This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
File:                     0ypa3AVCwugXwgK-a3KB6GnReJc.mft (raw, json)
Hash identifier:          5cllPWaDatSiUJGa1jDVyhZkYrpvae8wuxme+YHKNv8=
Subject key identifier:   49:CB:73:74:50:FC:8F:15:E1:23:31:DC:38:63:31:BD:0F:91:16:6B
Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Certificate issuer:       /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
Manifest number:          010D
Signing time:             Fri 05 Dec 2025 03:06:12 +0000
Manifest this update:     Fri 05 Dec 2025 03:06:11 +0000
Manifest next update:     Fri 12 Dec 2025 03:06:11 +0000
Files and hashes:         1: 0ypa3AVCwugXwgK-a3KB6GnReJc.crl (hash: IXiJtjQY5/dMtbpnUrPx/a4hjk1hgJJS2O5aQjAMEHE=)
                          2: 6F723CC0830B11F0B82E836DC4F9AE02.roa (hash: 20LByREQakyZFtw7XXZgcAlPRUMCZmgOccSGiPQln6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
        Validity
            Not Before: Dec  5 03:06:11 2025 GMT
            Not After : Dec 12 03:06:11 2025 GMT
        Subject: CN=69324c23-b7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:82:ae:04:eb:ab:98:45:6d:b2:9c:4f:42:0a:
                    1b:82:e1:23:8b:7f:8e:c7:12:25:02:ba:cd:70:84:
                    61:a1:15:6a:9e:3d:9b:96:ff:ef:b9:ca:03:e1:9d:
                    39:51:36:14:04:a3:a8:ab:4b:a0:04:c4:cc:47:4a:
                    09:50:67:4d:9a:c6:b7:ed:04:fd:bc:9e:83:0e:ea:
                    8f:8e:50:a5:58:bb:fd:26:fa:8f:88:1d:48:65:94:
                    23:66:35:f3:cb:8d:a0:ee:ae:95:0c:05:20:bd:39:
                    fb:93:58:33:0b:61:37:2c:10:c1:a3:f2:16:27:71:
                    7c:ea:aa:58:11:6f:8e:51:4e:24:36:31:23:e9:ab:
                    d5:01:af:ec:64:40:7f:b2:0c:38:bc:14:1b:79:1f:
                    9c:f6:18:d2:1e:02:c1:e4:d8:7d:62:ee:97:c5:b9:
                    af:64:66:e5:00:3f:ad:a1:ea:42:7e:e3:3e:23:80:
                    5f:e1:d6:bc:76:fb:45:91:7b:12:c2:ef:66:ce:74:
                    36:5b:18:8a:2c:70:85:f6:06:48:6f:a8:af:4b:1e:
                    37:95:7d:01:fb:da:ee:33:7b:24:72:02:6e:db:83:
                    96:81:2e:f6:25:7d:0e:d5:51:8e:61:ae:da:7b:7b:
                    03:3b:61:c6:02:5b:fc:70:80:09:40:cb:37:c7:cc:
                    56:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CB:73:74:50:FC:8F:15:E1:23:31:DC:38:63:31:BD:0F:91:16:6B
            X509v3 Authority Key Identifier:
                keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a0:80:6c:cb:1e:c1:be:ce:12:ed:60:2c:ee:c5:c3:02:09:
         9f:67:6f:5f:d5:38:03:48:1c:84:1e:93:22:ff:ed:f3:50:8d:
         c7:2c:bc:11:d3:c5:ca:b5:e6:9a:a5:75:35:c1:92:78:eb:30:
         3d:e3:ad:b3:b8:14:88:f1:7b:78:1c:a5:ab:b1:0f:45:a4:47:
         4f:00:3a:4f:d2:29:8c:3b:2a:d6:79:27:3b:ac:ba:f1:4f:92:
         7f:60:03:5a:61:58:da:55:c8:9d:1e:4a:90:ac:94:05:5b:57:
         37:46:96:0b:44:c2:77:ec:2e:a1:a5:d8:1e:c1:e3:e3:1c:ca:
         79:45:b6:e7:e5:48:97:64:c2:8a:cd:c4:4e:c7:c4:f2:24:05:
         92:3a:5c:6c:1e:93:e8:e9:c9:48:c8:e4:7e:b4:6a:53:9c:2f:
         af:7e:2c:3d:ad:3b:11:3f:f1:57:8a:8c:8a:be:46:b9:12:f9:
         69:cc:04:d9:34:f2:b8:71:25:60:1a:96:05:47:0c:be:e3:af:
         2f:75:22:00:59:f7:01:61:86:0a:99:50:61:b6:f6:ce:25:14:
         ec:e0:e4:5c:cd:40:5b:ab:c4:c7:d1:02:1a:30:39:29:f1:ce:
         a3:80:ab:b1:ff:73:71:bf:7b:16:86:13:a3:ab:f3:05:e8:3c:
         ec:07:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:22 2025 by rpki-client