This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
File:                     60yRrrkBmKp9PHgiHY4Ytwdd77k.mft (raw, json)
Hash identifier:          8WrcI4zXDKpsU0x3UpG3yrVLu8mYdRShGgWCUMJxl0M=
Subject key identifier:   A9:03:38:89:EA:5F:20:BD:35:90:9C:62:B1:AC:D7:E8:22:2F:FC:F6
Authority key identifier: EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
Certificate issuer:       /CN=A91D0F0F/serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
Manifest number:          54
Signing time:             Fri 19 Dec 2025 06:11:18 +0000
Manifest this update:     Fri 19 Dec 2025 06:11:17 +0000
Manifest next update:     Fri 26 Dec 2025 06:11:17 +0000
Files and hashes:         1: 60yRrrkBmKp9PHgiHY4Ytwdd77k.crl (hash: dP70mFDAn34unVJO2ib/QF6Lr0c53/Zsx2nMIFY4Vyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.crl
                          rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0F0F, serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9
        Validity
            Not Before: Dec 19 06:11:17 2025 GMT
            Not After : Dec 26 06:11:17 2025 GMT
        Subject: CN=6944ec86-c1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:cc:71:96:08:7a:8a:bd:3b:84:b3:37:b6:
                    48:8a:e8:6c:b8:e2:a2:c7:3a:b1:76:32:71:b6:d6:
                    09:fe:a2:10:9f:3e:df:39:fb:8d:77:c9:1b:81:52:
                    de:c5:f6:5f:fe:66:e7:00:41:48:fb:10:c9:16:ba:
                    6b:cf:8a:74:03:fe:5c:26:8e:79:88:09:b7:bd:aa:
                    ac:d8:2c:ae:3b:9f:28:cb:53:2b:62:3f:62:67:aa:
                    58:2d:f2:e3:88:c8:b4:53:17:b9:45:5d:0d:0b:35:
                    ad:a6:90:28:e5:19:7e:3f:24:2c:a9:a0:6e:cc:4d:
                    16:1b:f1:e6:a1:ef:00:8b:99:03:0e:30:bc:5c:ae:
                    00:eb:9e:39:46:7a:fd:0b:80:70:af:eb:04:f8:df:
                    80:dd:38:e5:4f:7a:21:48:0f:66:b2:d6:da:f7:2b:
                    5f:93:d1:37:86:23:a4:31:62:75:b8:75:fa:13:a8:
                    8d:19:f8:e0:f0:8c:ff:e8:14:16:aa:f0:2f:b6:2d:
                    a3:93:6a:35:ef:77:62:14:c0:7a:6c:ff:41:0d:43:
                    9c:5f:06:6c:be:d4:06:f6:11:5e:9a:72:ec:b1:c2:
                    0c:3c:34:7c:b6:ee:3c:93:ca:b0:65:ba:dd:8d:e6:
                    62:b5:62:9f:fe:23:d7:6f:45:03:a1:7c:6b:25:4a:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:03:38:89:EA:5F:20:BD:35:90:9C:62:B1:AC:D7:E8:22:2F:FC:F6
            X509v3 Authority Key Identifier:
                keyid:EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:9a:ad:15:77:8c:e1:01:1f:d4:d8:8d:e5:e6:09:15:d2:5c:
         51:dd:1b:f5:07:8d:f3:b9:83:95:2a:f3:87:d0:5f:6a:65:47:
         82:14:50:4a:31:79:8b:4b:59:35:c2:74:79:a1:7c:7f:52:80:
         96:a8:56:3e:83:29:58:de:4f:64:b8:20:c9:ca:c9:d5:5b:07:
         a2:17:9d:52:79:a7:6b:48:fd:3e:b7:84:89:14:ae:24:af:a4:
         74:99:5a:82:db:3f:e8:0b:86:83:91:12:ce:f4:4c:09:6a:91:
         34:fa:50:f9:d5:62:e2:d7:9c:84:6e:39:b5:56:12:db:b6:57:
         7c:07:cd:7b:2a:ea:9b:77:e0:17:25:44:74:5d:a1:d1:98:f6:
         96:a1:1a:f4:d3:a2:c6:67:3d:b8:7b:db:09:65:61:76:5c:dc:
         e4:1f:4e:58:86:33:be:cf:7a:57:ca:2e:b2:84:ad:dd:76:e9:
         7e:4c:2f:57:07:59:1f:8a:bb:66:e3:1f:c1:cf:24:b5:81:45:
         b3:c0:da:ed:1b:6a:bf:db:10:43:81:d0:9a:33:da:20:60:17:
         fc:bb:f9:1a:57:ca:b1:dd:33:6b:c9:3a:17:92:fb:77:f4:d3:
         b7:8f:04:03:85:10:f7:30:e6:96:d6:ea:c4:f4:a7:9d:ef:b5:
         13:d5:91:77
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MEYwRjExMC8GA1UEBRMoRUI0QzkxQUVCOTAxOThBQTdEM0M3ODIyMUQ4RTE4Qjcw
NzVERUZCOTAeFw0yNTEyMTkwNjExMTdaFw0yNTEyMjYwNjExMTdaMBgxFjAUBgNV
BAMMDTY5NDRlYzg2LWMxZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4f8xxlgh6ir07hLM3tkiK6Gy44qLHOrF2MnG21gn+ohCfPt85+413yRuBUt7F
9l/+ZucAQUj7EMkWumvPinQD/lwmjnmICbe9qqzYLK47nyjLUytiP2Jnqlgt8uOI
yLRTF7lFXQ0LNa2mkCjlGX4/JCypoG7MTRYb8eah7wCLmQMOMLxcrgDrnjlGev0L
gHCv6wT434DdOOVPeiFID2ay1tr3K1+T0TeGI6QxYnW4dfoTqI0Z+ODwjP/oFBaq
8C+2LaOTajXvd2IUwHps/0ENQ5xfBmy+1Ab2EV6acuyxwgw8NHy27jyTyrBlut2N
5mK1Yp/+I9dvRQOhfGslSp0lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqQM4iepf
IL01kJxisazX6CIv/PYwHwYDVR0jBBgwFoAU60yRrrkBmKp9PHgiHY4Ytwdd77kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRjBGLzUyREZGQzlFNURF
NzExRjBBODY3OTE0RUM0RjlBRTAyLzYweVJycmtCbUtwOVBIZ2lIWTRZdHdkZDc3
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNjB5UnJya0JtS3A5UEhnaUhZNFl0d2RkNzdrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw
RjBGLzUyREZGQzlFNURFNzExRjBBODY3OTE0RUM0RjlBRTAyLzYweVJycmtCbUtw
OVBIZ2lIWTRZdHdkZDc3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALuarRV3jOEBH9TYjeXmCRXSXFHdG/UHjfO5g5Uq84fQX2plR4IUUEox
eYtLWTXCdHmhfH9SgJaoVj6DKVjeT2S4IMnKydVbB6IXnVJ5p2tI/T63hIkUriSv
pHSZWoLbP+gLhoOREs70TAlqkTT6UPnVYuLXnIRuObVWEtu2V3wHzXsq6pt34Bcl
RHRdodGY9pahGvTTosZnPbh72wllYXZc3OQfTliGM77PelfKLrKErd126X5ML1cH
WR+Ku2bjH8HPJLWBRbPA2u0bar/bEEOB0Joz2iBgF/y7+RpXyrHdM2vJOheS+3f0
07ePBAOFEPcw5pbW6sT0p53vtRPVkXc=
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:58:51 2025 by rpki-client