This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
File:                     Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json)
Hash identifier:          TZ58y+WWA1XkPGa1jY06qrrJWi7I73gyc2VM5DbU6z0=
Subject key identifier:   F9:9C:3F:69:51:52:7B:BC:1D:92:28:90:FF:C3:2F:B2:23:19:1A:64
Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
Certificate issuer:       /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
Manifest number:          018F
Signing time:             Fri 19 Dec 2025 02:44:47 +0000
Manifest this update:     Fri 19 Dec 2025 02:44:46 +0000
Manifest next update:     Fri 26 Dec 2025 02:44:46 +0000
Files and hashes:         1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: dHIiF5kN/n5DFG6VSVVLr148q6ngq2xhps/rsonPEVY=)
                          2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: Si3a7BG/8OJeYXWshDKB1ssBaH31J9TWvH+Wp+wV/dA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
                          rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
        Validity
            Not Before: Dec 19 02:44:46 2025 GMT
            Not After : Dec 26 02:44:46 2025 GMT
        Subject: CN=6944bc1f-b6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:d4:e5:1b:99:25:10:9e:52:7c:b8:6f:2b:
                    cc:35:e3:7f:7e:47:c6:c4:0e:15:cc:ef:30:61:e1:
                    75:b6:85:41:c1:13:4e:f3:73:7e:15:e3:c7:ca:83:
                    c2:88:30:f2:ef:c7:57:b6:e4:be:dc:62:c7:46:0f:
                    ec:37:64:d9:02:cd:01:f4:5e:75:7a:35:b4:6d:74:
                    06:80:74:95:47:98:0d:fd:04:d7:b8:3e:97:72:7d:
                    97:51:f7:f1:3d:32:40:3b:90:8e:51:bc:4a:3e:61:
                    d5:18:43:6f:c4:2d:82:92:ba:26:4d:10:2f:0b:b0:
                    a9:ba:b5:d8:e4:a4:26:0f:a1:0c:e7:bb:fd:00:80:
                    52:2b:fd:41:16:64:86:93:dc:05:8f:66:4b:0a:e4:
                    45:7a:b3:49:b8:bb:25:bd:56:f2:f7:44:9b:92:ba:
                    59:05:d4:62:aa:9f:74:c9:44:9d:7d:66:49:85:00:
                    a9:10:1c:c0:4b:48:a8:be:e9:77:73:0d:eb:46:55:
                    3e:f6:c1:96:9e:be:9f:a2:42:45:05:c3:79:5a:0f:
                    be:9f:e8:be:0d:05:19:d1:bd:b7:2d:9b:6d:bf:56:
                    e2:f7:5e:af:b6:8c:d5:62:58:7d:94:55:77:1e:a8:
                    85:25:c7:76:43:b3:e9:01:eb:b3:71:58:5b:b4:06:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9C:3F:69:51:52:7B:BC:1D:92:28:90:FF:C3:2F:B2:23:19:1A:64
            X509v3 Authority Key Identifier:
                keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1d:79:57:03:1b:d1:f2:d4:73:55:e8:1f:4d:8f:c9:0b:3b:
         4a:99:13:3b:30:26:a0:91:7d:f5:3a:ad:71:0c:51:c7:bf:95:
         56:74:8d:fa:7a:e5:13:5c:de:c7:bb:3d:2e:95:c6:b6:c5:9c:
         2f:46:e7:f7:03:4f:54:8f:f8:e7:1a:d0:1e:90:b0:e6:21:cc:
         c4:a8:12:d7:67:1e:cb:4a:09:f3:49:ae:45:0c:5f:f6:a3:4e:
         ef:84:76:71:36:31:49:9d:b2:1f:b3:37:90:b5:8e:35:58:80:
         51:af:7d:16:5d:1e:ea:5f:83:55:49:98:60:be:4c:7d:ec:a6:
         5f:30:39:09:0a:a4:54:18:4f:a1:13:c4:d9:7d:51:43:2c:07:
         3e:5f:10:26:f3:04:31:3f:0f:c2:80:89:b8:08:77:e3:db:69:
         15:6f:0f:5e:be:75:b9:d2:85:5f:9d:5b:4b:93:a3:9f:36:55:
         be:97:a7:d0:e2:2f:92:07:19:ba:52:19:58:4d:45:21:77:28:
         2b:80:73:7a:24:6f:d2:1b:2b:08:2f:43:c2:22:2b:e2:42:c0:
         d8:57:b7:e8:17:5e:49:75:2a:83:40:b7:b5:0f:c4:65:0e:90:
         71:a5:9f:fc:79:49:72:a9:cf:8a:8a:47:ee:3a:13:f4:e2:29:
         16:a0:65:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:05 2025 by rpki-client