:3a:4d:e2:d4:4b:d3:1c:42:d6:45:c7:92:fd:
                    f1:90:58:05:fc:1e:e7:9f:e9:dd:7d:bf:52:34:e9:
                    ee:a9:3e:5b:23:a9:c4:49:53:11:03:bc:3a:c6:7a:
                    bd:7e:75:ab:10:0b:0a:6d:0b:d7:fb:17:bf:b1:46:
                    ba:d5:7a:f0:c9:23:a3:d2:49:b4:fe:25:c0:fb:5f:
                    6c:15:32:a0:33:ce:d8:b1:e3:e0:11:43:41:1e:f9:
                    58:ca:08:c1:14:59:9f:c1:59:d1:65:23:e8:96:06:
                    c3:67:3b:7e:7d:ae:6f:10:52:96:88:e7:83:28:65:
                    a6:2e:67:2b:ac:a4:9c:94:b8:3d:01:33:73:79:44:
                    05:7b:9c:91:23:6b:54:1a:7b:a3:fd:c8:13:3a:ac:
                    42:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:14:21:9B:EC:E0:1E:5A:BC:00:00:D1:3E:82:B3:95:DD:87:DA:B7
            X509v3 Authority Key Identifier:
                keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a6:42:49:88:70:1b:a6:b5:c3:95:f3:ea:7a:54:a9:94:e3:
         fc:35:47:84:ad:cf:ce:90:50:d9:56:2a:dc:93:c8:54:98:f1:
         ce:0f:af:c0:3b:d4:a8:c7:fb:8a:c6:e8:41:76:dc:72:7a:b2:
         31:39:56:24:53:9d:51:b5:6f:3d:3a:52:6a:f4:30:9f:37:aa:
         cb:4c:6c:eb:90:79:e3:f4:9d:66:b9:df:e4:12:17:f1:0a:3c:
         0d:9c:75:04:ea:52:26:58:59:3c:f3:6c:c0:81:cf:0e:49:12:
         aa:20:28:12:59:67:b0:eb:4b:2b:4f:10:47:4c:e4:23:5a:93:
         cf:34:2b:71:3e:43:88:56:5c:28:25:b5:a4:f2:4a:72:44:12:
         be:9a:07:6b:ed:f9:25:58:ee:1d:9c:e3:1a:f8:10:f9:1d:79:
         09:50:54:4d:80:43:1a:23:9f:eb:fa:14:7d:0f:de:da:1e:9a:
         b8:1e:90:7b:a2:57:af:c9:52:35:22:b2:ce:d8:75:a8:af:ef:
         24:23:16:8f:d8:88:f8:0c:b2:19:b1:a0:b0:51:3f:8e:7f:5d:
         b2:70:43:1f:84:88:91:cb:1e:43:cd:85:48:6e:69:fe:d8:19:
         cb:6d:b2:21:21:8a:9e:83:92:eb:5a:57:b1:9c:87:68:32:68:
         e4:69:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:22:29 2025 by rpki-client