This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
File:                     yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json)
Hash identifier:          6o4yecnWsLJRFoqXxWRHem/aZoG5hV3MIva8puiQyi8=
Subject key identifier:   53:E2:DA:82:D0:81:57:B0:E5:40:A7:3C:7D:4A:F4:1D:52:87:23:01
Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17
Certificate issuer:       /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017
Certificate serial:       06E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
Manifest number:          06E7
Signing time:             Mon 22 Dec 2025 21:13:15 +0000
Manifest this update:     Mon 22 Dec 2025 21:13:15 +0000
Manifest next update:     Mon 29 Dec 2025 21:13:15 +0000
Files and hashes:         1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: O5hHdaUXdQmPJ2ekj12Ef7s+VAmrhmqY8bKER7np+24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl
                          rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017
        Validity
            Not Before: Dec 22 21:13:15 2025 GMT
            Not After : Dec 29 21:13:15 2025 GMT
        Subject: CN=6949b46b-c73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1e:50:0c:5e:f5:75:e2:b7:21:df:ed:ce:bb:
                    5f:30:1e:03:28:1a:a5:f7:cb:89:4e:60:e8:9c:1a:
                    d8:55:58:a1:60:a9:59:ba:94:37:3a:61:1c:7a:14:
                    b7:d3:3e:0b:69:9b:32:51:0b:b6:b5:c1:73:5a:e8:
                    d9:f5:02:f1:38:81:15:d8:d7:7b:f7:67:19:41:2a:
                    79:b8:ae:c7:d6:db:2e:a1:ac:8b:0c:19:17:a5:e6:
                    ba:ee:70:0d:7a:c2:60:e9:47:85:ce:0f:66:cc:af:
                    41:28:b7:95:81:a0:fe:05:e9:a5:32:33:02:5a:5a:
                    e4:b8:77:80:03:6b:4f:27:43:84:34:42:be:d1:a6:
                    e9:b6:17:08:5e:43:7e:00:00:80:61:81:35:29:c2:
                    a8:a8:9b:ec:4a:ac:08:71:9a:84:f8:2a:59:21:a9:
                    a9:17:ec:8c:b2:38:d9:f9:6a:70:16:a8:3d:85:f4:
                    24:1e:ba:6e:9e:8e:d1:03:4a:30:7c:76:ed:c4:58:
                    ca:c9:48:c7:10:b3:0a:47:0f:91:d1:19:bd:d8:4a:
                    8a:c5:65:6d:0e:01:aa:2f:78:7f:eb:45:70:70:53:
                    33:65:a2:15:c4:6d:b3:4d:d2:44:82:3c:ca:66:5d:
                    cd:fc:8c:1f:90:9c:98:8d:95:8a:a5:2e:9e:86:0e:
                    c1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E2:DA:82:D0:81:57:B0:E5:40:A7:3C:7D:4A:F4:1D:52:87:23:01
            X509v3 Authority Key Identifier:
                keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:0f:30:1e:43:55:ad:9b:19:e5:4b:46:a8:4b:45:f5:ec:26:
         fa:d9:4a:cd:c5:94:95:7c:c3:2a:be:d7:1d:3e:da:d1:30:b2:
         61:37:f7:12:b1:f3:9a:7e:9b:5e:33:5b:65:b2:4c:40:20:0c:
         bf:60:c6:90:05:70:8b:f2:87:dc:9f:d7:2f:d1:07:93:92:5d:
         60:15:5f:2c:d3:a9:36:af:3b:74:b5:52:83:7d:b5:be:73:ef:
         2e:99:fd:23:83:e5:9c:09:6c:f3:ef:d6:b9:ad:5c:e7:ad:53:
         d6:75:90:4d:12:72:45:74:bf:8b:de:d3:21:44:3a:d7:c6:2b:
         b8:d8:af:7b:84:cc:ea:c0:55:9d:68:0c:75:1b:d8:c4:8b:1e:
         ec:4a:3b:a9:22:2a:77:12:be:a9:7d:f7:95:e7:e5:19:1f:1f:
         83:1c:44:f9:35:ec:5c:72:0e:64:c9:60:22:d4:38:cc:de:69:
         bf:ad:76:f1:fb:e0:f4:e8:9f:b4:2f:a6:af:16:f8:c3:42:51:
         e2:2d:a6:73:38:b2:ed:ce:3e:85:b4:09:85:06:f0:14:c6:ab:
         ce:df:51:4c:c6:b9:70:82:10:28:23:52:13:28:34:f2:fe:7e:
         85:11:a7:72:2b:2b:17:e2:ce:1a:60:d7:9e:6d:b5:5a:86:73:
         eb:ae:ce:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjI3N0QxMTAvBgNVBAUTKEM4OEQ1NUI3QkZENTQzODhCNjEwMjA2QUE0MTFEMkUx
OTk3NzkwMTcwHhcNMjUxMjIyMjExMzE1WhcNMjUxMjI5MjExMzE1WjAYMRYwFAYD
VQQDDA02OTQ5YjQ2Yi1jNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkx5QDF71deK3Id/tzrtfMB4DKBql98uJTmDonBrYVVihYKlZupQ3OmEcehS3
0z4LaZsyUQu2tcFzWujZ9QLxOIEV2Nd792cZQSp5uK7H1tsuoayLDBkXpea67nAN
esJg6UeFzg9mzK9BKLeVgaD+BemlMjMCWlrkuHeAA2tPJ0OENEK+0abpthcIXkN+
AACAYYE1KcKoqJvsSqwIcZqE+CpZIampF+yMsjjZ+WpwFqg9hfQkHrpuno7RA0ow
fHbtxFjKyUjHELMKRw+R0Rm92EqKxWVtDgGqL3h/60VwcFMzZaIVxG2zTdJEgjzK
Zl3N/IwfkJyYjZWKpS6ehg7BVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPi2oLQ
gVew5UCnPH1K9B1ShyMBMB8GA1UdIwQYMBaAFMiNVbe/1UOIthAgaqQR0uGZd5AX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC8xQjg4RDJBMDc0
RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0aTJFQ0JxcEJIUzRabDNr
QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lJMVZ0N19WUTRpMkVDQnFwQkhTNFpsM2tCYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Mjc3RC8xQjg4RDJBMDc0RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0
aTJFQ0JxcEJIUzRabDNrQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDQDzAeQ1WtmxnlS0aoS0X17Cb62UrNxZSVfMMqvtcdPtrRMLJhN/cS
sfOafpteM1tlskxAIAy/YMaQBXCL8ofcn9cv0QeTkl1gFV8s06k2rzt0tVKDfbW+
c+8umf0jg+WcCWzz79a5rVznrVPWdZBNEnJFdL+L3tMhRDrXxiu42K97hMzqwFWd
aAx1G9jEix7sSjupIip3Er6pffeV5+UZHx+DHET5Nexccg5kyWAi1DjM3mm/rXbx
++D06J+0L6avFvjDQlHiLaZzOLLtzj6FtAmFBvAUxqvO31FMxrlwghAoI1ITKDTy
/n6FEadyKysX4s4aYNeebbVahnPrrs4m
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:57 2025 by rpki-client