This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
File:                     YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json)
Hash identifier:          1sLr4UoAWblfY9GJRysgipdcJYBCdAEkbBvfXPKVF98=
Subject key identifier:   3E:2F:5C:B7:79:BD:5F:39:AF:91:21:08:97:C5:A2:AA:A4:FD:F5:8C
Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04
Certificate issuer:       /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
Manifest number:          0194
Signing time:             Sun 21 Dec 2025 02:44:48 +0000
Manifest this update:     Sun 21 Dec 2025 02:44:48 +0000
Manifest next update:     Sun 28 Dec 2025 02:44:48 +0000
Files and hashes:         1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: Ku1IJNU2txlPko0CW85mI93fpEui52jcaFf3ij08Jv4=)
                          2: 2BA240AC994111F096074C40C4F9AE02.roa (hash: muY8FRyGGtKORkz0DPbnMxy7K5goG6Kn9e6MVRZPVic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
        Validity
            Not Before: Dec 21 02:44:48 2025 GMT
            Not After : Dec 28 02:44:48 2025 GMT
        Subject: CN=69475f20-7fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:f2:bb:1b:13:dd:9d:a5:3e:cf:96:8b:92:
                    d6:75:2f:a0:ba:7e:98:67:de:ad:ca:b3:95:c1:e1:
                    d4:2a:3c:4a:fa:59:0b:1d:1a:41:f5:f1:a9:a2:f3:
                    ec:74:4a:b0:f7:05:ae:a8:3a:0d:31:ba:68:b9:98:
                    8e:2c:5a:b4:54:7c:49:3c:18:62:76:2d:75:89:7b:
                    7b:fe:16:ad:1d:b6:77:b3:f4:16:d4:67:97:26:44:
                    df:99:c4:f5:28:c1:6b:dc:b6:ba:aa:5c:08:a1:19:
                    43:70:c1:cf:e4:b3:b4:30:a9:38:11:b6:62:e5:56:
                    35:42:65:14:b6:4c:b6:33:f4:8d:5b:20:c6:5b:49:
                    86:7e:b3:a0:1f:70:30:db:77:be:3e:bb:5b:5e:8a:
                    2c:b8:b9:3a:f7:0d:90:1d:e7:bf:47:7d:60:fb:fb:
                    34:50:ad:45:81:ba:5f:9e:fd:3b:82:c7:62:83:ed:
                    8b:72:a2:c8:0b:a9:20:fd:b5:a5:39:35:2f:66:c5:
                    27:38:13:ff:22:32:1e:5f:43:ad:34:b1:f3:92:ae:
                    d2:81:8f:0b:fe:e4:d2:52:50:cb:fe:46:bc:dd:fa:
                    9a:41:f7:b6:62:56:ec:4b:41:9d:9f:a9:19:09:d8:
                    e9:dc:40:dc:1f:3e:1c:dd:ba:35:3f:47:f4:41:36:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2F:5C:B7:79:BD:5F:39:AF:91:21:08:97:C5:A2:AA:A4:FD:F5:8C
            X509v3 Authority Key Identifier:
                keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bc:27:53:5d:04:74:97:1c:46:74:d5:ad:3e:a2:ba:4c:e2:
         c1:32:73:4a:5a:1f:fd:d9:ee:43:1a:1e:49:99:a3:76:da:62:
         da:64:ea:90:7c:b8:ec:fa:97:92:c3:c1:e5:13:fd:0b:12:d1:
         67:9f:e2:81:e8:ef:8a:68:99:61:23:e3:25:4b:f1:13:b2:52:
         29:bc:36:1b:cc:0f:d9:8c:6a:53:cf:e2:ee:b6:8b:e8:e1:fe:
         e3:dd:f6:b5:da:18:b0:32:49:82:2e:74:a8:2c:34:68:8c:1a:
         ef:13:04:5f:c3:02:78:cd:18:cb:50:82:94:17:1b:2c:af:41:
         e0:33:53:56:f6:8e:f8:ec:25:3d:f1:2e:eb:e7:46:cc:56:e8:
         1c:ce:4e:f5:1b:a8:f8:41:86:97:3f:bf:3a:90:3e:af:07:4e:
         5f:18:3b:da:08:73:e6:e9:7f:37:bb:61:5c:8c:12:d3:e6:a6:
         79:15:c9:b1:cd:07:28:20:2e:76:83:20:f2:bf:32:b0:04:4f:
         09:cd:70:35:6a:7c:d4:91:73:d5:e9:5b:25:04:17:64:8f:78:
         d9:90:88:6b:10:d4:ec:f6:41:bb:98:c9:1d:55:1d:24:d7:b6:
         a6:8b:33:1f:9c:08:c9:71:b2:17:f0:3a:53:3f:15:8e:eb:27:
         77:81:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:19:43 2025 by rpki-client