This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
File:                     Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft (raw, json)
Hash identifier:          +4GsbFdAzeIoYNZQCqjpHpbpJyswiE30ERpK3dkHpDM=
Subject key identifier:   A3:1B:EB:09:58:10:8F:FE:F2:8F:6B:C8:90:C3:ED:BD:F3:C8:8B:FA
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Certificate issuer:       /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
Manifest number:          0210
Signing time:             Tue 09 Dec 2025 00:34:24 +0000
Manifest this update:     Tue 09 Dec 2025 00:34:23 +0000
Manifest next update:     Tue 16 Dec 2025 00:34:23 +0000
Files and hashes:         1: Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl (hash: sDb3TCH6ntnMWQC4C4PbHp8Ihck20XLY0jpxvYUnIuI=)
                          2: AD286018B29C11EDB216812EC4F9AE02.roa (hash: ck7frHwbdvA8vLLhGdgsJbIt8cpEwUyRbFKBDEFTB8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
                          rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 00:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFB4C, serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
        Validity
            Not Before: Dec  9 00:34:23 2025 GMT
            Not After : Dec 16 00:34:23 2025 GMT
        Subject: CN=69376e90-589a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:ac:43:88:6f:9f:ed:7c:80:92:95:7c:27:
                    30:0e:d8:7a:1a:2e:a5:69:91:9a:2c:a2:a2:29:e7:
                    5d:5d:92:4f:91:9c:5f:fd:68:60:98:94:a4:95:8c:
                    c7:ec:23:f3:5e:45:1c:cc:1b:e6:b2:64:f5:d4:20:
                    f4:6c:63:94:42:35:99:33:e2:84:ef:71:fc:b0:66:
                    3b:98:4a:b7:1d:f1:ed:af:b7:f0:73:83:dd:a9:05:
                    ed:ef:15:6d:2e:b8:b9:41:ee:10:24:46:95:0d:d6:
                    8d:0c:a0:2d:82:02:0d:1a:8f:48:dd:42:95:a1:68:
                    a0:9c:08:6e:97:a4:69:77:1b:75:b0:52:e3:98:3b:
                    84:2e:72:46:7e:f8:77:a9:d4:7b:9e:49:f1:2b:57:
                    2e:5c:e6:b4:1e:e6:c9:9d:da:f1:be:04:53:b2:1f:
                    ff:4b:21:b9:59:be:7f:dc:1a:83:5f:c3:c3:3c:c1:
                    f0:b6:41:1f:3e:d5:45:da:0e:ef:c2:7b:68:98:dc:
                    29:81:db:34:2d:32:67:36:1b:3d:b7:a3:db:ba:1b:
                    79:6e:a8:73:08:b0:1d:8b:7e:26:6b:9a:ad:e6:f5:
                    ad:99:9d:28:bc:8a:31:12:c9:6e:70:fa:49:d5:77:
                    31:a9:46:cd:1b:78:b3:16:a7:4b:89:26:26:08:b2:
                    74:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1B:EB:09:58:10:8F:FE:F2:8F:6B:C8:90:C3:ED:BD:F3:C8:8B:FA
            X509v3 Authority Key Identifier:
                keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8b:2c:8d:50:42:e0:65:7e:03:2d:fc:7d:23:30:0e:24:83:
         ab:12:2c:39:45:fe:ed:51:cc:e9:f0:5b:79:c4:0f:03:a5:3b:
         33:38:42:74:38:de:a9:59:e3:0f:48:9c:ee:8d:f5:75:28:3b:
         a0:c3:5c:b0:7f:36:f9:33:cb:da:59:ad:7c:f4:ae:56:a5:a3:
         09:a9:c9:20:29:ec:31:01:9b:9f:33:42:48:5e:03:ed:52:3e:
         74:0a:96:bc:ba:26:f6:68:56:43:f9:b4:a5:ca:55:9a:6b:5a:
         51:a7:c0:57:db:9c:e7:ba:58:a2:6b:af:c5:c0:39:13:82:50:
         c8:32:33:27:65:9a:a1:13:88:1a:87:3d:f6:ff:0f:7a:2d:d6:
         6a:6e:37:1d:95:81:3b:8e:2e:f3:39:22:18:ef:1c:53:df:40:
         77:f7:12:b2:c7:10:c3:cc:20:8d:0b:88:2d:42:6a:64:66:10:
         04:8a:ad:b8:25:64:1c:9f:fd:1e:fc:45:3a:9d:4c:fb:ca:2c:
         53:cd:bf:e6:c5:ee:eb:e1:9a:95:a1:d5:cc:e9:e8:58:ab:f8:
         11:fe:f3:85:35:5b:9b:3f:3b:87:31:1d:67:85:30:3a:34:26:
         1e:4d:a3:6b:89:ca:49:2a:ea:23:c7:27:fd:03:fc:7e:27:3c:
         08:2f:a6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:01:08 2025 by rpki-client