This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
File:                     FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json)
Hash identifier:          46pOISjqW/iLxZcrYtUnSiw/JvqITodgcpBXZ/DH6W8=
Subject key identifier:   3F:4E:39:D2:62:02:B8:14:9F:E2:B8:98:9D:04:F2:C0:0C:49:8D:F5
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Certificate issuer:       /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial:       027F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
Manifest number:          026A
Signing time:             Mon 08 Dec 2025 23:59:13 +0000
Manifest this update:     Mon 08 Dec 2025 23:59:12 +0000
Manifest next update:     Mon 15 Dec 2025 23:59:12 +0000
Files and hashes:         1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: LkTt32MNhL335c7Ug2RP44TAzzJzOpZMZztUDdl3knI=)
                          2: 59A2E9D8A01411EF8E674221C4F9AE02.roa (hash: 5FPvqFtCVuXHbJ5vIpGbKLrezdmHhY92OGb34DPDtdI=)
                          3: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: +vXql9o+JG8jXikaEwvUdgbDzT28NGoMtEaj6InzCZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
                          rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 23:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
        Validity
            Not Before: Dec  8 23:59:12 2025 GMT
            Not After : Dec 15 23:59:12 2025 GMT
        Subject: CN=69376651-c836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:0f:71:3f:bc:c2:93:ae:24:64:2e:eb:88:
                    97:86:4c:8d:7e:ac:ff:46:25:24:4e:ec:45:ba:7b:
                    78:08:69:c4:1c:a9:dd:d3:7e:b7:ed:6a:d3:45:5b:
                    a7:d9:32:a6:4f:28:0b:7b:70:08:2b:6c:1e:6f:15:
                    30:bc:64:ba:a7:08:c4:00:e2:b9:69:9c:5d:30:6b:
                    f4:9a:2a:5a:90:fc:6e:9c:8d:aa:9f:19:8c:ee:c9:
                    70:20:bd:79:5c:f4:49:d8:8e:91:9f:6d:f7:c6:8c:
                    06:b6:c8:ed:7e:44:42:68:1b:2e:0b:43:9d:33:ff:
                    5b:f2:00:73:93:0e:4c:be:20:f6:17:2b:7a:ae:5b:
                    69:fc:e2:46:1b:cf:e8:7e:7c:34:ee:a6:e2:b4:35:
                    35:7d:43:fb:54:c5:13:c4:9e:59:f3:e2:86:ff:39:
                    77:09:b5:3a:d0:a8:01:7c:e4:37:f8:4b:dd:52:b1:
                    07:63:96:c6:4b:78:2b:5d:4c:36:ee:95:41:45:25:
                    1d:10:54:db:37:ac:5e:08:b0:8f:4c:b1:53:e1:f9:
                    90:7e:81:be:b2:7f:3e:b4:28:72:dd:82:1c:f3:e4:
                    bd:fe:d3:17:d7:08:1f:f7:67:02:09:a3:44:fe:f8:
                    6d:b4:28:5a:27:de:b8:59:02:6f:4d:7a:4b:ad:5d:
                    e9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4E:39:D2:62:02:B8:14:9F:E2:B8:98:9D:04:F2:C0:0C:49:8D:F5
            X509v3 Authority Key Identifier:
                keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:55:60:6d:f5:09:fe:b3:a3:87:2c:46:81:60:4e:25:ce:8e:
         c3:51:ac:93:41:2f:9e:f6:d7:eb:fc:93:12:42:f5:4c:58:64:
         0f:2b:f3:47:23:87:1e:b3:2c:1b:83:47:6d:ae:a9:4a:38:a2:
         22:73:12:e6:e1:03:a9:db:1f:05:47:e4:5d:8a:c1:23:5f:97:
         15:1f:94:54:61:0f:c9:11:3c:89:a5:03:63:3a:9c:91:74:a2:
         de:b3:bb:6d:aa:a3:84:66:fe:c4:37:c4:9c:89:62:1e:9a:5a:
         ab:e6:76:18:5c:09:ca:ef:8a:f2:1e:ca:16:d0:33:52:31:5d:
         fd:c1:8c:96:fb:cd:79:bb:3f:c0:66:c9:85:28:6f:3c:cf:58:
         42:0e:a0:26:26:c9:8e:1e:20:e3:f2:76:7a:4e:95:af:9d:af:
         33:71:3e:c2:c1:24:58:b8:78:07:fc:5c:ba:24:9f:e3:c6:52:
         01:55:52:14:88:01:9d:6d:d6:4b:98:c1:f1:9c:d8:99:b2:07:
         ee:3c:91:0d:2c:f0:aa:1e:f2:27:83:78:04:09:22:08:a4:fd:
         ff:f0:29:cf:c7:72:24:55:a6:db:a7:db:85:ff:8a:35:85:b1:
         04:17:6d:d5:9e:91:bf:e9:12:ed:31:d3:9a:dd:cb:10:d2:91:
         cd:60:24:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:01:39 2025 by rpki-client