This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
File:                     ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json)
Hash identifier:          yZHsgz4VdlhI9crmpRF5trL9HMrExBgXxiVVJLlPyOQ=
Subject key identifier:   C0:BB:13:D8:35:6B:96:4A:6A:DC:9A:1A:5B:42:17:C4:F6:D7:8F:CE
Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80
Certificate issuer:       /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
Certificate serial:       0624
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
Manifest number:          061E
Signing time:             Thu 18 Dec 2025 22:10:38 +0000
Manifest this update:     Thu 18 Dec 2025 22:10:38 +0000
Manifest next update:     Thu 25 Dec 2025 22:10:38 +0000
Files and hashes:         1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: pjJC2d7h/3jU3Vwc5S7yB5JeSbZR1pFB75s4flOZdak=)
                          2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: NtEKqe9K8qVaWm1bTRQ0N6CeN9vSLJhLoVuJfNIm9AY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572 (0x624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
        Validity
            Not Before: Dec 18 22:10:38 2025 GMT
            Not After : Dec 25 22:10:38 2025 GMT
        Subject: CN=69447bde-e828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:a8:70:8f:f4:8d:19:e8:b8:43:21:e5:f0:
                    10:53:4d:b5:4b:6b:49:24:2b:2c:94:f9:ee:71:c9:
                    78:87:9a:fa:8d:a3:0f:db:a2:c5:69:36:15:6e:45:
                    7e:7a:4f:3c:27:e1:2a:34:3e:50:52:23:db:6f:e1:
                    76:c1:9c:bd:4c:c0:92:a0:34:63:54:4d:d6:83:de:
                    ae:61:f7:c2:b7:2a:d6:12:10:36:21:e1:32:cf:2b:
                    93:14:6c:2d:d7:21:85:b7:36:a4:f0:b1:af:15:60:
                    ad:a7:12:06:9b:a9:2c:f0:9e:d8:3a:cd:3b:41:f7:
                    d3:01:46:f3:43:70:18:bc:60:b1:47:67:d4:7b:76:
                    42:16:ea:f2:64:d7:7b:c7:ba:ca:64:ee:16:e7:cb:
                    41:ee:89:da:bc:a9:47:09:75:1f:23:e8:06:85:b8:
                    36:fe:57:d2:4e:66:5b:95:96:c9:2b:40:9e:6e:74:
                    b6:fc:ac:44:04:65:fe:92:0b:e2:7e:2a:cd:e8:40:
                    e9:67:15:a8:4a:0b:01:71:48:74:be:2e:0a:fa:c9:
                    8b:7f:7b:f9:39:4c:fc:e7:f4:46:00:71:73:7f:fd:
                    ce:aa:2b:54:21:c0:b1:e3:79:53:75:55:12:ce:b6:
                    3a:19:63:cd:17:8a:2c:c9:d9:9c:b4:3a:e9:90:92:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BB:13:D8:35:6B:96:4A:6A:DC:9A:1A:5B:42:17:C4:F6:D7:8F:CE
            X509v3 Authority Key Identifier:
                keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:15:29:6a:9e:1d:ec:90:51:62:4d:34:a9:5a:f7:7e:4f:7f:
         c4:ef:34:89:6a:fa:ab:f7:1f:ee:50:a3:86:d1:1e:5f:01:bd:
         7b:65:3e:0a:57:07:91:51:33:4d:cb:a3:3c:52:fe:39:e1:82:
         e3:77:21:2f:41:fd:86:1e:32:d5:69:2f:1d:83:cd:65:6e:55:
         85:77:b3:52:a7:51:ab:93:4b:b7:0a:d6:ab:32:f9:84:32:29:
         fd:45:b1:35:b6:79:30:fd:58:a2:27:18:fa:1b:ca:67:ef:6f:
         ee:6f:79:c9:92:d1:4a:61:3b:83:59:ac:d1:a4:18:64:13:3a:
         01:52:a7:eb:d3:37:e1:f3:e5:a2:4f:ae:17:60:93:25:c5:d4:
         3f:47:42:eb:dd:af:2f:25:03:1e:e4:62:aa:11:b6:af:0a:43:
         15:d9:9f:29:d4:1a:dd:89:d5:2d:36:e3:e1:c2:5e:27:de:3f:
         bb:e1:f4:48:79:d0:e9:6d:42:5b:f2:c7:75:84:2a:71:38:f6:
         5d:00:c5:be:ae:c7:01:1b:70:f9:52:4b:33:da:eb:08:ce:d1:
         ed:dc:fe:66:97:40:86:80:0e:98:be:06:bf:d9:ed:f2:78:ba:
         1c:bd:32:bf:fa:73:bb:a3:0f:96:2a:c9:6a:85:9e:43:81:7f:
         fc:71:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:43:30 2025 by rpki-client