This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
File:                     Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft (raw, json)
Hash identifier:          Gqt4XPLLFwyoplarlMZ0yADuPtbIt+mZIwDxYOoMpLw=
Subject key identifier:   48:26:E1:CE:62:AC:67:97:E9:AA:D8:73:E5:05:FF:A8:27:48:05:85
Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C
Certificate issuer:       /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
Certificate serial:       0651
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
Manifest number:          0648
Signing time:             Mon 22 Dec 2025 21:51:41 +0000
Manifest this update:     Mon 22 Dec 2025 21:51:41 +0000
Manifest next update:     Mon 29 Dec 2025 21:51:41 +0000
Files and hashes:         1: Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl (hash: Cu/fLQyKPF9pSx0sBaVyHSNeaM7HCyNAl5h748HLPRY=)
                          2: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (hash: Ck3Q3b0m7wZfc35rCMLbisQ7sVgiMLOPm+0PDdt1xrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl
                          rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C15F2, serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
        Validity
            Not Before: Dec 22 21:51:41 2025 GMT
            Not After : Dec 29 21:51:41 2025 GMT
        Subject: CN=6949bd6d-8e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:35:40:bc:8c:8d:65:5c:ab:22:48:49:c8:
                    f5:41:a8:c5:c7:c0:64:35:b8:93:ec:6e:56:64:b8:
                    fa:65:cb:1e:d8:1b:d2:74:47:79:21:8d:0c:12:41:
                    c4:c0:d8:68:ca:50:d8:23:0f:b4:19:26:1f:93:eb:
                    ca:ff:18:91:1a:6c:9a:ff:5c:7e:e7:c2:77:86:74:
                    02:6e:b8:b9:b0:1b:f3:cc:84:ee:56:a1:d2:1e:fc:
                    e4:a9:8e:e2:da:1e:03:09:aa:e2:11:62:37:33:80:
                    14:ef:0e:2c:28:bf:6f:85:96:e6:78:4c:5d:a0:8b:
                    31:f6:0d:32:96:e6:ae:59:73:09:ab:11:58:52:2e:
                    17:b9:2d:b3:79:fb:dc:66:b1:43:59:24:ea:9f:5c:
                    48:7b:1b:99:0b:c5:4e:48:0d:9a:8c:9b:91:4e:6d:
                    e1:af:ad:c1:79:1c:1f:77:25:5b:40:3f:5d:eb:08:
                    91:3b:ef:2c:d8:90:f5:fe:48:99:d2:3e:95:8d:9c:
                    69:d2:90:c0:74:4d:ff:91:75:2c:1d:99:ce:07:22:
                    01:1f:ec:41:8d:01:61:cf:49:33:e9:25:4d:03:b1:
                    e6:5d:fe:39:77:8f:d7:56:e6:4b:90:26:b3:ba:fd:
                    45:e1:70:98:a7:6a:e1:0b:0c:7f:78:26:40:ee:a6:
                    21:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:26:E1:CE:62:AC:67:97:E9:AA:D8:73:E5:05:FF:A8:27:48:05:85
            X509v3 Authority Key Identifier:
                keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5e:89:49:54:70:55:46:31:ac:1a:51:34:06:99:52:ec:d8:
         7a:4d:a9:55:05:a6:26:94:bb:ad:f8:16:f1:2a:ab:ef:13:93:
         c2:05:a6:0c:40:d7:05:94:1b:46:3f:a5:d7:5b:c5:d7:1d:14:
         a1:c7:c3:da:27:15:de:21:72:62:89:9a:ed:7d:e7:06:2a:59:
         cc:21:22:a5:45:8b:fd:00:d7:57:21:db:be:29:51:b8:54:5f:
         13:c0:21:3f:44:d4:f4:f5:d3:04:51:ec:39:d6:28:ca:e6:bf:
         b7:fe:4e:5b:4f:9a:ec:e4:52:2a:57:46:8f:5c:80:7f:7b:6f:
         40:5e:f2:2a:56:96:33:2c:b5:ec:61:fa:47:4a:a1:ec:0e:e8:
         fa:91:2b:56:c7:17:c5:47:ff:8a:cc:f8:a9:7f:d6:5c:15:24:
         06:65:fe:7e:de:ce:0a:6c:a4:4a:1d:83:2e:6a:e9:c5:f4:f1:
         0a:e5:cb:bf:e8:56:ef:ad:c0:6b:fb:41:54:84:a3:1c:2f:de:
         1b:80:81:51:9e:b9:75:77:9c:18:c1:98:9b:f2:89:0e:b7:41:
         4a:7a:06:c5:56:0f:da:a8:3a:2a:34:01:b9:e3:be:4b:9d:d9:
         f2:d2:90:7e:2e:50:90:15:c4:44:64:3f:9e:eb:b7:ec:0b:12:
         ff:bb:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:00 2025 by rpki-client