This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
File:                     JyyuXyHIv2trSRWvAATH78_H2z0.mft (raw, json)
Hash identifier:          5P31dqhi0iJp+yJEOPxasvpwfCchWwwXj1LIRy85voY=
Subject key identifier:   5E:62:9D:91:20:A4:90:D2:AC:5E:41:8F:66:2E:E4:74:25:84:C1:0F
Authority key identifier: 27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D
Certificate issuer:       /CN=A917314A/serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
Certificate serial:       030F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
Manifest number:          0306
Signing time:             Wed 10 Dec 2025 23:33:56 +0000
Manifest this update:     Wed 10 Dec 2025 23:33:56 +0000
Manifest next update:     Wed 17 Dec 2025 23:33:55 +0000
Files and hashes:         1: JyyuXyHIv2trSRWvAATH78_H2z0.crl (hash: Zxb/iKWDU+rH2M6KN+qBnFZVc9ARf41NgDdmJsGWpGg=)
                          2: 8620180E00EE11EDBC60AA4FC4F9AE02.roa (hash: JbvkFmhuxDHhlpgsWGCnfVlPsQAl6R0NvFJ7QoU6lmA=)
                          3: CED1044A623011F09444A631C4F9AE02.roa (hash: lqYz7plj25I4UFVda7v0py7vjm0VDK3lt1JVntkVi38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl
                          rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 23:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917314A, serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
        Validity
            Not Before: Dec 10 23:33:56 2025 GMT
            Not After : Dec 17 23:33:55 2025 GMT
        Subject: CN=693a0364-632d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:74:28:15:68:5a:15:64:e5:7e:dc:b0:46:
                    73:5a:f4:db:7b:ca:6b:3f:31:88:43:6a:6d:33:27:
                    8f:4c:2b:91:4a:9c:8e:0d:29:b1:6e:f4:1f:60:54:
                    81:c9:13:75:f1:a6:a7:28:95:72:36:f3:f3:ce:0a:
                    62:5e:dc:9e:e7:6f:82:bf:36:b3:56:33:0b:ab:88:
                    61:66:f0:eb:75:cb:d3:b3:9a:36:4b:07:76:9d:66:
                    46:44:17:7e:9a:f5:05:9b:8d:c6:c1:1e:e3:19:ec:
                    f3:f3:c9:22:f5:b1:0c:74:76:58:d9:b1:be:f4:de:
                    eb:ea:67:70:8a:bc:21:56:aa:80:4d:4c:c4:81:74:
                    80:39:5d:fa:f3:cd:da:13:ed:24:f9:16:30:d6:80:
                    af:f1:65:62:90:17:11:4d:06:49:84:66:20:5c:80:
                    70:93:d0:3d:7f:fe:14:be:e8:f6:a7:2d:e8:8d:b3:
                    8b:ac:f2:5b:fa:56:4a:08:d4:a7:51:51:1e:91:f2:
                    93:7d:5a:84:30:b9:d5:96:9b:fa:51:9c:a6:5e:8b:
                    70:a4:25:03:66:fa:85:ea:39:58:fa:43:8a:57:c5:
                    57:4c:70:19:7d:71:11:fb:f5:e7:c1:17:c1:47:b7:
                    e7:fa:aa:ae:2f:11:3d:26:3c:80:08:1d:14:f6:ee:
