This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
File:                     gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft (raw, json)
Hash identifier:          VkU5KoZVgex1Kw5uMycXlEPJf37dK0Uul7aYS8NUdjs=
Subject key identifier:   51:07:8A:6E:03:4C:90:ED:10:F5:69:97:B0:4A:20:91:01:56:D5:ED
Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
Certificate issuer:       /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Certificate serial:       091D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
Manifest number:          0905
Signing time:             Sun 28 Dec 2025 19:43:39 +0000
Manifest this update:     Sun 28 Dec 2025 19:43:39 +0000
Manifest next update:     Sun 04 Jan 2026 19:43:39 +0000
Files and hashes:         1: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl (hash: VxthaXEB9jr/CaHE/5v7ZzNzl6hkBznO1gGV/yndu7c=)
                          2: 50998080BCE911EAA0114B70C4F9AE02.roa (hash: cLUMNNGZDXKmnSfIfezXfYoR32r92IsNS7fBbwGmjXo=)
                          3: C011E716845611EFA55F8043C4F9AE02.roa (hash: JA3zz7YBV2yY5LuFJwmjiYrPNzhrYXS+ieNG9VD56YI=)
                          4: EF2481168BCA11EDBED45E54C4F9AE02.roa (hash: mSIowL/A8Hlv6Qa1LIfRGqTyVL36owpwnqxjWXB2aCs=)
                          5: 8867D06A4D8211EF8C95A448C4F9AE02.roa (hash: /9kgKNrCq04PhMVa8ZMv2aZyDjYxKmN3kPG27wU/TPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
                          rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 19:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333 (0x91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BC97, serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
        Validity
            Not Before: Dec 28 19:43:39 2025 GMT
            Not After : Jan  4 19:43:39 2026 GMT
        Subject: CN=6951886b-a4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:9f:14:a1:0a:b3:f8:f6:33:f5:a1:f1:03:
                    c3:97:dd:81:54:20:e9:b7:3a:e5:a1:c2:ea:a1:5e:
                    ef:8f:3a:ac:7a:93:c8:c9:7f:86:95:97:71:a3:7b:
                    49:8e:57:3d:6e:c2:be:86:63:b3:95:47:96:85:2d:
                    87:62:d6:d3:f0:08:02:16:9a:4e:f2:d1:ce:06:09:
                    74:f2:71:4c:21:44:11:92:f4:89:2c:6c:5c:7e:0b:
                    6b:a1:0c:2b:5c:a7:d8:f0:9d:25:a0:43:7b:f6:df:
                    07:57:08:a1:c2:2c:9c:3b:12:6d:62:ac:e7:8f:f9:
                    8a:51:27:8c:37:2d:af:4c:22:2c:55:d2:b1:d4:07:
                    61:04:ca:3a:6a:cf:24:c1:a5:e7:94:9e:50:9d:df:
                    5e:bc:ad:f1:eb:86:8a:93:99:1e:c2:43:ee:57:56:
                    fd:bb:4f:ca:8d:e7:bd:7b:c3:99:a5:4c:ed:1d:04:
                    91:cd:9a:80:15:e8:e6:df:58:10:ac:07:59:4f:c5:
                    99:03:d2:67:82:0b:a9:17:ba:3d:46:df:01:98:54:
                    4e:70:3d:f9:ec:ad:49:25:e8:64:ac:dd:69:33:12:
                    2b:08:68:a2:26:9f:06:69:f2:e5:34:70:b3:47:64:
                    5f:78:a1:93:89:00:cb:3c:eb:80:17:96:0c:fe:64:
                    62:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:07:8A:6E:03:4C:90:ED:10:F5:69:97:B0:4A:20:91:01:56:D5:ED
            X509v3 Authority Key Identifier:
                keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:63:43:96:0f:7e:85:c0:14:41:46:51:91:35:43:6a:60:7f:
         1b:e7:03:4f:b1:ab:b8:f8:7a:b2:1a:80:51:c0:ad:bc:68:55:
         fd:28:4a:1a:92:1b:21:9c:6a:e0:72:e9:a9:61:23:77:81:9c:
         a3:77:cd:0e:ae:d9:71:fd:f3:19:fd:f7:a5:57:08:8b:cd:dd:
         61:7a:30:03:61:d8:76:21:5b:c3:31:8e:ab:d7:6c:c4:6c:f7:
         23:1a:85:5f:78:58:55:c5:92:9b:d4:8e:3d:5e:c8:c8:41:ce:
         18:33:98:ca:e1:92:cc:97:4a:42:6e:dc:ab:04:61:23:7a:db:
         2e:97:55:d7:a5:fc:6a:02:5f:9b:49:40:e4:fa:8d:b5:ee:37:
         6c:d3:83:84:f6:fe:bc:dc:79:52:27:47:33:f8:47:6d:b7:2a:
         86:74:a4:28:5d:ad:db:1b:79:2e:94:13:c0:75:cd:c2:da:09:
         50:98:11:2a:99:7b:00:89:d4:a8:e4:e0:f1:d2:fe:27:c6:b2:
         ae:3d:33:64:66:c3:4c:82:6e:26:13:33:d7:08:04:28:6c:d4:
         cf:74:44:cf:bc:0e:d5:28:00:29:bd:57:7a:59:75:ae:fa:e0:
         cb:4d:39:c5:f9:14:24:6d:e5:ae:19:fc:6e:68:1a:a3:d4:cc:
         b1:c3:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 14:59:04 2025 by rpki-client