This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
File:                     yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json)
Hash identifier:          Ph9vDz5X6l9DFOO9NXL5O3yZ5d5jxXNngSKVTjF/M20=
Subject key identifier:   2E:8E:CF:18:03:7C:B0:00:E7:AE:E6:64:65:24:B9:69:55:AD:04:51
Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
Certificate issuer:       /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Certificate serial:       0A0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
Manifest number:          0A03
Signing time:             Sat 20 Dec 2025 19:18:27 +0000
Manifest this update:     Sat 20 Dec 2025 19:18:26 +0000
Manifest next update:     Sat 27 Dec 2025 19:18:26 +0000
Files and hashes:         1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: 3gNUv3CcOkOcMiAJKEcVliSzUJiLRoEC+rAkXWA4/c4=)
                          2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: 2eavA5MnM8j9MsEorxYmL8jVbA9inLFPJYXoSo6cKDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
                          rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 19:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2570 (0xa0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
        Validity
            Not Before: Dec 20 19:18:26 2025 GMT
            Not After : Dec 27 19:18:26 2025 GMT
        Subject: CN=6946f683-08cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:e5:13:c5:d1:02:8d:e1:be:77:91:0e:17:
                    11:cf:eb:58:e9:89:0a:53:c3:83:f4:2d:4b:c9:eb:
                    8f:84:31:0e:b4:26:44:a0:8b:91:39:2e:30:3d:39:
                    e6:cd:64:e8:15:b8:db:e2:f6:93:cf:ef:11:73:58:
                    e1:9a:1d:11:d3:09:6c:84:ee:7e:bc:d5:ca:0a:2d:
                    e8:7f:8e:88:cf:8f:8a:08:72:1b:08:5d:77:bc:a4:
                    3e:f3:b6:16:64:f5:56:af:a0:3c:13:20:f7:8b:eb:
                    aa:ab:20:d2:30:3a:2f:f7:9b:c5:7f:d4:2f:f5:8c:
                    69:c3:99:2b:86:60:06:ff:8d:05:58:d3:98:56:6d:
                    84:b6:25:7d:4c:df:c0:6e:79:db:9d:d6:a4:31:30:
                    9e:38:1a:59:a5:52:44:38:e2:ef:b1:f7:bc:4d:2a:
                    80:54:32:54:db:cc:10:27:96:10:aa:9f:14:6d:3e:
                    d3:82:96:25:34:59:8d:b1:b4:83:ca:33:26:8b:35:
                    30:89:64:5a:3d:03:fb:f0:c6:b6:20:6e:ff:cc:16:
                    f1:21:cf:e3:04:f6:5f:b8:30:cc:ac:5e:a5:c9:c3:
                    cf:31:2f:03:67:c9:50:ac:5b:2e:79:15:dd:55:37:
                    37:51:82:0c:82:8b:57:6d:47:a2:e9:cc:2c:08:ed:
                    18:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8E:CF:18:03:7C:B0:00:E7:AE:E6:64:65:24:B9:69:55:AD:04:51
            X509v3 Authority Key Identifier:
                keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:02:1c:91:4a:ec:f5:1a:07:9b:5c:0e:dd:a7:a8:bc:f6:2d:
         6b:34:0e:59:8c:70:3c:8e:cd:0b:64:de:76:ac:c8:aa:9a:59:
         64:29:2c:10:4e:18:bf:d1:76:95:e1:0f:89:0e:70:e0:5a:a4:
         fb:99:39:48:5c:f1:38:27:58:be:20:ec:62:3e:9e:b3:b5:c4:
         c0:b0:e9:f0:36:ef:63:21:0f:f3:c5:c5:c7:30:e0:2f:f3:d1:
         ef:b7:10:c4:97:ca:05:6d:b2:33:e5:3f:19:80:7e:95:9a:51:
         5e:de:88:00:ca:99:47:35:b5:13:04:ad:f8:3a:35:44:74:a8:
         ca:f6:59:76:3c:25:e3:36:4a:5a:56:42:ad:19:36:8e:e8:4f:
         1d:78:50:02:da:8d:9b:41:8d:c2:ac:42:39:56:ec:4f:45:7d:
         69:ec:1e:ef:c8:15:a7:31:15:74:15:99:32:5b:ae:d2:c4:3c:
         17:f3:38:86:45:37:5a:18:db:db:d1:88:ff:a1:5a:1d:a4:b7:
         e6:0f:ad:d6:da:4c:66:28:4d:b9:53:5b:14:ce:cc:8a:13:0e:
         49:a2:12:ce:87:c5:b8:dd:d0:8b:9c:15:6a:7f:53:44:f0:62:
         1c:bb:41:7a:49:83:19:32:89:d0:b1:ba:67:a8:89:15:af:f1:
         a1:f0:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:48:30 2025 by rpki-client