This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
File:                     Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json)
Hash identifier:          D/plSmoGWm96m0qC6vyWdIbcpC0khxKMta64RmgHf1Y=
Subject key identifier:   95:22:97:A5:49:5F:B3:D9:DA:0A:C8:E4:BC:C3:6F:18:58:C9:D5:10
Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Certificate issuer:       /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
Manifest number:          01A0
Signing time:             Tue 09 Dec 2025 01:31:52 +0000
Manifest this update:     Tue 09 Dec 2025 01:31:52 +0000
Manifest next update:     Tue 16 Dec 2025 01:31:52 +0000
Files and hashes:         1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: Vhq019EHa6ncENZQlKovxVZh2pPWRL/tQvO2BGyvpzc=)
                          2: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: 9h3davUQ9pNDA3U7SYojAK+YEhrIBkhT56ukToleizY=)
                          3: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: DgTHE1vd+LuLJ/6bYp2I4wVbGI057+J0uGiHNmi5Ok4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
                          rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 01:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
        Validity
            Not Before: Dec  9 01:31:52 2025 GMT
            Not After : Dec 16 01:31:52 2025 GMT
        Subject: CN=69377c08-834c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:b0:00:63:6f:87:03:dc:45:35:9a:6a:f7:
                    2f:69:01:b2:bd:06:50:ea:75:73:7c:9a:40:a1:60:
                    e7:d1:88:04:d6:03:31:33:c0:40:dc:14:5f:0b:55:
                    55:ce:4c:27:24:38:e5:c2:84:58:66:7e:19:54:c8:
                    f9:ef:45:a3:aa:87:81:58:1d:ff:2a:b9:b0:ef:eb:
                    38:38:4b:b1:e3:89:bf:1e:5c:42:38:26:53:40:4d:
                    ed:6d:79:95:69:59:fa:92:1d:2f:4c:2f:d9:5c:1c:
                    2a:1d:5c:0f:63:af:a7:6d:a9:27:43:ef:30:83:5c:
                    8c:50:83:7d:e3:12:26:62:05:0c:3c:e3:32:be:e6:
                    d7:c7:90:10:60:50:09:3b:97:67:70:36:8b:f6:8d:
                    58:6b:0d:43:7e:b4:5e:6e:e8:bb:8d:5c:84:cf:ac:
                    fb:ef:9d:3e:a0:cf:e0:d4:13:ed:c1:2a:13:a3:ca:
                    6f:8d:23:42:4b:03:0f:9c:26:83:ef:6b:9a:a3:b3:
                    4c:59:51:1c:30:93:5c:ec:11:d9:90:02:44:8d:a5:
                    9e:c0:24:e7:a6:37:02:d7:85:2b:25:10:6b:69:34:
                    ca:99:c2:19:ae:f5:6c:9a:e7:47:15:89:60:84:e7:
                    a7:2d:ca:b1:3e:58:6e:f8:9d:6a:85:a2:de:ab:a5:
                    6d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:22:97:A5:49:5F:B3:D9:DA:0A:C8:E4:BC:C3:6F:18:58:C9:D5:10
            X509v3 Authority Key Identifier:
                keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:74:55:47:b8:3e:3e:51:68:6e:93:fc:c3:3c:44:51:5a:fc:
         7e:a8:94:e2:f6:a0:ca:b8:96:6e:be:3e:89:15:f1:a0:eb:e5:
         8a:44:df:b6:6b:93:88:76:7a:37:27:36:57:88:19:e5:f1:65:
         52:05:0d:d2:ce:7a:dc:bc:a7:a9:ec:5d:5e:c7:fa:77:d4:0a:
         76:a3:47:a4:12:6d:ea:28:94:2e:d9:e1:93:75:a0:97:34:9a:
         57:c8:3f:d3:04:dc:e5:a1:5d:a1:60:62:cd:3f:0c:98:37:bd:
         10:82:00:4d:42:87:d0:30:dd:13:21:2c:bb:8b:97:01:12:53:
         e7:e3:24:92:59:7b:c6:c0:6c:98:d7:41:ac:aa:85:f8:25:19:
         73:15:bd:37:7b:84:85:6d:72:b3:b8:2a:49:3d:9f:1b:55:07:
         0b:99:36:d0:bd:7a:be:10:84:d1:92:5f:71:fa:fa:9e:96:ce:
         fd:c4:37:a2:10:29:ba:82:f8:b3:58:6e:49:d5:82:03:ba:85:
         ad:c0:2c:79:ba:a9:e4:bb:ca:37:ab:d8:83:6b:ee:77:c1:43:
         40:cb:c8:be:b7:22:53:f1:d2:de:20:87:0d:0e:72:10:a9:d8:
         25:d6:d4:f2:9b:f5:38:8b:93:e3:92:13:35:fc:13:9c:cc:94:
         05:29:cc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 20:01:51 2025 by rpki-client