This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
File:                     YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json)
Hash identifier:          gEaSeYr2d6FZQGi3VcuOcDeOhWESfSCwDof5Zx/LclQ=
Subject key identifier:   DC:26:8F:DE:54:98:60:E8:4A:3F:60:2C:9B:B7:56:8B:F0:A3:89:81
Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5
Certificate issuer:       /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
Certificate serial:       0699
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
Manifest number:          068B
Signing time:             Mon 22 Dec 2025 21:40:16 +0000
Manifest this update:     Mon 22 Dec 2025 21:40:16 +0000
Manifest next update:     Mon 29 Dec 2025 21:40:16 +0000
Files and hashes:         1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: cGBMElowqOnPp6h9qgtlxHEng0RwAcTcsgTHvmeNQS8=)
                          2: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: JJP7X3f6AVH5KsSFfVI30UVBcX+xwO84hT0LgBX60uQ=)
                          3: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: jmj2Qf4qhtOu5u36GPmwSsc+P3+wO6jacfxys+6pyWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl
                          rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
        Validity
            Not Before: Dec 22 21:40:16 2025 GMT
            Not After : Dec 29 21:40:16 2025 GMT
        Subject: CN=6949bac0-fa68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:81:2b:75:60:2c:40:11:99:59:7d:53:4d:
                    65:a1:eb:1a:5c:41:9e:41:5b:9f:6b:36:1e:fc:53:
                    c7:9f:ba:cb:de:fb:1e:0c:74:a8:0b:13:92:0d:37:
                    1c:9d:ac:31:47:47:fa:42:fe:ad:74:f8:e8:79:73:
                    0d:8b:6b:e9:25:2d:75:93:f5:8d:40:25:eb:98:a2:
                    3b:9a:3d:21:c1:d7:76:0b:1c:86:9b:00:42:f0:3f:
                    8c:44:8e:9b:a9:22:e3:1d:77:00:51:02:f3:68:f6:
                    43:c3:42:d7:a1:8c:89:02:83:d9:66:d4:cf:5f:2e:
                    73:46:2f:01:33:07:71:19:26:0e:ab:f1:0d:b5:cf:
                    34:da:f9:03:a1:6f:e9:b2:c3:5e:8f:cd:7a:f2:22:
                    d5:13:58:84:b4:c6:b4:01:f4:d3:18:6f:91:36:1e:
                    20:27:51:c9:c4:59:c9:df:80:f6:3f:d9:a7:4e:69:
                    28:87:f6:b8:05:12:2d:cf:06:4d:91:66:f2:35:88:
                    0c:5f:0d:55:69:4d:aa:b6:5b:15:df:fc:f8:88:32:
                    38:44:ea:80:5e:6d:f3:a5:39:6d:2e:14:53:9d:f8:
                    da:4a:ad:26:bb:b2:ad:91:0e:50:c4:f7:c5:9b:e6:
                    1e:b1:db:fd:98:f6:9b:22:e2:21:10:0c:14:f2:c0:
                    28:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:26:8F:DE:54:98:60:E8:4A:3F:60:2C:9B:B7:56:8B:F0:A3:89:81
            X509v3 Authority Key Identifier:
                keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:65:6f:72:a2:f9:6b:4c:71:0c:32:d7:51:03:d4:c7:31:09:
         80:08:ee:99:99:03:73:8d:8c:48:3e:37:78:55:fd:89:58:fa:
         75:0f:90:74:fe:90:cf:1c:15:09:5a:b2:4c:e5:c2:e3:57:94:
         5c:87:95:27:b7:33:2a:e3:4f:07:a7:74:c9:ad:b7:a3:e0:7c:
         ee:97:c4:8a:93:b0:89:d5:0b:c9:13:09:e5:c8:d0:26:9e:73:
         a4:ce:f1:32:11:ae:3d:c0:b5:cb:8a:7a:e3:71:ff:5c:40:7b:
         f9:06:b5:0f:94:47:29:20:a4:c6:07:f8:54:38:dc:3d:a4:7f:
         06:42:73:df:46:58:11:d4:3e:41:af:45:5d:c3:d0:fe:b1:e6:
         ad:22:a1:45:10:8f:f0:8e:9b:76:b7:ec:7c:b7:bc:a0:fa:50:
         2f:65:a3:f6:ad:be:0e:2c:81:b4:bb:7b:6e:f8:77:8e:9e:ec:
         7e:f6:0b:f0:53:f8:54:49:11:fd:11:e7:70:02:ab:e2:8e:2a:
         00:67:a3:50:77:1c:35:1a:1a:55:81:d6:77:fc:6e:5e:76:dc:
         aa:16:b0:ea:f1:2b:cf:3e:21:3d:f4:5f:33:42:04:8d:6b:4e:
         50:c9:37:72:51:82:84:5b:32:0d:7c:e7:e9:4f:c1:4f:8c:e4:
         6d:22:dd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:21:06 2025 by rpki-client