This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft
File:                     YrvIR87fi9d90MN073t-ZMJQ470.mft (raw, json)
Hash identifier:          fu1aEx89ovO1i3nnomeYYGYvva5MQpbiHiXj+2ry5S8=
Subject key identifier:   37:58:36:1E:D9:D2:AB:50:E2:D7:08:77:06:CE:9C:EF:AD:DC:FF:AC
Authority key identifier: 62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD
Certificate issuer:       /CN=A91EF634/serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft
Manifest number:          40
Signing time:             Tue 23 Dec 2025 06:16:12 +0000
Manifest this update:     Tue 23 Dec 2025 06:16:12 +0000
Manifest next update:     Tue 30 Dec 2025 06:16:12 +0000
Files and hashes:         1: YrvIR87fi9d90MN073t-ZMJQ470.crl (hash: deizN700/abR8NOM9HKsR1gPHPGfZcTr196HYUoGsAc=)
                          2: 746CEA6E7CD911F0942A980CC4F9AE02.roa (hash: dtwgvFiT0agZNrnZV5YlHwJWndOHgTVg9Hlvyneymg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl
                          rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF634, serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD
        Validity
            Not Before: Dec 23 06:16:12 2025 GMT
            Not After : Dec 30 06:16:12 2025 GMT
        Subject: CN=694a33ac-08aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:c0:f5:dc:4f:47:68:21:b8:c5:97:04:8e:
                    23:73:7a:34:65:d9:eb:dc:8b:36:91:73:f5:fe:73:
                    39:a6:f2:53:29:81:a8:b2:e3:d9:80:6e:f6:bc:70:
                    fb:00:f9:d9:10:d1:37:ca:e5:5e:7a:f5:7a:10:16:
                    6f:70:2c:2f:f6:df:04:a8:82:60:c2:51:7d:0d:d7:
                    7b:89:31:d3:b9:61:55:07:3e:62:ff:b2:57:a1:e6:
                    3b:2e:c2:1e:dd:c6:66:ac:25:8d:79:5a:8f:60:d6:
                    c8:93:1c:9f:f7:6f:63:06:f5:38:4f:98:9a:f7:c6:
                    4b:43:73:d6:49:ad:32:86:e5:1c:20:25:2d:15:e8:
                    e5:dc:d8:cc:1b:d2:c8:d9:19:4c:ab:e9:3c:ee:b2:
                    4d:26:02:09:b6:00:f7:31:ff:5a:2b:ba:21:11:3d:
                    f6:aa:90:d2:c5:80:01:d7:3a:64:90:12:95:7c:2e:
                    49:6e:1f:ae:28:64:1f:df:e2:85:df:e0:a7:0a:5c:
                    6a:84:1f:d0:06:34:e5:ec:b6:90:7a:a8:70:b4:f5:
                    98:a6:62:36:41:8a:7f:c0:21:dd:32:bb:c6:c5:1c:
                    c9:7c:5a:ab:98:49:ba:57:39:55:53:95:59:30:1a:
                    7d:2c:f7:0e:3f:ca:34:6a:8b:da:73:87:61:ed:9c:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:58:36:1E:D9:D2:AB:50:E2:D7:08:77:06:CE:9C:EF:AD:DC:FF:AC
            X509v3 Authority Key Identifier:
                keyid:62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:72:78:e9:78:15:48:9f:54:46:24:e2:4d:81:4a:6c:15:02:
         59:ac:91:7b:da:8f:4d:e2:a9:af:35:8e:ea:25:48:fa:07:7d:
         7e:7c:f3:59:6f:93:93:3f:3f:e9:e8:41:31:c3:d4:f5:68:53:
         7c:b0:36:4d:a1:dd:5e:94:cf:6e:ec:03:8a:20:c6:bc:85:dd:
         13:5c:56:7a:df:34:73:c7:94:da:bc:21:2c:fa:67:6b:8c:4d:
         ad:f9:48:f1:81:12:c7:b7:cf:e9:23:38:ae:16:ca:ee:eb:95:
         77:1f:eb:34:0f:bb:38:cb:a1:2a:cb:0e:42:01:63:58:0f:2b:
         c3:6f:60:6e:3b:b3:1b:f3:3e:ad:55:d2:75:77:f2:f0:4c:c7:
         7e:74:36:e2:42:90:fa:e0:da:ab:ad:71:13:10:ac:b8:e2:ed:
         3b:ba:00:98:36:29:49:44:4b:13:90:15:68:d1:0c:b5:52:6b:
         b4:6c:c2:33:bd:f6:57:b9:30:48:a3:66:d7:ce:ae:b6:b6:8a:
         db:df:66:36:f1:7b:46:34:91:01:98:bb:88:96:87:8f:57:ec:
         0c:57:25:77:ec:d9:d4:58:a8:f7:86:d4:78:00:29:39:2e:22:
         b3:f5:cb:11:42:50:35:88:dc:77:be:f0:a0:7e:ff:59:da:84:
         78:09:d4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:34 2025 by rpki-client