This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
File:                     eDYu-f45SW72Wzb4O2aYr5MI36s.mft (raw, json)
Hash identifier:          0o8b1FRBFKv+tee9vW8YmSE9mlYXO/xvBiNK2Nd0+ZI=
Subject key identifier:   B9:D6:02:89:E7:DB:0B:BA:58:88:A4:B9:65:1D:03:5F:B1:2C:9E:AF
Authority key identifier: 78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB
Certificate issuer:       /CN=A91CE7A4/serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
Manifest number:          B5
Signing time:             Tue 23 Dec 2025 05:00:09 +0000
Manifest this update:     Tue 23 Dec 2025 05:00:09 +0000
Manifest next update:     Tue 30 Dec 2025 05:00:09 +0000
Files and hashes:         1: eDYu-f45SW72Wzb4O2aYr5MI36s.crl (hash: I5k0rlprN8EJpyibITNvKsEMYPGZg53FtPqqVpb/6fM=)
                          2: 44B43AAECC1011EFA5596A50C4F9AE02.roa (hash: uRW4bqoOWcKD9JjoYymAbjdIYpBJL8ZXTg4SH6smXUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl
                          rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE7A4, serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB
        Validity
            Not Before: Dec 23 05:00:09 2025 GMT
            Not After : Dec 30 05:00:09 2025 GMT
        Subject: CN=694a21d9-9fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:31:e2:65:73:8a:e2:4d:ca:08:fd:48:dd:
                    d9:46:60:80:7c:c9:5b:c6:22:fb:08:f8:15:9a:ac:
                    9a:17:20:e3:93:40:92:db:cb:12:86:43:02:45:ef:
                    ce:3f:4a:d3:4b:e3:07:61:33:50:63:b5:90:5b:dd:
                    82:b0:f8:1b:10:e0:ea:1f:1c:ab:a8:8b:2a:94:64:
                    05:75:02:43:15:d0:9d:b3:f2:f8:fd:fd:b2:b3:10:
                    0c:96:73:9c:a9:7c:b8:77:51:20:bc:7b:78:7d:8a:
                    fb:10:8e:31:6f:0b:71:3e:5b:dc:2e:d8:15:2d:44:
                    a8:a3:6c:70:1d:f7:8a:ca:3e:8c:be:43:8b:1d:80:
                    86:27:fb:8b:cd:01:e4:d7:ef:d3:80:59:73:fc:5e:
                    2a:05:bf:13:48:0b:f8:a4:b6:62:b9:4c:6a:2b:f0:
                    1d:c0:d6:d8:30:0d:95:90:75:47:1b:3f:a0:bf:ac:
                    d3:05:37:09:89:59:2a:1b:bd:ee:32:0a:03:ca:56:
                    38:d2:44:23:0c:ba:84:9d:ba:fa:15:fd:1b:e9:d5:
                    57:34:be:07:b0:20:51:c0:dd:66:16:2e:62:40:54:
                    00:e6:a6:eb:fe:c6:15:72:02:c0:8b:d8:f4:c5:86:
                    88:8e:73:17:28:59:08:29:fd:a1:51:0a:1c:18:08:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D6:02:89:E7:DB:0B:BA:58:88:A4:B9:65:1D:03:5F:B1:2C:9E:AF
            X509v3 Authority Key Identifier:
