This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
File:                     7yfjyfFbWDsVypzMPJBdIpzi8NA.mft (raw, json)
Hash identifier:          qiKy29D+m2daqzrIGRQ7du29yDy10sbs13gf8rJHx10=
Subject key identifier:   CC:82:90:50:42:C6:58:FE:32:89:49:65:44:54:F2:BC:D4:F2:CE:2B
Authority key identifier: EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0
Certificate issuer:       /CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0
Certificate serial:       0640
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
Manifest number:          063B
Signing time:             Thu 18 Dec 2025 22:04:45 +0000
Manifest this update:     Thu 18 Dec 2025 22:04:45 +0000
Manifest next update:     Thu 25 Dec 2025 22:04:45 +0000
Files and hashes:         1: 7yfjyfFbWDsVypzMPJBdIpzi8NA.crl (hash: G+pbTS/GOTgkD4CMyavLHQWT5usK61zlXnXQ4yzPxbI=)
                          2: 38378A3EBA3411EBB94A527CC4F9AE02.roa (hash: bXfsV+JRththOFdM9JTTJyhVvibLKGVpju+gIvVc/Sk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl
                          rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1814, serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0
        Validity
            Not Before: Dec 18 22:04:45 2025 GMT
            Not After : Dec 25 22:04:45 2025 GMT
        Subject: CN=69447a7d-2e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:34:35:66:eb:b2:af:67:87:b6:02:61:1f:
                    91:55:61:f0:d4:4e:e5:fc:c4:cb:bc:0f:a1:28:b4:
                    11:70:f2:7c:73:e5:68:e0:34:04:38:84:41:ca:60:
                    c0:7b:18:97:a3:e0:f2:de:9e:5c:8a:ec:ad:8f:b4:
                    84:ae:1e:d0:23:35:0c:51:ef:16:e1:fd:1e:56:35:
                    57:69:b6:d9:b2:b6:ff:f2:4d:51:72:64:b5:c6:77:
                    44:d2:bc:0a:35:67:73:54:9d:77:45:11:47:ac:5a:
                    d3:ba:53:42:0d:43:07:7b:8e:a7:3e:5e:54:17:3c:
                    1b:db:1f:bf:87:9d:39:ab:41:e4:d5:13:f4:d1:56:
                    7b:08:41:2f:08:da:08:43:e5:63:d0:80:21:b7:71:
                    03:5f:59:e8:23:a0:94:ae:26:f8:87:2e:d9:bc:6c:
                    87:d5:28:59:d0:53:00:92:31:36:64:05:d6:db:b6:
                    d7:88:1f:b1:e9:26:ae:75:24:f3:78:e1:90:3f:3f:
                    13:4d:31:7b:81:8b:09:75:c4:a9:63:37:c4:03:9d:
                    67:45:37:90:ac:d8:e3:ce:32:ed:7d:2b:a9:f4:d4:
                    a8:56:9b:6c:60:28:3d:d0:55:23:7f:f7:e6:79:47:
                    0f:fa:6f:84:be:ca:70:3f:bd:3c:75:27:d5:82:0d:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:82:90:50:42:C6:58:FE:32:89:49:65:44:54:F2:BC:D4:F2:CE:2B
            X509v3 Authority Key Identifier:
                keyid:EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:87:59:24:37:a9:49:a0:a6:2f:da:f6:34:7f:b4:1c:5e:5c:
         f1:a0:7d:02:a0:6f:5d:21:04:44:60:78:56:2b:5c:d6:1c:0c:
         82:d9:9b:83:c9:87:c6:17:7f:08:24:4d:84:2d:0d:28:48:fa:
         91:f4:08:06:85:ce:90:b9:9f:7a:5b:49:0b:5d:63:0e:8a:98:
         44:91:04:60:a8:f0:ae:d7:d7:96:ee:a4:8a:ab:f2:b5:e0:74:
         84:74:40:ff:ac:ee:af:f5:c1:54:04:d8:7b:d8:cf:c8:16:aa:
         8c:59:58:25:45:48:0c:f4:a8:27:35:95:14:d8:c0:4a:7c:33:
         3d:cf:4d:83:6a:68:13:92:ca:be:bb:e6:9b:d4:03:1e:b9:08:
         c2:dd:ee:de:5d:24:7c:77:60:1e:1b:86:94:19:e4:c8:7e:b6:
         1c:2e:d4:f8:61:53:4d:78:33:23:51:9e:cd:93:80:76:88:74:
         b3:fd:c1:dd:09:48:81:f1:c2:83:f8:37:a3:2d:10:b3:03:55:
         1d:80:55:1b:1a:b1:29:dd:33:0b:11:1e:7a:a5:aa:40:43:f5:
         4d:b0:09:eb:ea:1f:b7:fa:d4:8a:3c:a8:9b:bb:a2:39:d1:5e:
         70:f1:0e:23:b3:d8:f7:b1:9b:32:aa:2b:f5:63:a6:31:93:07:
         28:03:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:02 2025 by rpki-client