This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File:                     YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier:          7EZaCbvomBsaUpDxed/z/htn3gm22+FzBQn2HsyFEhA=
Subject key identifier:   BD:F5:DD:94:01:A0:2A:D5:E4:A3:6B:49:93:B0:CA:39:47:E0:AA:14
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer:       /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number:          C6
Signing time:             Tue 09 Dec 2025 04:09:10 +0000
Manifest this update:     Tue 09 Dec 2025 04:09:10 +0000
Manifest next update:     Tue 16 Dec 2025 04:09:10 +0000
Files and hashes:         1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: LQI3EP+ddlhB/5ptBBMdrJ7wopmzMclKHcuBtrSgfmM=)
                          2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: eDrkrHM6e7G8MkefF8uO0ebeRL2ZiilrSCVyjl1v/78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
                          rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 04:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
        Validity
            Not Before: Dec  9 04:09:10 2025 GMT
            Not After : Dec 16 04:09:10 2025 GMT
        Subject: CN=6937a0e6-b65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:33:af:70:6e:31:e1:35:50:49:ba:c0:bd:
                    e3:19:de:5c:59:23:a0:21:09:c9:b0:d4:09:1e:3d:
                    88:f3:c1:ec:70:25:17:c6:79:95:63:6f:3f:17:6e:
                    53:d7:e5:b4:62:4c:21:70:7d:3a:23:2e:41:7a:a2:
                    97:54:78:5e:b3:38:3d:81:0e:bc:2c:1f:8a:5c:3f:
                    19:41:d0:ad:73:5e:32:da:eb:8e:ce:eb:ac:5b:ae:
                    79:e8:62:a0:b0:66:45:04:3d:b5:87:66:87:cc:27:
                    03:42:8e:fe:f5:ee:46:09:d7:36:6f:2f:7b:05:2c:
                    2d:8a:4e:36:6e:49:e8:43:12:70:f9:a2:52:da:4b:
                    61:78:32:7f:66:f0:5d:3f:7d:a0:59:e0:6c:a5:f8:
                    3f:fa:b3:49:03:ab:48:17:c4:0e:7e:5a:7d:b1:17:
                    32:cd:da:59:ae:e7:56:a6:84:39:2d:8a:15:43:59:
                    b3:73:fb:dc:b4:5b:fe:8c:9e:88:33:62:8c:0a:27:
                    7e:ac:13:a4:31:22:67:4d:32:e4:39:26:92:3b:8a:
                    7b:cc:98:cb:14:06:ae:87:0f:de:d7:38:4c:71:47:
                    4f:21:c0:12:e2:75:d7:9d:5a:4c:15:41:64:0b:ef:
                    f1:a9:37:38:bb:e3:2a:8e:8d:29:8f:67:3f:c7:08:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F5:DD:94:01:A0:2A:D5:E4:A3:6B:49:93:B0:CA:39:47:E0:AA:14
            X509v3 Authority Key Identifier:
                keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cd:f7:d1:4e:b5:b7:2a:ca:12:42:87:c2:75:b5:22:1b:36:
         37:35:87:39:fb:42:11:4c:cd:71:3f:14:78:a7:65:a6:ea:09:
         33:e5:ad:18:d8:be:46:0a:3f:40:51:86:07:00:e0:94:bb:8a:
         4b:d8:e0:9f:e3:b0:f7:87:be:2b:9e:d3:76:20:11:0e:15:da:
         9d:15:a5:dc:ec:11:35:58:2a:66:3f:4b:36:c0:8b:88:60:cc:
         82:9f:28:2d:55:e9:e0:6a:ea:29:6c:68:a8:26:8a:22:3d:d7:
         97:0f:f2:59:6a:39:5b:72:d6:4a:ca:0e:fe:f5:e8:85:2f:f0:
         9b:6c:cf:50:e9:30:01:48:9e:e7:24:06:4a:d5:90:ce:e3:0a:
         72:66:14:9c:bd:b0:56:19:f3:77:40:40:34:52:d5:d6:ec:62:
         c6:eb:9a:9a:b8:80:ac:78:00:31:2b:7a:91:f4:dc:eb:9a:05:
         64:d9:46:5e:99:f7:51:e7:4e:61:49:b6:64:d3:f0:d2:48:93:
         72:3b:e8:7c:a8:02:be:09:49:d8:b6:5b:2e:8e:fa:dc:6b:8e:
         4d:47:99:af:69:0d:25:26:39:9a:85:d8:40:59:36:34:d9:c5:
         b8:a2:36:fb:f7:8e:48:7e:df:67:bc:da:3a:ff:5f:88:20:77:
         62:12:d3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 18:49:44 2025 by rpki-client