This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
File:                     YhVbsAWcTchhU2ywUux1W6sWbD8.mft (raw, json)
Hash identifier:          pwPGJ5PqixvnFdtTSjW8Y80jW55z9jr5xj90UruFjW4=
Subject key identifier:   86:7F:C3:0F:2B:B6:0D:1B:18:B8:BE:EE:31:E6:2A:EB:4B:34:84:28
Authority key identifier: 62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F
Certificate issuer:       /CN=A91978F7/serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
Manifest number:          37
Signing time:             Tue 23 Dec 2025 06:22:11 +0000
Manifest this update:     Tue 23 Dec 2025 06:22:11 +0000
Manifest next update:     Tue 30 Dec 2025 06:22:11 +0000
Files and hashes:         1: YhVbsAWcTchhU2ywUux1W6sWbD8.crl (hash: CGBADIe9OjjvhsvjS9Nvzn8nkMwxTSuPmKFqpRXVPnE=)
                          2: 87C69A4E8DEE11F0A7999742C4F9AE02.roa (hash: AF9EblqIIR14Jg1fqI/l7p20Pg6bE92rpu7Zvd4y37I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl
                          rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91978F7, serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
        Validity
            Not Before: Dec 23 06:22:11 2025 GMT
            Not After : Dec 30 06:22:11 2025 GMT
        Subject: CN=694a3513-43e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:f3:7e:35:3f:6a:7d:8d:68:b4:00:f1:a9:
                    c4:ff:03:6d:61:79:62:eb:0c:71:c3:fe:69:f2:3f:
                    8a:24:10:85:18:39:e3:a2:73:b0:52:85:9e:0d:7d:
                    5d:69:25:50:fb:bb:8c:ad:86:82:7b:bc:f4:ff:e5:
                    e5:35:22:2c:48:cc:74:eb:69:bc:59:63:4b:7a:0a:
                    bf:d2:12:1a:1c:c3:2c:fa:d0:d7:d7:57:1e:da:d3:
                    38:7b:2a:cf:62:9c:6c:ac:60:1c:7f:b4:ea:3c:d5:
                    fa:fa:7d:e9:3a:d9:1c:d5:66:c7:37:c1:b0:0f:c9:
                    50:a2:12:e6:57:ce:bd:6e:56:8a:3a:4c:d8:ab:9c:
                    27:a8:65:c2:e3:c9:cf:fa:96:18:04:5e:d9:c9:2b:
                    bb:dd:78:e2:aa:41:06:4c:62:0f:35:14:5f:f5:97:
                    8d:9d:ca:85:58:ef:89:c3:a7:f7:e4:f8:27:a0:e0:
                    62:01:bd:de:be:6c:2a:7a:08:6b:bf:5b:ee:ca:0d:
                    d9:d0:af:91:02:66:16:98:d0:87:41:09:3e:63:73:
                    75:a5:e6:15:cc:60:6d:81:97:c1:12:e1:af:37:dd:
                    41:9c:9f:53:ef:49:3a:c1:04:6d:ae:91:0d:e4:56:
                    e9:00:9d:53:b3:02:17:e5:ef:ef:12:0c:79:d2:c4:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7F:C3:0F:2B:B6:0D:1B:18:B8:BE:EE:31:E6:2A:EB:4B:34:84:28
            X509v3 Authority Key Identifier:
                keyid:62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:76:d1:a2:c7:ae:cb:57:19:95:e1:ae:b3:fd:49:bb:5f:bf:
         5e:c5:19:02:cd:47:c4:f1:2b:73:b8:1d:bd:85:56:78:34:8e:
         2d:12:85:f9:63:c0:b7:f3:70:32:99:e2:73:08:e6:9b:93:65:
         55:bf:b8:81:18:f0:05:ce:60:ea:fd:cf:6c:c8:2f:90:bf:c1:
         67:b7:c9:ea:fd:49:75:eb:42:73:e1:a3:29:b6:d8:dd:25:d7:
         0e:55:18:36:74:ce:13:d7:76:e1:b9:c3:4d:9f:c1:86:51:28:
         15:57:df:2a:fe:b0:ce:be:92:f6:ca:23:39:6d:22:b7:ec:7a:
         8d:16:a0:70:7a:0f:18:57:96:0d:94:98:f4:22:ab:3e:db:d8:
         95:2b:8b:56:93:7f:2e:07:2f:d1:de:84:7d:73:8c:41:a9:9d:
         b6:b5:d9:8f:f2:34:13:8b:c8:fa:c6:d8:fe:aa:08:fb:04:57:
         bf:a8:99:cd:6c:b4:94:ab:ae:4f:24:c5:86:7b:1a:65:ff:01:
         8e:17:e5:05:fa:d4:11:9e:12:3a:92:17:f1:be:38:9f:1e:a8:
         f9:37:4c:b1:02:94:5c:61:79:d8:f5:18:db:9d:87:7e:40:06:
         a9:83:38:a3:33:8e:b1:aa:47:de:f6:ae:70:3a:e7:ba:f8:2c:
         91:f4:7f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:58 2025 by rpki-client