This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
File:                     Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json)
Hash identifier:          6jK/kCpKb2V3IPqjGL41T8BKXu1kFbKtvjcq9gMjP90=
Subject key identifier:   6F:24:EA:F8:95:66:3A:AC:C9:24:C4:03:78:42:E4:C7:84:94:DF:27
Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Certificate issuer:       /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
Manifest number:          01A7
Signing time:             Tue 23 Dec 2025 02:17:36 +0000
Manifest this update:     Tue 23 Dec 2025 02:17:35 +0000
Manifest next update:     Tue 30 Dec 2025 02:17:35 +0000
Files and hashes:         1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: aKnc2PZRNK6UXXzC9pDMWhyIE12udFQqbxXgJ7gZ/Ds=)
                          2: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: DgTHE1vd+LuLJ/6bYp2I4wVbGI057+J0uGiHNmi5Ok4=)
                          3: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: 9h3davUQ9pNDA3U7SYojAK+YEhrIBkhT56ukToleizY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
                          rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
        Validity
            Not Before: Dec 23 02:17:35 2025 GMT
            Not After : Dec 30 02:17:35 2025 GMT
        Subject: CN=6949fbc0-8b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:30:71:6b:a7:f8:29:03:cb:7c:8a:48:ab:
                    0e:53:56:6a:45:70:6d:a4:b0:1d:07:d3:45:37:70:
                    8a:46:51:2b:63:ba:03:2a:25:e9:6c:bf:d4:eb:c0:
                    c7:a7:64:51:6f:b9:51:9a:32:eb:f9:44:d7:cc:a0:
                    7c:01:7e:b2:97:2d:21:72:98:e2:7c:ec:1c:03:30:
                    d1:e7:d0:6c:87:0c:7c:9a:98:7e:ef:00:1e:5d:47:
                    2d:64:44:e2:62:55:bc:8c:ac:17:41:94:8f:15:d7:
                    7c:7f:30:29:e9:6f:e5:7e:1d:68:ee:90:63:50:86:
                    53:e0:8a:87:6b:30:b2:c3:33:45:0e:9f:f4:47:33:
                    9f:3d:68:94:50:dd:e2:f4:e7:dd:a8:a9:a8:75:86:
                    99:a4:3e:3e:16:26:47:c9:97:70:29:8e:25:ca:85:
                    ea:34:ba:62:e5:7a:8b:43:03:da:ec:3a:21:14:48:
                    e5:f9:4a:cd:ae:12:63:79:47:9e:44:7c:ce:db:e1:
                    97:da:65:4f:cb:0c:68:6e:28:d7:28:8e:77:d1:6d:
                    ae:ed:ae:81:b3:f0:ba:57:fe:b9:f7:b4:2d:2b:f7:
                    31:cc:42:34:a2:26:9b:08:69:b6:b9:31:64:da:3b:
                    92:87:c4:04:27:2f:ba:1a:7e:12:b1:db:d6:17:42:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:24:EA:F8:95:66:3A:AC:C9:24:C4:03:78:42:E4:C7:84:94:DF:27
            X509v3 Authority Key Identifier:
                keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e5:91:15:f4:48:94:d6:e1:1d:00:25:6d:ab:6b:97:87:bd:
         92:89:fa:7e:d6:c8:99:9a:79:23:68:6b:95:56:2d:ac:0d:55:
         e7:0c:b4:9a:e6:38:12:a9:99:ab:43:fc:c2:90:5b:a7:0d:22:
         d5:53:e6:e2:38:e3:3d:47:ee:2c:85:13:af:3a:07:f2:87:5e:
         20:ee:b8:97:92:5e:63:6b:e1:82:b5:fe:22:2b:e1:af:e9:60:
         aa:4e:3c:ab:f7:bf:ff:9d:a5:4a:9b:ac:bd:0b:4d:6b:18:9a:
         18:f5:5b:ac:74:18:b0:d3:d4:19:f3:d1:38:3b:2a:17:78:1d:
         2a:9a:70:c9:65:b3:07:3e:3a:04:35:34:bd:e1:b7:af:c6:af:
         33:9d:3f:d1:c8:66:1d:a4:29:1a:2b:56:d2:cd:e1:3a:93:b5:
         be:ee:23:6e:7c:bd:e7:2a:00:be:a6:32:5c:6e:57:20:09:2d:
         b5:df:17:b2:63:b8:14:e6:df:ef:8a:69:46:af:00:66:cc:f3:
         4a:c5:d2:88:b8:58:1c:37:80:9c:75:3b:53:13:75:19:0a:42:
         0d:13:cc:44:f8:f6:7d:cb:d8:0b:7a:0e:77:1f:66:00:10:2a:
         98:f9:09:8a:6c:35:c6:50:09:62:c4:01:51:7a:88:4e:fe:dc:
         ae:f7:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:24:35 2025 by rpki-client