This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
File:                     mYWbHvAhS7n86OW_FSbzvRHsKAc.mft (raw, json)
Hash identifier:          kY+cvIHpC6ZYhyBo/34W6r8hSg52hqothozX3/O/iIo=
Subject key identifier:   DF:51:67:47:15:E6:C8:33:45:A5:00:DE:E7:31:5F:57:B9:B4:AD:7D
Authority key identifier: 99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07
Certificate issuer:       /CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
Certificate serial:       17A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
Manifest number:          2069
Signing time:             Wed 24 Dec 2025 16:21:20 +0000
Manifest this update:     Wed 24 Dec 2025 16:21:19 +0000
Manifest next update:     Wed 31 Dec 2025 16:21:19 +0000
Files and hashes:         1: mYWbHvAhS7n86OW_FSbzvRHsKAc.crl (hash: UtO/ygH2BxQGJ3N4qsItMhz8YkJmrErQ746EH6sEuuQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl
                          rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 15:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6054 (0x17a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF026, serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
        Validity
            Not Before: Dec 24 16:21:19 2025 GMT
            Not After : Dec 31 16:21:19 2025 GMT
        Subject: CN=694c1300-bdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b4:4b:bc:5f:e7:1c:13:fa:0b:c9:8c:d5:7c:
                    02:c5:5e:a1:3c:6a:3f:2e:7b:3b:4f:31:db:df:60:
                    34:92:00:d6:db:f0:86:3f:78:ea:89:23:a7:c7:5f:
                    bd:e0:81:28:cf:a1:11:fa:5c:08:c5:11:e3:b0:dd:
                    64:75:c3:eb:3a:fb:f6:c2:59:72:ed:9e:3e:97:59:
                    ec:09:d4:2c:24:68:36:c3:84:d9:cd:3d:01:e7:41:
                    86:25:3f:41:d1:5b:ec:54:33:29:f5:68:74:21:d0:
                    87:ea:e7:8b:12:5e:81:31:c7:f1:0e:45:a9:75:f0:
                    92:89:f7:3d:b5:e0:d3:48:91:77:b6:c4:a3:58:ba:
                    54:0a:9e:80:18:97:d0:15:6c:0e:06:5e:c6:e4:c3:
                    2e:67:32:67:c9:96:7d:c7:0d:0f:9c:64:cb:9e:2b:
                    67:69:69:7d:d8:d7:eb:01:a8:5e:59:0c:5e:38:9f:
                    2d:94:b3:06:e9:b3:01:34:a5:27:bd:bd:eb:2e:23:
                    7e:a9:b8:53:4e:47:bd:15:79:76:60:0c:67:59:aa:
                    7e:7b:c1:2d:78:7a:c1:88:eb:2f:fa:57:0c:69:b7:
                    12:b2:43:a9:ed:8d:cf:29:46:b3:81:8a:e6:43:89:
                    1a:b4:b2:14:1c:1e:02:e8:34:b1:d4:e1:ec:ab:2d:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:51:67:47:15:E6:C8:33:45:A5:00:DE:E7:31:5F:57:B9:B4:AD:7D
            X509v3 Authority Key Identifier:
                keyid:99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c7:14:bf:eb:cd:6b:b8:92:89:5a:00:f4:d9:cd:da:fa:f4:
         33:75:39:d1:62:d2:13:9a:1b:53:ed:bf:4a:e7:24:54:9f:80:
         78:a8:e9:a9:d7:1a:05:ed:fc:87:70:7e:fa:5e:56:c2:d9:f1:
         31:40:be:1e:26:a8:bd:01:17:65:d0:87:57:c9:49:4c:c4:e9:
         b6:71:30:a5:26:56:4f:6e:0b:84:8a:9c:64:3e:1e:c5:d0:1c:
         fd:58:1c:df:7f:b9:a2:6c:0a:d1:42:3a:09:c3:24:f8:7a:0b:
         29:95:c5:da:17:d9:f9:0e:c2:f4:5b:51:b1:f2:15:50:b7:f7:
         a3:c2:17:cd:78:4e:ba:4f:4e:eb:3a:11:ea:3f:08:4a:da:89:
         4e:0b:56:4d:17:ad:08:40:b8:94:fa:cc:f7:41:77:68:11:e2:
         1e:c0:2c:0f:3e:ad:1e:e5:ff:39:60:c0:c3:84:d1:8b:4e:26:
         71:07:1a:e9:d5:52:5c:fb:23:e3:21:f9:00:6b:6f:7b:43:ed:
         cc:e9:bc:19:77:68:57:cc:a3:3e:e6:29:ed:25:43:86:aa:da:
         5f:8a:4d:e6:91:66:5e:ca:e7:47:cd:12:0b:ed:8a:da:3f:07:
         60:cb:39:fb:77:df:77:bc:1d:fa:14:f9:e4:89:0b:4b:d2:44:
         23:2d:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:19 2025 by rpki-client