This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
File:                     y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json)
Hash identifier:          UeSowsKbXPAMh1B75mGk5ezZm47Rs4VQDC+Cdxr5Wzs=
Subject key identifier:   E9:9D:5C:B5:F1:6A:2F:8F:7A:B4:0A:C6:25:E1:19:DF:1F:F9:2F:6F
Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
Certificate issuer:       /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
Manifest number:          0101
Signing time:             Fri 05 Dec 2025 03:09:33 +0000
Manifest this update:     Fri 05 Dec 2025 03:09:33 +0000
Manifest next update:     Fri 12 Dec 2025 03:09:33 +0000
Files and hashes:         1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: /plk9YM7Qr254StPSRlSpLndZJnjGhrhsY5LbU0NgEA=)
                          2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: p1Kd4l2BGto3TUE6P+Iwqb8Y4agcHwTbtFw10TWcSis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
        Validity
            Not Before: Dec  5 03:09:33 2025 GMT
            Not After : Dec 12 03:09:33 2025 GMT
        Subject: CN=69324ced-a9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cc:26:ae:63:3b:fa:17:47:b4:b9:02:81:40:
                    fa:3c:39:d3:4f:ff:df:1b:2c:24:ba:10:88:d0:ef:
                    e3:1a:f2:e2:70:16:9c:4c:66:ec:d9:6d:f8:de:78:
                    2a:cf:d6:47:ed:86:ed:72:61:8b:18:f3:90:5b:60:
                    dc:03:2b:06:38:0a:47:82:40:c9:e3:84:3b:41:49:
                    3b:73:25:7d:ad:8d:c8:ce:22:88:d5:92:b3:03:b3:
                    3d:12:a9:9b:2e:ba:da:71:15:18:35:55:b8:d1:56:
                    01:d5:9c:e5:7b:c9:2c:4c:e3:f1:e5:d0:06:1a:66:
                    c2:82:42:cf:42:d9:f9:00:9b:28:a6:4e:46:98:aa:
                    9b:2f:4e:b6:0c:ea:6b:91:06:a2:c1:4a:25:75:3c:
                    dc:d2:cd:6a:1d:27:a6:d9:1c:0e:36:7f:0b:18:90:
                    01:61:51:e4:a0:68:2c:5e:0c:ca:69:ce:51:83:53:
                    06:11:d3:7d:a8:a6:e0:3d:85:dc:52:8e:3c:98:51:
                    cd:2d:95:92:83:78:a2:de:40:60:11:cd:6e:3f:75:
                    2b:fd:07:5e:d3:bc:23:7a:7b:78:81:99:b4:46:27:
                    a9:ea:69:23:8f:65:24:37:a8:62:8b:a6:9f:0f:ac:
                    cb:97:f6:aa:5f:f1:e8:a0:ba:df:aa:0c:b2:7d:81:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9D:5C:B5:F1:6A:2F:8F:7A:B4:0A:C6:25:E1:19:DF:1F:F9:2F:6F
            X509v3 Authority Key Identifier:
                keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:87:01:31:eb:bf:bf:5c:29:ac:38:9c:0c:6b:3f:9b:68:33:
         13:b0:af:8a:b8:d6:6e:f1:90:cd:d3:90:59:49:a0:9c:be:86:
         04:9e:7c:65:60:c4:81:ef:09:18:6f:bd:65:60:72:48:80:f0:
         db:93:4c:f2:09:d7:05:51:6a:c1:90:a6:a5:15:6b:87:2a:38:
         4f:e9:20:22:6c:a0:20:60:95:8b:4e:fa:3f:03:d2:e3:b5:77:
         92:d4:f0:d1:ca:0e:7c:0c:eb:a0:45:47:2b:d5:46:7d:4e:c3:
         80:09:7e:4c:37:c6:6f:79:9b:1f:e2:f4:0e:7f:7e:55:0a:69:
         5d:e7:51:3b:79:ce:74:18:e6:81:c5:e8:83:35:04:95:2e:1b:
         9a:2a:e0:90:dd:ae:2e:b4:81:98:69:30:ad:bb:f2:cf:fe:d5:
         a1:b3:db:86:43:ee:d6:09:e7:34:4f:53:cd:26:54:78:c4:03:
         fe:5f:26:1c:8d:72:05:48:82:d9:55:23:ff:1d:46:64:c5:8c:
         7f:34:c8:78:58:5f:d5:cb:fa:54:19:21:14:87:33:47:31:90:
         77:c7:81:f3:92:ac:77:51:10:08:c2:33:82:1f:bc:7a:3d:d7:
         43:12:52:79:53:9b:fa:b5:6d:39:cb:d0:04:11:50:f6:01:d1:
         ef:cc:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:00:34 2025 by rpki-client