This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft
File:                     yyBKq8TrV0KH_ARSchxbAQqavzE.mft (raw, json)
Hash identifier:          ZTK0r++YFT3gFTkQ9LY7fjmYAYON+jq/w2KSL4K3rXE=
Subject key identifier:   9A:4A:3E:D7:BA:6E:00:20:89:64:B6:C9:B7:12:DA:F3:A8:05:58:EB
Authority key identifier: CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31
Certificate issuer:       /CN=A911082E/serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft
Manifest number:          50
Signing time:             Tue 23 Dec 2025 06:09:18 +0000
Manifest this update:     Tue 23 Dec 2025 06:09:17 +0000
Manifest next update:     Tue 30 Dec 2025 06:09:17 +0000
Files and hashes:         1: yyBKq8TrV0KH_ARSchxbAQqavzE.crl (hash: 8on8ndZQQlqKFGN79Q56phRmWc1ZBTku5zknPv9rPMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl
                          rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911082E, serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31
        Validity
            Not Before: Dec 23 06:09:17 2025 GMT
            Not After : Dec 30 06:09:17 2025 GMT
        Subject: CN=694a320d-2774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0b:2e:58:ad:24:39:0d:0d:b8:87:51:f8:5f:
                    8d:d9:88:54:bc:90:ed:3b:e1:3f:43:9d:c5:11:12:
                    e7:4d:50:e5:89:91:d0:16:ea:39:05:c7:49:ae:11:
                    85:01:66:d1:17:fa:ef:40:4d:77:5d:3b:5b:bd:8a:
                    cd:6e:58:09:cc:e5:df:50:89:8a:a7:f3:bb:31:ff:
                    85:be:35:3f:22:87:74:5c:c5:a0:f9:27:76:47:e0:
                    73:e7:b0:05:51:31:e1:40:f0:7f:9d:6e:92:2f:8e:
                    00:59:5a:39:9b:20:6b:cd:0f:dd:70:1c:d5:b4:dd:
                    36:ba:52:9a:d1:8c:45:59:12:b2:0e:46:2a:53:c0:
                    c7:32:65:01:f8:a7:b5:46:32:80:ec:83:94:64:4d:
                    5b:35:6f:48:a7:60:56:4f:9f:df:ea:29:de:f2:f0:
                    87:48:09:d2:8e:59:e9:7b:60:28:bc:3d:4c:98:44:
                    72:cd:b1:49:51:ff:b6:0e:54:7a:96:89:ed:fe:38:
                    34:09:c1:47:6c:a1:b1:19:32:ce:65:c8:57:60:61:
                    e1:2a:e8:16:c2:3b:1a:c2:4a:d8:f2:33:e2:86:69:
                    4d:52:09:68:5b:62:b9:a8:bd:14:3e:44:e9:75:e9:
                    fb:36:52:e3:55:db:42:df:1d:55:ab:8c:ef:50:9e:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4A:3E:D7:BA:6E:00:20:89:64:B6:C9:B7:12:DA:F3:A8:05:58:EB
            X509v3 Authority Key Identifier:
                keyid:CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e9:3a:83:ba:92:54:c4:69:d7:f2:e5:d2:98:60:23:7d:50:
         90:36:2b:c0:a6:8c:c0:9f:5f:99:f0:08:88:71:fc:53:9f:49:
         94:ed:20:41:f4:fa:ef:3d:b1:5c:29:70:0c:45:29:ab:c2:e8:
         37:4f:ae:11:06:6d:ff:45:6c:e5:fa:9b:63:aa:0b:c9:a8:19:
         41:9a:f1:fa:03:06:84:e1:57:e6:3b:cd:b5:f9:4d:46:12:43:
         91:e5:32:46:37:51:e6:3b:f2:07:9c:38:0b:7c:04:5c:a3:20:
         b8:8f:c8:05:0b:eb:70:04:e8:db:b4:98:5f:51:f0:cb:fe:12:
         2b:f5:7a:e5:b7:d0:60:db:71:7b:6b:f1:a3:b8:6f:4c:f2:bc:
         a8:a9:c0:c7:f4:5b:c2:c8:a3:6a:8d:8a:db:00:20:e3:0a:da:
         3b:7a:3d:3b:98:e6:e7:7c:df:0b:c2:d9:7f:0c:64:06:c7:6e:
         53:91:ba:60:75:39:a1:25:b6:2a:96:2c:04:ae:a1:07:cc:07:
         1c:38:b6:02:4d:ab:16:82:ac:c1:cd:ef:dd:8a:d0:f6:c5:7d:
         56:07:30:51:6c:5a:2b:d9:b7:cb:8a:45:59:21:6c:3e:6a:53:
         19:91:a4:41:fb:50:1f:09:0a:54:32:7d:6f:3b:db:df:cd:87:
         ff:36:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:01 2025 by rpki-client