This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
File:                     YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json)
Hash identifier:          vgULuTsANfjf1L2JPOGSZsU2tk1ViiZ7X4O7+XZ9LzE=
Subject key identifier:   87:43:E4:76:59:32:84:BD:AD:D5:23:A7:5E:D2:97:C1:5E:F9:83:30
Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Certificate issuer:       /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Certificate serial:       0458
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
Manifest number:          0445
Signing time:             Thu 18 Dec 2025 23:38:58 +0000
Manifest this update:     Thu 18 Dec 2025 23:38:58 +0000
Manifest next update:     Thu 25 Dec 2025 23:38:58 +0000
Files and hashes:         1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: bxBRfdB4/nqU5Mt+wONGqwwSdMWUoDNsiTHvn0avHio=)
                          2: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: HVGi2lUwCQZWcIQSfZT0TZMTdiphqEIo5eAKaq0V4N8=)
                          3: EF6D0418235911EFB1B55375C4F9AE02.roa (hash: xAxqo/39ROKd3bFPPtYVdYrT8F7pY6ozf1j+GuGsqZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112 (0x458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294
        Validity
            Not Before: Dec 18 23:38:58 2025 GMT
            Not After : Dec 25 23:38:58 2025 GMT
        Subject: CN=69449092-119e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b5:3e:81:c0:b3:40:c0:14:3b:5b:eb:67:00:
                    15:e1:6c:8a:d8:0f:e0:7d:32:a7:a4:78:02:4e:5a:
                    f1:f7:aa:ec:7a:49:c9:79:61:d7:99:f0:c1:73:a5:
                    17:18:53:15:d3:5f:6e:11:c5:46:1b:2a:d2:72:ed:
                    ad:f8:09:0a:6b:cc:ea:dd:e1:66:d2:11:ea:24:d1:
                    60:9c:f2:48:58:aa:a6:8d:36:f7:5c:24:13:1f:19:
                    84:31:2a:bb:0c:3b:1d:76:93:03:e9:85:b4:8c:31:
                    a8:ea:cf:25:0d:53:25:9a:cf:65:e8:45:b8:e7:2a:
                    d9:0c:e3:df:06:3e:a4:92:ea:cb:5a:43:e3:06:a1:
                    0d:39:ce:bd:a3:fa:03:07:32:80:3b:ce:11:66:58:
                    01:c8:df:2a:52:a5:6a:af:6d:77:67:4c:62:4c:53:
                    06:d0:c0:19:32:03:a6:09:c2:42:27:d4:a8:24:d1:
                    74:10:50:00:37:ec:cc:53:5e:56:24:5f:8e:d2:e5:
                    44:e9:29:16:46:fe:79:7f:7b:fa:c4:36:37:b6:7c:
                    82:14:0b:84:a3:6a:2b:c7:3e:cf:c9:dd:a6:51:e1:
                    aa:03:e7:66:bb:17:18:33:3c:05:5b:e4:00:f2:c9:
                    15:7c:a8:1d:fa:a6:0f:a4:32:f4:c2:2c:bb:c8:97:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:43:E4:76:59:32:84:BD:AD:D5:23:A7:5E:D2:97:C1:5E:F9:83:30
            X509v3 Authority Key Identifier:
                keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:70:35:94:26:4a:a2:68:dd:1a:7b:f0:ac:fa:56:05:44:b3:
         d2:f8:a5:02:e2:fd:df:d5:15:d4:ba:96:e1:85:7c:90:16:19:
         7e:e4:06:64:5c:3b:e9:1c:8d:7c:45:68:75:4d:1e:1d:e3:cd:
         fe:5b:c5:ee:62:f5:c4:45:d4:22:5e:6e:32:68:8c:4a:7f:2b:
         85:ae:db:ed:db:6a:dc:8a:34:e6:86:ec:3b:90:74:a3:16:ce:
         80:a2:a4:ca:b6:a8:98:9b:04:62:fb:52:d6:a0:3f:27:14:7d:
         e1:a0:45:1a:5b:6f:80:33:78:9d:cf:67:ad:18:7d:e6:cd:b0:
         70:0d:0a:ed:fc:ad:87:81:96:d7:6f:b9:e7:04:50:22:d6:50:
         c9:7f:f2:1f:9a:09:63:27:82:32:ef:b0:c6:8c:2a:73:8f:7d:
         94:0d:d1:25:65:94:69:17:94:b2:db:f4:80:27:c4:3f:d6:2f:
         e4:3f:a8:fe:7d:15:1d:c9:59:ca:48:78:fa:33:bb:20:42:46:
         11:a4:67:1c:df:34:0a:40:21:6f:2a:72:a3:4b:ac:2b:30:c3:
         57:97:ed:40:cc:96:03:27:4b:1c:41:99:1a:b9:c9:29:a5:9f:
         c0:9a:1c:b0:fa:1a:93:4a:c4:f7:85:74:08:de:62:e5:69:c6:
         f3:63:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:27:23 2025 by rpki-client