This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
File:                     ycIPtAaIDHHcvabGs_umov85Kks.mft (raw, json)
Hash identifier:          +uoGQ2CBbDze5znTDxI/bJC64QLd+PUVhGkWvwN9Ito=
Subject key identifier:   D6:E0:F2:78:09:12:5E:89:9F:0C:13:48:20:D4:0C:6A:B2:87:17:F7
Authority key identifier: C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
Certificate issuer:       /CN=A91B86F6/serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
Manifest number:          03
Signing time:             Fri 19 Dec 2025 07:02:44 +0000
Manifest this update:     Fri 19 Dec 2025 07:02:44 +0000
Manifest next update:     Fri 26 Dec 2025 07:02:44 +0000
Files and hashes:         1: ycIPtAaIDHHcvabGs_umov85Kks.crl (hash: pYiaAM3Mi/4z2XH7y1wnBsrqJ4TegwpqRUgFpDApxn0=)
                          2: 41E03246DA3E11F0A9D9994C8ED3641D.roa (hash: 23mIUr1PfTNa8temdqnLSwccWrs/9SUgZFI6C04yVeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
                          rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B86F6, serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
        Validity
            Not Before: Dec 19 07:02:44 2025 GMT
            Not After : Dec 26 07:02:44 2025 GMT
        Subject: CN=6944f894-2c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:65:0b:65:59:1a:eb:34:7d:91:d8:9e:57:
                    c0:6c:63:1a:f8:7a:ff:60:c9:92:19:59:28:3a:81:
                    82:84:79:e9:93:a3:c3:0e:e8:0d:d4:a1:c1:01:4f:
                    f8:4f:83:70:7e:59:cd:ba:d4:db:18:b0:b5:35:89:
                    97:0c:58:86:a8:60:94:60:af:27:58:d4:09:14:ec:
                    bd:c4:5a:c8:57:eb:4f:14:02:7a:04:2f:a5:e1:a0:
                    85:03:0d:c9:36:46:81:1b:a7:a0:aa:cf:f0:2e:06:
                    12:15:e8:92:5f:05:26:6f:77:38:61:71:95:cd:80:
                    f5:f5:62:94:25:a4:a8:84:73:2d:b5:c8:3c:d6:39:
                    b3:a8:40:7a:07:93:70:d7:63:da:3c:95:07:1a:12:
                    9d:72:96:15:8f:fd:dc:eb:2a:2e:f3:c3:fd:b5:88:
                    37:7c:9a:14:ed:19:e9:e4:c8:cc:6e:b9:40:db:54:
                    46:82:69:ac:44:bc:f3:00:64:e8:3d:7e:4e:ac:64:
                    ab:2d:d3:66:e8:ba:04:3a:5e:f5:f2:71:ab:03:ad:
                    f1:a7:70:06:94:fb:ee:11:75:12:2e:45:5e:0e:f2:
                    c9:ff:5f:45:12:fd:b0:30:af:66:95:c3:ca:33:03:
                    39:59:fe:8d:5f:ab:ef:8c:78:0a:d9:07:04:ae:3c:
                    e7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E0:F2:78:09:12:5E:89:9F:0C:13:48:20:D4:0C:6A:B2:87:17:F7
            X509v3 Authority Key Identifier:
                keyid:C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:66:92:34:50:84:21:75:f8:79:ed:bc:da:ea:01:86:d9:48:
         f7:f7:e0:de:dd:65:ae:2b:96:1c:17:42:72:a1:e2:8d:8f:00:
         e8:d0:b3:23:3b:5a:e2:04:00:a8:a4:a5:e4:24:4b:95:f2:39:
         17:8d:04:ee:24:4d:0e:3b:30:0e:3b:dd:e0:fa:81:c1:26:13:
         30:11:69:a3:9f:12:e4:ac:49:6a:41:54:78:16:91:fb:b7:34:
         4e:18:3b:62:0f:f5:61:9e:0c:b7:2c:5e:e8:6d:0b:4a:26:bb:
         13:d7:3f:02:6b:23:1b:ff:63:68:42:a4:6f:57:48:56:7e:0b:
         b6:19:4e:32:f4:ac:4e:a9:eb:7c:bd:53:42:e1:78:9e:95:fa:
         0f:7a:a6:c7:fb:8b:86:48:2b:aa:31:ba:0f:88:26:c8:81:8f:
         58:6f:9d:79:62:b1:76:71:df:a5:03:9b:c6:2b:b2:6d:75:9e:
         75:4f:71:02:01:37:34:f1:7d:62:a7:7d:b8:5a:8b:8b:82:ba:
         ad:f4:e2:7f:ad:cd:78:3b:ad:df:9b:da:a7:ad:d2:d0:4f:ca:
         ca:55:95:6c:ae:66:52:bf:e0:20:c9:e4:ff:ef:e6:36:d0:dd:
         45:db:ea:b7:82:85:33:84:2c:fd:ed:85:92:c0:2f:fb:fc:3d:
         eb:3c:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:43:57 2025 by rpki-client