This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
File:                     ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json)
Hash identifier:          CINxFqnKq59QEW5xbd5NULEpsa1EmBgWcEC9m+9+mXY=
Subject key identifier:   72:CB:DD:AF:78:EF:51:63:C0:A9:BA:47:D2:AA:BB:CA:E0:59:48:98
Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
Certificate issuer:       /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
Manifest number:          9A
Signing time:             Fri 05 Dec 2025 04:23:01 +0000
Manifest this update:     Fri 05 Dec 2025 04:23:01 +0000
Manifest next update:     Fri 12 Dec 2025 04:23:00 +0000
Files and hashes:         1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: aAYTmID4p9hc07gT5pT14ky/oTDBZMiZ98xCLk4xQcM=)
                          2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: b2BcNMesZ27DQqzlZd7MPdoju4HvYEGHIF6wjO+48TQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl
                          rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
        Validity
            Not Before: Dec  5 04:23:01 2025 GMT
            Not After : Dec 12 04:23:00 2025 GMT
        Subject: CN=69325e25-6ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:56:5d:36:55:5f:8a:f4:55:7e:cb:5f:05:
                    d6:f5:8e:ad:29:6f:a9:48:dc:68:65:6d:21:cc:35:
                    92:e0:bc:8d:98:3f:f2:39:f4:b4:01:5f:f7:84:af:
                    e7:24:5d:bf:5b:d5:a2:71:5c:d9:f6:de:4f:cf:90:
                    1f:4e:e0:91:60:86:6f:16:5d:de:ec:ce:b9:4a:11:
                    d8:54:9e:71:19:90:68:c1:1e:b6:cc:e5:fc:f3:b8:
                    79:4b:9f:ed:80:d3:07:58:c4:f3:78:1b:02:13:65:
                    0c:72:da:1c:3a:67:a1:7a:47:e1:d8:da:92:f3:70:
                    2b:fd:e9:5b:3c:2e:4d:e4:a0:05:3b:fe:4f:ae:ea:
                    cd:a8:ef:4c:e9:40:7b:1d:03:0c:c5:4a:9f:11:4d:
                    86:22:3b:06:b3:8f:65:e1:2b:1a:37:53:1f:ec:8d:
                    53:2a:f9:7a:ed:73:6d:1a:28:c6:34:4a:77:22:20:
                    08:a4:b6:ad:bd:33:7f:6d:c1:3d:81:90:28:25:17:
                    1a:d1:8f:5b:f8:51:fa:33:5b:ca:8b:e2:74:dd:c6:
                    95:15:f4:b2:80:a9:b2:86:ab:7c:31:df:57:8b:32:
                    2a:9c:01:53:5f:99:19:27:7a:21:c7:42:4b:20:c5:
                    47:77:1f:bc:c5:1b:66:37:10:8f:94:05:f3:00:18:
                    50:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CB:DD:AF:78:EF:51:63:C0:A9:BA:47:D2:AA:BB:CA:E0:59:48:98
            X509v3 Authority Key Identifier:
                keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:86:1a:8d:e1:31:fc:6c:26:32:84:76:10:b8:25:82:1e:81:
         14:5c:fd:26:32:a8:e7:97:08:7a:75:01:6f:c3:62:6f:aa:07:
         59:2f:b5:c7:18:aa:42:c3:de:4e:21:05:f9:da:b1:ea:22:85:
         9f:e5:a3:82:df:f2:70:c2:94:35:74:db:09:d9:32:25:61:8e:
         ea:a9:68:16:ac:e4:79:1a:a5:31:e2:44:cb:c7:f4:f7:4e:32:
         bc:83:26:7a:f1:d0:a4:e9:99:f5:3e:89:44:18:6f:e0:3a:b2:
         2c:b5:81:3c:eb:b9:51:bf:10:16:29:49:6a:9f:b7:3b:65:b5:
         ad:4f:97:1f:30:c8:bb:fa:d0:20:0a:8c:6e:3b:0e:45:0e:9a:
         34:95:34:72:8a:f0:77:71:6f:9e:47:88:50:83:de:e1:98:6f:
         3b:b2:e9:04:97:82:d5:c2:7c:b1:83:dd:5f:f1:7e:a7:e4:c6:
         ab:92:f1:5d:14:45:73:7d:3e:9b:39:18:09:1b:fb:6b:2c:b3:
         3f:60:33:8d:33:7d:50:61:83:5d:21:a6:c0:94:3d:75:90:79:
         53:d8:94:e9:c8:37:e6:36:8a:2a:2c:6d:b1:df:18:44:af:18:
         2d:d8:b6:c8:af:89:40:d2:f8:ec:88:15:5f:f0:7a:bc:38:c6:
         20:0f:24:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:25:28 2025 by rpki-client