This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
File:                     r0YdV6kKM1svp3p6rsFnNJVJI7E.mft (raw, json)
Hash identifier:          kLygMHfOYFLOKMjYl01eRTlTiT6/7lsKnvgbZ+Y1Cwg=
Subject key identifier:   B3:70:2D:BE:AC:77:23:1F:77:2F:28:77:82:0D:95:AE:89:8A:D4:EC
Authority key identifier: AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1
Certificate issuer:       /CN=A9114EF6/serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
Manifest number:          B5
Signing time:             Wed 03 Dec 2025 04:32:49 +0000
Manifest this update:     Wed 03 Dec 2025 04:32:49 +0000
Manifest next update:     Wed 10 Dec 2025 04:32:49 +0000
Files and hashes:         1: r0YdV6kKM1svp3p6rsFnNJVJI7E.crl (hash: v0KpquNW/9eA7Q4N5ktsM7IlDGMFO2sxdVi3Tv6iPgw=)
                          2: 7EF2846AD16911EF9ECCE01FC4F9AE02.roa (hash: jXWB36+aUwW3gMQ6oCZ4givUDcVN7PCST84/uqy66zs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl
                          rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 04:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114EF6, serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1
        Validity
            Not Before: Dec  3 04:32:49 2025 GMT
            Not After : Dec 10 04:32:49 2025 GMT
        Subject: CN=692fbd71-b964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:28:d0:f9:2f:a6:96:4b:e2:67:cb:55:65:d6:
                    4d:bb:b2:a7:70:2b:16:f9:f3:6f:f8:f5:84:d9:bd:
                    51:26:da:7f:3a:54:37:a9:2c:f0:13:49:9b:b5:be:
                    a0:bd:09:fc:56:98:3b:23:a0:58:43:41:d2:39:5f:
                    5c:21:ca:43:05:06:28:21:1c:97:0d:b0:85:2b:52:
                    ac:a1:c6:5b:2a:85:fe:fd:de:0c:4b:6a:00:8c:73:
                    ec:9b:75:0b:8f:22:02:92:b7:94:4c:2d:95:f2:b4:
                    5b:3a:c9:c1:91:07:0a:8e:9d:ef:88:26:d3:80:2f:
                    ff:c1:03:fb:93:33:df:39:1e:fe:11:65:cc:0a:34:
                    45:79:6c:3b:26:23:43:25:af:8d:a6:53:b0:6d:3b:
                    e5:1f:a5:27:dc:e6:13:a5:dd:df:6c:fd:05:a6:13:
                    83:82:ed:ea:7d:a9:ee:ce:fd:43:0d:1f:c7:79:1f:
                    bd:51:d4:39:e1:5c:55:c5:ec:9d:a2:46:bc:70:3e:
                    e5:6d:98:19:fc:f4:69:27:e8:a4:f0:9a:f1:c1:ed:
                    b8:92:d1:5a:5f:e2:7b:fd:6c:42:7b:dc:55:2b:0c:
                    04:b3:53:6a:80:ea:5a:7a:58:4a:b0:04:91:0a:76:
                    64:a8:a6:ee:ae:14:77:8d:61:08:dc:99:c2:64:01:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:70:2D:BE:AC:77:23:1F:77:2F:28:77:82:0D:95:AE:89:8A:D4:EC
            X509v3 Authority Key Identifier:
                keyid:AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:95:76:75:b6:d2:e6:7a:d4:ab:ae:25:01:84:6f:f5:cd:82:
         72:b1:c0:97:a7:b6:84:22:d7:ef:bf:c8:1b:65:e8:ea:f2:f2:
         4b:da:2a:b3:f6:eb:63:d7:7c:3c:45:68:02:d0:c4:c8:11:c8:
         61:19:68:ab:ec:c8:0a:a2:5e:cc:2d:db:25:eb:17:d5:94:a1:
         13:d7:d4:1a:4e:b6:0a:b8:b1:05:da:94:6f:11:e8:12:96:dd:
         46:1b:49:69:68:ba:b7:f0:c5:f8:21:50:27:a3:47:2e:66:6d:
         13:a3:bd:cd:58:1e:6a:eb:de:05:14:54:aa:6c:c0:31:5c:38:
         96:96:66:5d:19:b1:9a:8b:9c:fa:c8:63:44:e3:e8:b0:b6:94:
         85:6a:f5:ec:c9:85:ec:50:91:96:bf:92:48:b9:2c:13:ee:60:
         9a:49:12:f0:04:da:a0:97:18:2c:32:24:27:1b:c7:7e:e7:de:
         39:49:ff:25:01:e2:ce:04:35:55:56:74:09:92:67:72:6b:71:
         56:64:76:3f:f9:91:06:f3:e4:6b:b1:ae:f9:7b:61:e6:17:90:
         53:34:f1:24:34:87:53:03:a4:9a:4b:22:32:44:63:91:e9:60:
         e6:1d:96:61:18:a3:11:37:a6:a7:fa:40:66:e3:72:5a:9e:03:
         42:9a:a8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:35 2025 by rpki-client