This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
File:                     yq12WnMFvBUlSxWyW1vTm2Oow68.mft (raw, json)
Hash identifier:          9t9v7v0GOCP6ZmkG8TWkySC3EQUC5RwEE6KqPjsfFr4=
Subject key identifier:   5D:94:75:C8:D0:73:97:A7:37:65:58:AA:28:F3:2C:74:E6:23:94:31
Authority key identifier: CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
Certificate issuer:       /CN=A911082E/serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
Manifest number:          46
Signing time:             Wed 03 Dec 2025 05:35:41 +0000
Manifest this update:     Wed 03 Dec 2025 05:35:41 +0000
Manifest next update:     Wed 10 Dec 2025 05:35:41 +0000
Files and hashes:         1: yq12WnMFvBUlSxWyW1vTm2Oow68.crl (hash: pusbAIylD+2zgfmYuE3jBBAZeQ5BlTmH+JlbFir2tTU=)
                          2: 2CD74E4E66E311F08F05EC49C4F9AE02.roa (hash: 8+dSzRSc1+OXhRbW6N90YyrDk4oOdvcvAyZdFxbaVw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl
                          rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 05:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911082E, serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
        Validity
            Not Before: Dec  3 05:35:41 2025 GMT
            Not After : Dec 10 05:35:41 2025 GMT
        Subject: CN=692fcc2d-c111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:33:18:3f:37:f5:27:84:0a:61:4f:c5:91:a6:
                    93:51:8c:32:2c:72:29:62:11:fc:68:d4:ee:ea:38:
                    42:90:00:cd:08:97:37:e7:f8:4f:0d:85:25:18:4a:
                    de:2b:45:b7:38:34:de:77:40:74:72:59:ef:0e:1f:
                    a4:cd:de:1e:0a:49:45:90:e4:2c:1d:18:07:2b:06:
                    fb:d5:9a:be:a8:5b:97:b6:9b:74:be:01:3c:8b:64:
                    7d:9f:32:84:ca:61:94:7e:02:3c:66:a7:a4:ed:31:
                    25:dd:a3:25:0d:22:95:d0:f7:58:35:e9:07:43:a2:
                    22:f9:e2:83:61:83:22:76:0d:34:51:6f:b2:ef:f5:
                    b8:fe:35:dc:52:d4:a4:a6:2a:54:8e:c0:15:41:40:
                    4e:79:5d:43:2a:2f:1e:91:f1:a8:73:4d:b4:64:f7:
                    0e:df:3d:d8:5c:a9:c7:5b:63:b6:d8:cf:fe:d5:39:
                    4b:42:4b:c1:88:cb:4e:0b:3f:0f:da:cc:fa:6e:78:
                    d2:40:95:e4:a5:96:bc:e4:a8:4a:89:18:d0:f9:33:
                    d0:e7:95:51:82:2e:b2:2e:60:70:ca:32:a1:e7:0f:
                    fe:c9:0b:97:0e:b8:b7:bd:d3:91:8b:40:f8:40:34:
                    5a:03:9c:a5:5e:1b:b9:5e:09:5b:8a:66:d7:ff:81:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:94:75:C8:D0:73:97:A7:37:65:58:AA:28:F3:2C:74:E6:23:94:31
            X509v3 Authority Key Identifier:
                keyid:CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:28:3c:e7:f9:25:37:92:b4:cb:93:00:c4:10:55:f5:ba:53:
         7c:42:98:de:a6:22:aa:8f:b1:b3:0e:08:d5:b7:c0:4a:51:3e:
         2a:4b:c0:ee:17:7d:ae:37:0a:23:ef:a8:6f:11:f5:80:94:9a:
         60:21:b3:20:e5:f0:9f:01:ca:ba:cd:fa:d3:c7:62:21:c1:98:
         f9:1b:12:7c:5d:f4:e6:5d:83:d4:df:fd:4d:ac:c6:6b:d5:d0:
         09:df:a8:b4:72:4f:36:ff:8e:8f:ad:a4:14:b3:68:dd:86:d8:
         93:19:89:69:7d:34:8e:c4:7d:49:6c:60:8b:9a:90:13:c6:16:
         20:32:aa:ae:be:9a:38:b0:51:ed:a7:9c:17:47:e8:1f:cd:58:
         f8:a3:60:20:bc:da:2c:4b:65:f9:93:7f:78:07:0a:16:1f:1d:
         56:f6:37:5e:6b:63:1b:2d:76:cc:92:82:60:06:0b:1c:d6:fd:
         c5:af:d7:ba:bf:53:e0:69:fe:70:b1:28:48:ce:03:c6:90:5c:
         aa:84:e9:52:2f:25:32:71:92:1d:ae:20:ee:35:e6:41:0d:5d:
         6e:35:a8:6a:7b:bd:bc:fa:dc:b6:4b:81:63:6f:20:af:df:88:
         38:e5:37:f4:7c:72:fe:0d:25:d3:cf:81:91:ea:39:a9:24:39:
         74:bd:2a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:39 2025 by rpki-client