This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
File:                     YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json)
Hash identifier:          pnX6NjuREVZ+/RPuGhnd9S6Lo5nUsIU5c2TAEkjlryY=
Subject key identifier:   31:C6:0E:DE:BD:EA:73:82:5E:50:42:2C:F8:C6:B6:A7:1B:FA:BF:89
Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
Certificate issuer:       /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
Certificate serial:       07E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
Manifest number:          07E6
Signing time:             Tue 02 Dec 2025 20:23:55 +0000
Manifest this update:     Tue 02 Dec 2025 20:23:54 +0000
Manifest next update:     Tue 09 Dec 2025 20:23:54 +0000
Files and hashes:         1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: oUmfmlFqpFYyqjwHK2tPbbTQXjgO2a9iLqs+kDNgF90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl
                          rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 20:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022 (0x7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
        Validity
            Not Before: Dec  2 20:23:54 2025 GMT
            Not After : Dec  9 20:23:54 2025 GMT
        Subject: CN=692f4ada-abf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:1f:47:ac:e5:77:8e:27:b4:85:3d:43:4b:
                    eb:64:a1:d3:fa:43:53:59:f8:ed:8b:c1:4b:b4:0d:
                    b2:d1:64:e7:dc:0c:ae:7e:1b:7e:ae:53:72:f6:07:
                    c1:77:7e:7c:d1:ac:d0:8d:aa:3d:02:87:1e:79:40:
                    17:a4:2d:19:b9:fa:c2:6d:3c:d3:71:1f:25:73:02:
                    49:86:2c:94:3b:cb:7a:8c:4d:67:5d:ed:db:bf:0e:
                    ef:e0:80:52:bb:4c:c9:9e:42:a7:d5:f3:29:c2:77:
                    92:5d:79:fb:b7:9c:53:f0:14:2e:e7:a1:b1:ac:22:
                    2c:ca:4d:94:de:03:04:95:90:ff:3f:91:17:b0:1d:
                    33:c8:62:ec:5e:5c:65:aa:5b:78:63:df:9b:80:0c:
                    69:e6:79:1f:5a:ce:b3:6a:f5:66:d4:38:34:86:3d:
                    06:3b:30:af:00:9b:fa:c1:c2:41:75:05:e0:f7:e6:
                    d1:53:9a:7d:4b:a2:d7:6e:f7:79:8f:21:7c:7b:52:
                    77:b5:aa:c3:07:63:9a:b9:f5:fe:26:83:c3:1f:80:
                    76:6a:4e:a7:3f:26:d9:94:c4:d1:a1:9d:d3:2c:7d:
                    a8:4a:a1:75:c3:09:25:fb:28:a8:b8:9a:d4:96:96:
                    0a:35:33:26:0f:d2:79:8b:47:12:d3:bf:2c:bd:e2:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C6:0E:DE:BD:EA:73:82:5E:50:42:2C:F8:C6:B6:A7:1B:FA:BF:89
            X509v3 Authority Key Identifier:
                keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c9:44:e7:8c:06:fc:04:b2:53:f3:d2:a7:e0:6f:0b:fe:e4:
         ed:9a:15:64:c9:26:42:0c:1f:c9:d9:5d:27:cf:36:6e:7b:40:
         b6:67:80:97:ee:0b:23:a0:5b:a2:fa:29:5e:75:7f:8a:ae:e4:
         65:4b:4b:0f:7e:dd:79:0f:ae:07:98:59:33:fc:08:f2:7f:88:
         01:4c:4f:2a:2b:18:0c:3a:37:1d:6e:ee:30:14:97:c7:be:27:
         d4:fd:a2:55:97:8d:01:df:ae:77:b5:e4:d6:97:cb:eb:20:32:
         ef:f6:1a:65:50:10:b5:9e:ff:98:16:fb:01:40:03:d5:d7:dc:
         b4:be:56:88:1c:03:56:48:f6:39:ec:46:d3:f1:36:5e:fa:32:
         10:b7:fd:a6:5e:5d:4f:cb:36:95:cb:c8:5d:69:8d:6c:86:49:
         84:17:e1:a9:e0:ef:9c:12:fa:2c:f6:4f:aa:05:d3:e7:19:3b:
         d5:5a:63:15:93:42:c1:3a:43:42:4b:df:7f:d8:45:e7:41:8f:
         dc:e5:2b:99:22:5e:66:5c:68:60:15:7d:69:90:9c:2e:f3:26:
         6c:91:ea:87:ed:39:d5:18:55:db:29:ba:2f:78:4d:55:04:61:
         eb:00:20:7e:e6:d6:6f:50:17:00:1f:64:12:87:96:a8:70:33:
         b8:4d:7c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:32:03 2025 by rpki-client