This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
File:                     ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json)
Hash identifier:          9n0AGImqEtFaG0SJrntwCiuJ0aFH8E8QmOj4ra4UGsE=
Subject key identifier:   92:5A:D9:C5:E4:10:11:4E:11:C5:58:65:16:D3:55:C0:0A:6D:04:A1
Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
Certificate issuer:       /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
Manifest number:          0111
Signing time:             Tue 23 Dec 2025 03:56:39 +0000
Manifest this update:     Tue 23 Dec 2025 03:56:39 +0000
Manifest next update:     Tue 30 Dec 2025 03:56:39 +0000
Files and hashes:         1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: vZ7+RlOscIX7+XM8PNEn0z+zsTywPFizP4WBDbK8c34=)
                          2: A8051CC4508011EF81053074C4F9AE02.roa (hash: iZKi03yPXyvt2gp9n65NJaRxsO6y4f9eMVz9ZTKKOUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
                          rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
        Validity
            Not Before: Dec 23 03:56:39 2025 GMT
            Not After : Dec 30 03:56:39 2025 GMT
        Subject: CN=694a12f7-c2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:19:cf:f4:52:8d:c8:68:db:39:6f:35:fc:
                    5a:75:58:86:75:71:4a:e4:4e:73:8f:66:f0:a6:9a:
                    e5:19:10:71:90:77:b9:8b:2e:ca:e2:ae:b7:00:5f:
                    13:9e:4b:7f:f5:b9:e8:1a:b9:a0:a1:c7:25:f3:52:
                    25:8f:fd:90:d4:67:78:90:59:22:bb:f4:a2:89:5b:
                    85:cb:3a:34:23:eb:07:c3:90:f3:6a:7b:25:dc:bb:
                    fa:6c:9f:af:58:f8:c6:ec:12:9d:4c:94:36:28:ab:
                    14:c6:10:7f:e3:77:61:d6:38:a5:c1:ad:eb:06:d5:
                    bb:ec:05:f2:ee:dd:05:2f:f2:c8:bb:c5:f6:5c:4e:
                    2d:90:f4:f4:10:08:4b:ff:0c:58:34:64:cb:06:1c:
                    3a:e5:01:d9:d4:34:94:e7:81:28:61:cd:55:70:73:
                    34:4d:e9:4a:2b:40:2c:1c:5a:d4:17:67:db:d0:74:
                    47:ba:f6:31:b7:7a:7a:af:b6:f0:78:9a:af:39:39:
                    e9:ad:0d:a8:14:9a:4b:91:06:56:8a:82:b7:11:06:
                    fa:43:35:59:63:ca:1b:01:01:fc:4f:61:e1:1d:58:
                    22:1a:86:99:be:59:fe:8c:23:94:21:44:50:51:e6:
                    d6:1c:d9:dd:3d:d3:b7:48:e2:be:ae:7f:43:69:d3:
                    fa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5A:D9:C5:E4:10:11:4E:11:C5:58:65:16:D3:55:C0:0A:6D:04:A1
            X509v3 Authority Key Identifier:
                keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:0c:90:a4:9e:a7:04:24:1b:0f:4c:40:fc:8a:a0:fd:0d:
         f9:13:3f:91:bd:c0:62:51:de:bb:df:d0:89:f4:2c:68:92:83:
         8c:82:33:62:8f:f4:2e:b9:43:9c:47:6a:d1:f9:e4:52:45:9e:
         3f:bd:ef:ae:8e:8e:1c:85:74:ab:77:1d:23:59:49:34:30:9b:
         6e:e2:35:49:ae:18:4d:74:7a:38:67:d5:41:f3:00:81:2e:48:
         d3:00:5c:40:98:85:0a:11:ea:f8:4c:0e:ba:5b:5c:e8:9c:77:
         a6:9d:1c:14:aa:06:9f:87:92:f7:e9:dd:53:80:14:03:e4:c1:
         6f:56:d2:7f:83:b7:88:b1:d3:01:de:8b:10:c5:36:05:65:55:
         c0:c7:a9:a8:c2:19:2e:e9:c0:e4:e1:0b:ce:a2:53:1b:a2:c8:
         62:6a:22:c6:4f:b6:0a:eb:32:25:59:d5:79:43:89:24:2f:e1:
         f3:16:f5:bc:f6:0b:96:5f:21:38:5b:39:66:eb:b5:11:ce:7a:
         7c:3b:eb:6c:2b:39:65:af:38:1c:25:a7:50:a6:a9:db:43:33:
         67:6d:72:75:98:1b:8e:29:67:85:89:79:fa:b5:ce:30:44:ac:
         f4:06:90:e7:d8:db:f3:69:af:65:c7:f5:6f:3b:2d:48:dd:8d:
         f9:a3:09:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:17 2025 by rpki-client