                    df:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:62:9D:91:20:A4:90:D2:AC:5E:41:8F:66:2E:E4:74:25:84:C1:0F
            X509v3 Authority Key Identifier:
                keyid:27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:91:05:18:65:62:bf:ea:3a:c4:71:5a:5e:62:43:c4:6f:c9:
         62:3b:1f:5b:85:71:28:0f:c3:51:04:3b:fe:84:bb:1a:15:8d:
         d1:96:23:3c:20:28:ae:03:59:81:49:9f:61:44:5d:37:9d:57:
         8e:3b:50:ca:a2:53:b7:9f:02:04:6e:5a:ef:c5:db:ce:c6:a5:
         cf:80:73:e9:69:72:7e:33:dc:f6:dc:ab:72:9c:7c:a8:c6:3e:
         67:09:cf:76:1e:72:f1:25:60:34:dd:c4:1d:d3:f5:04:cd:f2:
         d5:f8:84:3e:a7:af:f6:b1:e4:0d:75:b5:78:77:c3:cb:bc:62:
         d2:76:71:54:77:c6:34:9a:d1:5a:70:c4:de:ed:b0:2d:ca:b4:
         29:e8:85:75:36:4b:b5:37:49:50:5c:01:38:ae:cf:ce:b0:99:
         1b:3b:f0:20:a0:a9:98:ba:65:1f:44:28:f1:55:b0:00:33:74:
         76:c9:cb:8d:b5:f5:c7:05:bb:d3:3d:34:95:ef:78:d4:8d:91:
         36:9b:93:5a:f5:a6:a4:97:c0:5a:61:12:69:c5:81:11:7d:ec:
         f1:99:3e:73:a2:1d:d5:f5:40:1f:68:2f:79:bd:62:fe:11:fe:
         ba:86:04:5a:1b:5c:cf:60:7d:24:2f:c9:61:7d:da:61:7a:e6:
         b3:8a:7a:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxNEExMTAvBgNVBAUTKDI3MkNBRTVGMjFDOEJGNkI2QjQ5MTVBRjAwMDRDN0VG
Q0ZDN0RCM0QwHhcNMjUxMjEwMjMzMzU2WhcNMjUxMjE3MjMzMzU1WjAYMRYwFAYD
VQQDEw02OTNhMDM2NC02MzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAubl0KBVoWhVk5X7csEZzWvTbe8prPzGIQ2ptMyePTCuRSpyODSmxbvQfYFSB
yRN18aanKJVyNvPzzgpiXtye52+CvzazVjMLq4hhZvDrdcvTs5o2Swd2nWZGRBd+
mvUFm43GwR7jGezz88ki9bEMdHZY2bG+9N7r6mdwirwhVqqATUzEgXSAOV36883a
E+0k+RYw1oCv8WVikBcRTQZJhGYgXIBwk9A9f/4Uvuj2py3ojbOLrPJb+lZKCNSn
UVEekfKTfVqEMLnVlpv6UZymXotwpCUDZvqF6jlY+kOKV8VXTHAZfXER+/XnwRfB
R7fn+qquLxE9JjyACB0U9u7fJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5inZEg
pJDSrF5Bj2Yu5HQlhMEPMB8GA1UdIwQYMBaAFCcsrl8hyL9ra0kVrwAEx+/Px9s9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE0QS81RUY4QTkxNjAw
RUExMUVEOUMwQ0IzMzJDNEY5QUUwMi9KeXl1WHlISXYydHJTUld2QUFUSDc4X0gy
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p5eXVYeUhJdjJ0clNSV3ZBQVRINzhfSDJ6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzE0QS81RUY4QTkxNjAwRUExMUVEOUMwQ0IzMzJDNEY5QUUwMi9KeXl1WHlISXYy
dHJTUld2QUFUSDc4X0gyejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXkQUYZWK/6jrEcVpeYkPEb8liOx9bhXEoD8NRBDv+hLsaFY3RliM8
ICiuA1mBSZ9hRF03nVeOO1DKolO3nwIEblrvxdvOxqXPgHPpaXJ+M9z23KtynHyo
xj5nCc92HnLxJWA03cQd0/UEzfLV+IQ+p6/2seQNdbV4d8PLvGLSdnFUd8Y0mtFa
cMTe7bAtyrQp6IV1Nku1N0lQXAE4rs/OsJkbO/AgoKmYumUfRCjxVbAAM3R2ycuN
tfXHBbvTPTSV73jUjZE2m5Na9aakl8BaYRJpxYERfezxmT5zoh3V9UAfaC95vWL+
Ef66hgRaG1zPYH0kL8lhfdpheuazinoI
-----END CERTIFICATE-----
Generated at Fri Dec 12 08:02:56 2025 by rpki-client