This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
File:                     bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft (raw, json)
Hash identifier:          8jMB5+pRNkSGGhWrTYa7J0quSHBJfkcRsZ4XBSuHVzU=
Subject key identifier:   60:18:3A:7B:02:56:68:5A:E0:93:89:65:F9:19:E7:05:B6:D8:59:7B
Authority key identifier: 6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
Certificate issuer:       /CN=A913695E/serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
Manifest number:          5C
Signing time:             Tue 23 Dec 2025 05:59:10 +0000
Manifest this update:     Tue 23 Dec 2025 05:59:10 +0000
Manifest next update:     Tue 30 Dec 2025 05:59:10 +0000
Files and hashes:         1: bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl (hash: mj40PYzCzJutsIYfRuIR/Iw3CHjHCalNPATPgLuCAts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl
                          rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913695E, serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
        Validity
            Not Before: Dec 23 05:59:10 2025 GMT
            Not After : Dec 30 05:59:10 2025 GMT
        Subject: CN=694a2fae-bb7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8f:58:87:b6:2b:30:df:a0:34:2d:2a:a8:f6:
                    d6:19:c1:88:85:4b:58:2e:ea:53:46:5a:22:a6:c2:
                    fb:b4:58:45:d7:ec:56:93:5d:e7:4c:85:a2:86:11:
                    2e:69:06:fc:d5:51:3c:99:6b:b9:e1:f6:0f:8b:93:
                    14:55:f2:61:39:87:b1:c8:d5:69:9c:2c:d3:23:e8:
                    74:23:1b:b9:15:e1:9f:11:9a:3f:85:3c:34:f5:e8:
                    8a:67:02:a6:5e:91:ea:48:3a:90:93:a4:97:b6:08:
                    2e:a7:2f:77:1d:47:04:da:b1:1c:76:99:25:0b:0f:
                    49:f6:b3:ba:07:0d:90:e2:5f:32:54:f8:78:91:59:
                    ae:96:d1:01:37:ac:65:a3:05:08:e2:25:5f:2f:e0:
                    58:72:de:db:20:7c:90:6a:01:47:05:14:25:18:ef:
                    01:89:63:86:b8:49:21:ef:e9:5e:6a:d4:bb:26:34:
                    95:d8:ca:3a:db:8b:f1:36:2d:a7:1f:02:a1:53:e5:
                    f8:e8:4c:29:36:88:0b:33:05:f7:01:93:29:09:69:
                    6b:52:e3:47:84:8c:f5:9d:8f:0f:b1:ed:b5:86:44:
                    52:8b:bd:d3:8c:a2:4e:d1:33:cc:d7:fe:5a:3c:c9:
                    53:7a:f1:e9:a6:80:06:0d:e0:5b:0c:8a:f0:3e:d6:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:18:3A:7B:02:56:68:5A:E0:93:89:65:F9:19:E7:05:B6:D8:59:7B
            X509v3 Authority Key Identifier:
                keyid:6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f6:d3:6a:50:f0:a3:e4:77:5b:d3:3a:8d:f6:a8:99:f0:79:
         55:62:dd:46:f6:ff:88:5d:60:3a:fe:54:8b:ad:6c:63:74:d1:
         d6:e9:13:92:7d:67:13:84:cd:11:1d:0f:6b:66:72:42:e2:39:
         3a:44:c3:d1:61:de:b1:80:cd:9e:75:55:59:57:00:ac:36:e0:
         b6:24:9b:87:40:5c:e8:57:3e:17:00:00:41:fb:08:ec:3e:08:
         5f:d8:16:d7:4b:94:4e:b0:9f:1c:ce:f6:40:91:85:2a:81:02:
         de:f5:e0:36:1c:03:72:30:c6:47:c8:a8:64:b3:5f:0c:12:a0:
         6c:8c:d3:d9:4c:ba:85:8c:f8:34:25:eb:6f:1e:5a:76:ee:0a:
         2d:6c:22:a8:f1:dc:88:e1:69:b6:27:7f:01:fa:df:d4:56:31:
         31:f3:b5:db:28:ed:62:0b:26:7d:e7:8f:15:92:9f:be:0a:7d:
         99:a6:42:d2:b0:2c:42:05:62:a5:2c:74:7f:40:02:bd:9c:b2:
         4f:7a:33:b3:33:52:e2:9f:0b:73:3e:a8:e5:8c:14:1e:3b:29:
         10:fe:40:ad:f3:fd:a3:8b:9e:9e:e9:fb:bb:7c:c7:a5:8e:0e:
         4e:38:57:90:72:a9:12:f1:6f:82:e6:ae:ad:05:71:6a:e4:6f:
         51:e2:02:8f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Njk1RTExMC8GA1UEBRMoNkQ4NDE3NjE3MjU4MDM5MkJBMkEzMjVGNzE3QjFFQ0E0
RjBEODc5MzAeFw0yNTEyMjMwNTU5MTBaFw0yNTEyMzAwNTU5MTBaMBgxFjAUBgNV
BAMMDTY5NGEyZmFlLWJiN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDjj1iHtisw36A0LSqo9tYZwYiFS1gu6lNGWiKmwvu0WEXX7FaTXedMhaKGES5p
BvzVUTyZa7nh9g+LkxRV8mE5h7HI1WmcLNMj6HQjG7kV4Z8Rmj+FPDT16IpnAqZe
kepIOpCTpJe2CC6nL3cdRwTasRx2mSULD0n2s7oHDZDiXzJU+HiRWa6W0QE3rGWj
BQjiJV8v4Fhy3tsgfJBqAUcFFCUY7wGJY4a4SSHv6V5q1LsmNJXYyjrbi/E2Lacf
AqFT5fjoTCk2iAszBfcBkykJaWtS40eEjPWdjw+x7bWGRFKLvdOMok7RM8zX/lo8
yVN68emmgAYN4FsMivA+1iU9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYBg6ewJW
aFrgk4ll+RnnBbbYWXswHwYDVR0jBBgwFoAUbYQXYXJYA5K6KjJfcXseyk8Nh5Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2OTVFL0YwQTFGRTUyNTM0
MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL2JZUVhZWEpZQTVLNktqSmZjWHNleWs4Tmg1
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYllRWFlYSllBNUs2S2pKZmNYc2V5azhOaDVNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2
OTVFL0YwQTFGRTUyNTM0MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL2JZUVhZWEpZQTVL
NktqSmZjWHNleWs4Tmg1TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAH7202pQ8KPkd1vTOo32qJnweVVi3Ub2/4hdYDr+VIutbGN00dbpE5J9
ZxOEzREdD2tmckLiOTpEw9Fh3rGAzZ51VVlXAKw24LYkm4dAXOhXPhcAAEH7COw+
CF/YFtdLlE6wnxzO9kCRhSqBAt714DYcA3IwxkfIqGSzXwwSoGyM09lMuoWM+DQl
628eWnbuCi1sIqjx3IjhabYnfwH639RWMTHztdso7WILJn3njxWSn74KfZmmQtKw
LEIFYqUsdH9AAr2csk96M7MzUuKfC3M+qOWMFB47KRD+QK3z/aOLnp7p+7t8x6WO
Dk44V5ByqRLxb4Lmrq0FcWrkb1HiAo8=
-----END CERTIFICATE-----
Generated at Wed Dec 24 16:01:08 2025 by rpki-client