This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
File:                     _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json)
Hash identifier:          RqKCuF1hfD1tk2DU+9esQ+Trb1i1sM+BdBWamBUb/Tc=
Subject key identifier:   C6:34:12:9F:A8:2A:40:F5:A0:BC:CE:9A:1E:87:26:CA:F1:14:D2:EF
Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
Certificate issuer:       /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Certificate serial:       3533
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
Manifest number:          3513
Signing time:             Sat 20 Dec 2025 14:57:23 +0000
Manifest this update:     Sat 20 Dec 2025 14:57:22 +0000
Manifest next update:     Sat 27 Dec 2025 14:57:22 +0000
Files and hashes:         1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: fF015paInz7Jst5WABNzxofDMrwiJ/1etKdxcRXNv7Q=)
                          2: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: kxrZR2YgejKdZw2KSRqTPBaBWQsbx9P5F4vQ2qVIgKA=)
                          3: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: uAMH22czrWhCVXR1Yh4Gb924YIN0PWuUVG5CCQ0T0QI=)
                          4: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: LB+KlOsPvF4imD5dH4Y/7ETYXLpR1TopuFn08dtZ6UQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13619 (0x3533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
        Validity
            Not Before: Dec 20 14:57:22 2025 GMT
            Not After : Dec 27 14:57:22 2025 GMT
        Subject: CN=6946b952-08e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:42:46:89:7b:af:f8:6e:3a:8d:b3:91:17:20:
                    38:48:ca:a5:5e:1d:0d:15:5c:4d:3d:74:c0:06:2b:
                    53:89:72:c4:9a:3c:69:1b:b0:39:35:9c:1b:a2:3b:
                    77:1f:ec:2f:9f:b3:ec:0a:d7:ca:cc:c8:e7:53:96:
                    86:09:a7:98:1b:7a:e7:31:69:4c:76:1b:db:c9:ae:
                    bc:cb:f4:fc:e7:89:67:0b:e3:1a:ea:a1:8f:3a:b8:
                    5f:4b:03:15:b1:2b:c8:e0:ab:a8:91:5b:40:66:7e:
                    6e:8a:e7:73:39:a5:29:e4:b1:27:51:85:64:07:95:
                    d2:2f:ca:82:83:16:56:3d:df:01:49:68:c4:77:53:
                    6e:ea:1a:a5:00:33:7b:49:a0:d3:1d:94:21:1c:f6:
                    a6:c0:cf:36:61:a7:3f:c1:71:9e:9b:09:e5:df:c2:
                    58:c1:9b:4f:c8:1a:09:3c:7d:d2:51:94:48:74:d0:
                    2d:e2:8e:f9:14:5d:69:ba:67:62:96:6f:f9:54:f9:
                    1d:5a:61:90:85:fb:f1:ee:21:6c:e6:8f:66:97:48:
                    55:32:b7:11:d8:98:5b:fd:b3:30:91:65:fc:3f:58:
                    1a:eb:e1:ed:f1:a3:09:87:cd:0e:ca:03:ac:56:3d:
                    5c:85:d4:17:d1:2f:99:36:ca:40:53:02:3b:12:da:
                    21:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:34:12:9F:A8:2A:40:F5:A0:BC:CE:9A:1E:87:26:CA:F1:14:D2:EF
            X509v3 Authority Key Identifier:
                keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cb:bc:f2:2d:4a:cb:01:cb:b7:e6:59:18:e8:7c:46:40:f0:
         1d:a1:8b:d3:a6:9b:23:8e:4a:be:32:da:5e:3d:a8:4e:98:1d:
         65:5f:f2:04:3e:48:b6:50:11:35:09:19:78:2f:42:92:6e:38:
         ad:b9:46:e6:d1:58:f3:a3:fa:1a:bd:d6:bf:64:51:5d:9c:75:
         c0:c3:ea:98:c6:4f:9b:8a:81:0e:8f:d4:d5:48:f6:95:f3:8e:
         88:50:56:3f:67:10:0c:2b:16:12:47:6b:78:a5:16:bf:7b:81:
         c7:ef:d5:4f:cc:ee:de:bf:0d:b5:01:5f:49:b4:fb:61:f3:69:
         84:e8:2c:ea:2f:f0:e2:34:b3:8a:c4:f9:77:71:92:07:bc:96:
         48:22:7b:7b:0c:fa:c9:f6:7e:28:6e:7a:f9:79:28:6e:3f:97:
         8c:aa:90:c0:3c:ac:6c:fe:9b:a8:64:3f:60:f1:85:e7:9e:ce:
         bd:d4:96:ef:cb:cb:f3:bc:2f:04:73:2e:b6:b1:d8:7c:e4:bc:
         3b:70:de:a7:e0:1c:ce:3e:58:1e:6e:dc:b4:7b:f3:56:b4:0e:
         d9:06:7a:9e:75:60:b9:55:c6:86:ff:14:68:e6:39:d9:cc:f7:
         a4:1c:07:99:b1:79:d2:9d:2f:01:b4:d8:e6:7b:e0:35:72:d9:
         34:10:16:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:35:13 2025 by rpki-client