This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
File:                     YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json)
Hash identifier:          T9zH++T1Es5lozULiTNPAzQdjGbFLGyiJ288YZpdMWs=
Subject key identifier:   45:BF:78:3E:02:DF:D9:E1:6A:03:7D:5A:A4:A1:92:9B:1D:8C:ED:F9
Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
Certificate issuer:       /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
Manifest number:          0154
Signing time:             Fri 05 Dec 2025 02:21:00 +0000
Manifest this update:     Fri 05 Dec 2025 02:20:59 +0000
Manifest next update:     Fri 12 Dec 2025 02:20:59 +0000
Files and hashes:         1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: v/GLr81PkonZIyqHhU9qXMLeczUbaPLOkFRvyOlJyvo=)
                          2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: QQ0CP8HHmI7PCShWjhNg26xSyERliRPL6u4e6U+9a/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
                          rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
        Validity
            Not Before: Dec  5 02:20:59 2025 GMT
            Not After : Dec 12 02:20:59 2025 GMT
        Subject: CN=6932418c-b0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:41:80:74:4f:86:ea:5f:52:4a:57:b5:64:
                    fc:63:63:bc:df:4f:dd:9e:85:23:97:22:ff:02:38:
                    00:62:16:32:7e:60:8d:ce:13:29:44:23:27:4c:ea:
                    8a:d9:9e:6d:07:db:68:0f:7f:f9:fc:18:04:e3:d7:
                    d4:32:d6:d7:6e:58:e0:b9:4d:95:f5:cc:ad:be:6c:
                    21:ab:6a:9b:70:77:af:a4:f6:c9:00:05:82:6f:51:
                    2d:52:c7:f8:94:35:c4:33:6d:85:18:e6:58:cc:b8:
                    c1:9c:b1:68:84:f9:b7:ae:88:6d:e8:f9:8d:4b:6c:
                    dd:7b:06:35:d0:f8:7e:35:19:3c:7d:95:21:50:67:
                    5e:ab:27:bf:4c:0c:e6:74:7e:c8:98:d0:06:fd:d0:
                    58:37:01:dd:c7:1a:4a:22:ee:4a:bc:73:ea:3a:3a:
                    6d:b0:3d:ba:4f:f1:1e:de:2d:4f:3f:f4:da:84:c5:
                    62:04:77:67:a3:7a:49:46:b9:46:8e:61:0d:c8:e8:
                    27:55:b2:d3:f9:40:91:37:d3:4b:31:a7:78:e0:86:
                    7a:5d:56:a3:c2:12:e5:cf:9c:d6:80:a4:e0:b4:ad:
                    78:c7:d4:93:00:88:9c:92:41:40:c2:09:8a:15:9e:
                    4b:6d:b4:94:23:13:d2:f3:66:f5:ea:4f:c0:01:25:
                    2f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BF:78:3E:02:DF:D9:E1:6A:03:7D:5A:A4:A1:92:9B:1D:8C:ED:F9
            X509v3 Authority Key Identifier:
                keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e0:e8:6b:1a:35:4b:75:67:6b:2b:d5:d1:4c:8d:52:87:46:
         f4:2d:ac:b8:d9:a1:32:43:d4:56:0b:c4:15:dd:24:64:a6:2b:
         36:24:3b:5b:98:19:86:d4:fa:8f:68:91:da:ec:28:48:d3:2d:
         76:37:3a:9e:33:87:cb:da:28:14:ea:bd:1e:18:ee:aa:bb:04:
         80:a1:81:20:8a:b5:d7:10:15:3b:86:66:de:ae:1d:bc:b7:9d:
         66:38:93:75:cd:ef:de:32:fc:fc:5d:0c:7b:b2:7d:09:37:37:
         91:e8:a2:4c:9e:4e:e1:a3:02:9c:8c:c0:c3:ce:59:9f:a8:8a:
         77:87:bb:dd:c7:bf:cb:b8:d1:df:1b:c0:21:ab:cc:3c:64:f6:
         a4:12:f2:4c:3d:2f:76:3b:a3:0e:4b:7d:75:26:54:62:3d:7f:
         36:6a:72:7a:44:00:e1:8b:a8:e7:2a:33:18:82:60:7a:f9:2a:
         92:3a:3e:7a:08:1d:3b:32:93:2a:91:83:55:cc:f9:fa:9e:ff:
         ab:1f:19:32:e4:db:e8:ae:62:f5:17:84:2b:ba:07:9c:0a:53:
         ad:ac:83:8a:a2:67:a1:6e:ba:2a:f5:01:be:1d:4e:61:df:e4:
         01:1c:eb:3d:71:10:94:79:71:06:68:86:23:b1:79:2c:81:a2:
         8b:6d:d9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:46:41 2025 by rpki-client