                keyid:78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:f7:c5:b7:f3:b1:64:a5:c2:e1:3d:5e:b1:2c:1a:ce:17:
         78:5e:b2:52:c4:ec:8c:4c:83:2e:34:c5:d1:f7:31:e4:0b:ea:
         e1:a5:6d:3c:9c:24:e2:ae:58:e9:84:f3:91:f2:66:5b:bf:af:
         b2:12:01:be:1f:ca:45:6a:6a:76:46:9d:b9:42:3e:70:89:d6:
         af:12:e9:57:58:da:1e:2d:62:fa:d2:93:ef:97:9b:bb:47:22:
         ae:c3:b4:5b:d1:17:86:7d:d7:d4:fa:67:23:16:4d:df:e3:93:
         ee:24:d9:d9:bd:5f:86:fa:14:f0:68:ee:74:12:ae:4c:5d:52:
         93:ed:66:a8:5b:82:a4:b1:0d:87:5d:93:3b:41:21:aa:2b:dc:
         ad:af:a1:0f:1d:5c:5f:a3:62:69:53:b0:d6:bf:83:9e:27:b8:
         dc:29:d1:0a:f4:f9:0c:42:7e:e6:cb:08:28:25:8a:7b:31:4f:
         14:54:73:4e:4d:78:e1:6a:c4:68:80:be:b9:51:f2:2a:05:61:
         68:9e:38:ec:15:9b:c3:5e:ef:d4:01:7d:1b:b9:a1:41:f6:b4:
         73:73:5f:f1:50:a6:0c:a0:19:f9:67:21:68:bb:da:3c:d8:10:
         43:da:02:dd:36:01:05:5f:45:0d:e0:c0:3f:92:f2:b9:c3:65:
         23:63:55:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U3QTQxMTAvBgNVBAUTKDc4MzYyRUY5RkUzOTQ5NkVGNjVCMzZGODNCNjY5OEFG
OTMwOERGQUIwHhcNMjUxMjIzMDUwMDA5WhcNMjUxMjMwMDUwMDA5WjAYMRYwFAYD
VQQDDA02OTRhMjFkOS05ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArm8x4mVziuJNygj9SN3ZRmCAfMlbxiL7CPgVmqyaFyDjk0CS28sShkMCRe/O
P0rTS+MHYTNQY7WQW92CsPgbEODqHxyrqIsqlGQFdQJDFdCds/L4/f2ysxAMlnOc
qXy4d1EgvHt4fYr7EI4xbwtxPlvcLtgVLUSoo2xwHfeKyj6MvkOLHYCGJ/uLzQHk
1+/TgFlz/F4qBb8TSAv4pLZiuUxqK/AdwNbYMA2VkHVHGz+gv6zTBTcJiVkqG73u
MgoDylY40kQjDLqEnbr6Ff0b6dVXNL4HsCBRwN1mFi5iQFQA5qbr/sYVcgLAi9j0
xYaIjnMXKFkIKf2hUQocGAgutQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnWAonn
2wu6WIikuWUdA1+xLJ6vMB8GA1UdIwQYMBaAFHg2Lvn+OUlu9ls2+DtmmK+TCN+r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdBNC9DMENBRTc0MkND
MEYxMUVGQTI3OEZENENDNEY5QUUwMi9lRFl1LWY0NVNXNzJXemI0TzJhWXI1TUkz
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VEWXUtZjQ1U1c3Mld6YjRPMmFZcjVNSTM2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTdBNC9DMENBRTc0MkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi9lRFl1LWY0NVNX
NzJXemI0TzJhWXI1TUkzNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQANgffFt/OxZKXC4T1esSwazhd4XrJSxOyMTIMuNMXR9zHkC+rhpW08
nCTirljphPOR8mZbv6+yEgG+H8pFamp2Rp25Qj5widavEulXWNoeLWL60pPvl5u7
RyKuw7Rb0ReGfdfU+mcjFk3f45PuJNnZvV+G+hTwaO50Eq5MXVKT7WaoW4KksQ2H
XZM7QSGqK9ytr6EPHVxfo2JpU7DWv4OeJ7jcKdEK9PkMQn7mywgoJYp7MU8UVHNO
TXjhasRogL65UfIqBWFonjjsFZvDXu/UAX0buaFB9rRzc1/xUKYMoBn5ZyFou9o8
2BBD2gLdNgEFX0UN4MA/kvK5w2UjY1Xk
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:26:22 2025 by rpki-client