This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
File:                     MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json)
Hash identifier:          7kcpls/XN/8ALA4nZl4oikck4QLhV7oRIsuwwpwQVJM=
Subject key identifier:   A7:99:25:8A:5D:A2:71:40:5B:03:73:F3:5D:87:84:06:41:26:CB:5C
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Certificate issuer:       /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
Manifest number:          FC
Signing time:             Tue 23 Dec 2025 04:08:51 +0000
Manifest this update:     Tue 23 Dec 2025 04:08:50 +0000
Manifest next update:     Tue 30 Dec 2025 04:08:50 +0000
Files and hashes:         1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: iD15x1TWhDybBuLyilImHm6wahm09AeWpuMVq+IAg8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
        Validity
            Not Before: Dec 23 04:08:50 2025 GMT
            Not After : Dec 30 04:08:50 2025 GMT
        Subject: CN=694a15d3-71d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4e:3f:9b:aa:d3:de:f7:6d:44:21:49:18:32:
                    5d:9d:d2:d7:1b:37:dd:2c:5c:04:75:15:5b:bb:35:
                    8d:ef:34:07:a8:84:61:08:28:78:32:41:c5:ae:79:
                    c5:70:16:1f:cd:64:0e:c3:22:98:d5:3a:00:74:82:
                    c4:46:07:ff:bb:fc:b4:be:9e:a8:ba:3a:92:13:07:
                    c7:67:6b:ea:a5:4a:0b:90:77:30:62:ce:39:31:e0:
                    66:58:0b:3c:83:27:71:d1:11:80:96:33:c6:bb:d0:
                    89:c5:e3:4e:0a:d2:97:99:3a:3f:39:d9:3e:ed:83:
                    a4:b4:1d:71:07:e9:91:e2:af:f3:ad:cd:2e:83:08:
                    cb:1f:ad:b1:f2:57:4e:b4:a4:3a:f3:06:c9:8e:53:
                    ce:25:09:e6:fe:7c:6a:df:cd:61:43:01:bf:a4:99:
                    7a:08:95:fb:ca:32:f8:36:a8:af:77:bf:dd:67:3d:
                    9d:dd:08:b6:1a:33:11:0e:be:67:67:06:70:fc:f4:
                    0a:d0:c0:bf:65:9d:ed:d7:bc:6e:6a:18:2b:c8:5d:
                    6c:a5:64:e4:1b:bc:30:7a:23:16:58:57:c8:83:17:
                    09:24:3e:35:cd:4d:d8:3a:83:e4:94:cf:9a:e8:65:
                    e6:3a:3d:d5:d4:06:72:8b:d2:14:0a:1b:9b:76:e2:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:99:25:8A:5D:A2:71:40:5B:03:73:F3:5D:87:84:06:41:26:CB:5C
            X509v3 Authority Key Identifier:
                keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:df:b5:07:5f:de:60:5e:45:d5:8b:bd:3e:0b:18:0c:3f:21:
         9a:36:35:7d:d1:f1:f5:e9:9b:8c:70:74:41:21:4b:72:c3:ee:
         50:83:ad:a6:7d:90:f8:b9:6b:29:b7:d9:f3:27:23:0b:e1:3f:
         81:52:02:79:9d:ab:c2:c9:0d:cb:d6:f5:52:41:20:80:5c:ea:
         39:60:76:86:e9:c5:4c:92:e4:01:d5:65:a6:f9:cc:52:be:6e:
         7b:03:0f:83:22:45:58:40:77:ac:8a:e4:67:8e:59:0f:1e:29:
         01:13:d7:96:9b:01:f8:41:da:62:3c:df:af:36:15:bd:d1:8d:
         bb:a2:34:f2:42:8f:79:a4:8d:f1:6d:d9:91:98:35:fe:8d:6d:
         b9:37:72:60:fd:7e:84:f2:c9:72:b2:e4:85:20:e5:30:4b:54:
         43:cd:7e:5a:71:81:88:64:24:6b:4a:63:5c:4f:87:1f:94:e8:
         fc:e8:30:53:88:fa:03:64:ff:0c:50:a6:ae:e9:05:68:7c:ee:
         11:81:10:89:de:c3:4b:a5:17:f3:40:41:28:c5:ba:2d:02:bd:
         24:88:5c:86:b7:3f:59:d3:1f:77:42:de:a7:84:ff:b8:c6:5e:
         66:8f:a7:96:47:9e:ed:10:ae:33:66:a1:17:f2:f9:42:d2:65:
         16:e6:07:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODgzRDMxMTAvBgNVBAUTKDMxN0E3MjdGRjYzRTI3QzI5Q0MwMUNCNjc5OTNFMkM2
MUYwODA0MUUwHhcNMjUxMjIzMDQwODUwWhcNMjUxMjMwMDQwODUwWjAYMRYwFAYD
VQQDDA02OTRhMTVkMy03MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6E4/m6rT3vdtRCFJGDJdndLXGzfdLFwEdRVbuzWN7zQHqIRhCCh4MkHFrnnF
cBYfzWQOwyKY1ToAdILERgf/u/y0vp6oujqSEwfHZ2vqpUoLkHcwYs45MeBmWAs8
gydx0RGAljPGu9CJxeNOCtKXmTo/Odk+7YOktB1xB+mR4q/zrc0ugwjLH62x8ldO
tKQ68wbJjlPOJQnm/nxq381hQwG/pJl6CJX7yjL4Nqivd7/dZz2d3Qi2GjMRDr5n
ZwZw/PQK0MC/ZZ3t17xuahgryF1spWTkG7wweiMWWFfIgxcJJD41zU3YOoPklM+a
6GXmOj3V1AZyi9IUChubduIJRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeZJYpd
onFAWwNz812HhAZBJstcMB8GA1UdIwQYMBaAFDF6cn/2PifCnMActnmT4sYfCAQe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy85NTc2MDE2ODVF
MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4S2N3QnkyZVpQaXhoOElC
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01YcHlmX1ktSjhLY3dCeTJlWlBpeGg4SUJCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODNEMy85NTc2MDE2ODVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4
S2N3QnkyZVpQaXhoOElCQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCv37UHX95gXkXVi70+CxgMPyGaNjV90fH16ZuMcHRBIUtyw+5Qg62m
fZD4uWspt9nzJyML4T+BUgJ5navCyQ3L1vVSQSCAXOo5YHaG6cVMkuQB1WWm+cxS
vm57Aw+DIkVYQHesiuRnjlkPHikBE9eWmwH4QdpiPN+vNhW90Y27ojTyQo95pI3x
bdmRmDX+jW25N3Jg/X6E8slysuSFIOUwS1RDzX5acYGIZCRrSmNcT4cflOj86DBT
iPoDZP8MUKau6QVofO4RgRCJ3sNLpRfzQEEoxbotAr0kiFyGtz9Z0x93Qt6nhP+4
xl5mj6eWR57tEK4zZqEX8vlC0mUW5gdx
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:07 2025 by rpki-client