This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
File:                     3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json)
Hash identifier:          M+ol6Ur0mpo5Oc09Sjbdu6f3WkMc12lkaY9rCMjQeXI=
Subject key identifier:   76:5E:80:E2:11:76:4C:4A:7A:4B:3C:54:33:9B:70:C8:82:75:3B:D1
Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09
Certificate issuer:       /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
Certificate serial:       03BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
Manifest number:          03B5
Signing time:             Wed 24 Dec 2025 23:48:53 +0000
Manifest this update:     Wed 24 Dec 2025 23:48:53 +0000
Manifest next update:     Wed 31 Dec 2025 23:48:53 +0000
Files and hashes:         1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: LP/N5s1i7Y7turqVg9VO8egyc+C7v1qAyjiHcWR40Vc=)
                          2: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: /dpglo9CFx73F4sqDk7WZ21gpjG8xDFFFJkPbHJ8/V0=)
                          3: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: NYEcly+S03KH8Gz/ED4JBmnf9asUtp3vEim2ZrMueG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl
                          rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 23:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958 (0x3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
        Validity
            Not Before: Dec 24 23:48:53 2025 GMT
            Not After : Dec 31 23:48:53 2025 GMT
        Subject: CN=694c7be5-05ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:be:98:64:02:a2:f6:1c:b6:e4:6c:76:4d:
                    73:cb:79:ae:eb:f7:b3:f4:3b:e8:e0:c8:8a:da:fe:
                    b3:ce:33:24:3d:e2:4b:46:26:fe:e0:07:e6:b0:68:
                    6c:01:04:52:db:61:c7:c7:24:f4:fd:8d:38:ec:96:
                    40:9d:07:a3:a0:e1:56:c7:bc:2d:38:18:b0:91:c2:
                    99:af:d1:cd:2a:d8:b2:eb:9e:cf:22:5c:c0:a1:99:
                    97:0e:9c:1d:c1:07:3e:7c:a7:2d:ac:29:af:1e:f0:
                    e0:d1:c5:dc:69:10:5c:60:78:ed:67:59:01:85:30:
                    5e:05:60:4f:bc:33:76:74:37:83:ad:7b:b1:b9:56:
                    48:2c:40:da:82:75:8e:50:26:60:9f:78:5e:6c:f0:
                    d4:65:95:55:41:69:49:7b:f1:25:a1:87:d5:79:8d:
                    e6:1b:0d:f7:64:e0:24:0e:53:88:2a:3c:88:4f:c8:
                    b9:94:1e:26:17:d7:50:15:93:b6:4c:9e:df:69:d4:
                    77:57:4c:81:e3:4b:1d:5a:e3:10:9c:00:c8:a2:df:
                    23:c4:8b:9a:00:65:17:dd:ca:7a:8d:d3:1b:7a:bc:
                    0b:c3:1f:5a:8f:ba:ef:5b:86:dd:91:3a:77:37:b9:
                    72:84:24:94:41:dd:24:28:e5:00:8d:44:2c:1f:03:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5E:80:E2:11:76:4C:4A:7A:4B:3C:54:33:9B:70:C8:82:75:3B:D1
            X509v3 Authority Key Identifier:
                keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:76:d0:13:24:ee:9a:7e:d2:47:bd:e3:d0:5f:5e:4e:32:4b:
         c6:6f:88:f6:b6:25:2f:65:f5:b8:3f:4a:c0:a3:07:ce:dc:10:
         31:9a:28:68:1f:7d:07:9d:9a:22:c8:f8:69:3a:84:ec:b2:a8:
         27:77:86:ef:be:2f:11:9c:5b:4b:71:f8:5e:8a:8f:ea:23:20:
         4e:a4:56:bc:99:4b:8b:65:27:5d:36:43:bf:8f:52:8b:8f:68:
         cb:ca:ea:2b:35:1c:1c:f8:60:ab:99:85:01:05:8e:6d:c2:aa:
         68:6c:5f:62:ee:bb:5e:02:4d:2e:94:ac:6b:c0:a2:ad:75:c0:
         ae:1a:9a:12:2f:18:cc:83:4d:82:08:9f:f6:ca:71:67:8c:dd:
         f2:a2:c4:36:63:bd:40:51:21:d9:74:2d:59:8e:07:0e:ae:37:
         d0:aa:2a:0e:8f:34:35:45:cd:e7:0b:37:e3:d2:c4:ab:47:f5:
         00:cc:4a:cc:bf:6b:40:9e:64:09:be:f1:b7:f3:0a:a2:82:97:
         c9:b9:d6:b6:18:dc:cf:f9:79:e5:5c:85:6e:ad:00:e2:f7:f7:
         db:ed:0e:3e:18:cf:c8:50:a5:73:8a:16:0d:83:a4:8b:98:fe:
         1d:e0:b0:b0:f7:03:c9:5f:c8:be:34:06:62:f5:a5:a8:a3:b9:
         8d:e7:3a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 01:29:56 2025 by rpki-client