This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft
File:                     MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft (raw, json)
Hash identifier:          B2c2H1fSpImpmcHOUuEMxhS+ZWvvqwfr/Mo1eCZR3Ps=
Subject key identifier:   0C:D9:46:7D:5B:87:AD:A5:01:37:82:15:93:10:C1:0C:18:EB:7E:A9
Authority key identifier: 31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88
Certificate issuer:       /CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft
Manifest number:          014D
Signing time:             Tue 23 Dec 2025 03:15:18 +0000
Manifest this update:     Tue 23 Dec 2025 03:15:18 +0000
Manifest next update:     Tue 30 Dec 2025 03:15:18 +0000
Files and hashes:         1: MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl (hash: urABshpqiOeMdUNNoqV6doc61nlqvwXAu77PK/4Z+go=)
                          2: 4FCB21E6E05211EE8AEC805CC4F9AE02.roa (hash: wmkDssXbtEkuG+Z3xdoaFG0tMpuTld+MRfVztfCufos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl
                          rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F378B, serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388
        Validity
            Not Before: Dec 23 03:15:18 2025 GMT
            Not After : Dec 30 03:15:18 2025 GMT
        Subject: CN=694a0946-e72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c9:78:f2:3f:ac:1b:67:8a:09:f4:06:2b:b6:
                    38:c7:e6:f3:87:1a:eb:89:4e:af:98:51:17:00:93:
                    39:de:20:5a:16:5f:03:b9:fb:31:0a:02:38:c8:69:
                    ba:3d:10:49:7e:a0:37:74:90:4d:5c:91:a9:db:1e:
                    b0:cc:a5:50:fd:dc:9f:c9:57:60:02:7e:30:4b:7b:
                    70:43:10:d1:5d:8d:ee:3d:9e:5b:4c:10:eb:81:5d:
                    2a:ac:a1:8b:43:03:e9:5c:0f:c1:66:57:89:0d:bb:
                    33:61:c6:8b:46:a1:13:77:bf:1a:b8:26:a3:f2:7e:
                    29:be:66:2e:56:1e:aa:67:9a:f4:0a:4a:4c:d8:72:
                    59:ef:ba:0c:06:59:0c:cd:8f:d3:d0:3c:45:ca:fe:
                    5e:b6:96:80:1b:a6:a4:2c:aa:fc:d5:d9:29:24:44:
                    48:ae:b5:90:d3:1a:42:9f:77:80:b7:90:d0:bc:e9:
                    1e:96:61:17:4b:55:e0:b4:47:fa:de:f9:6f:4f:7e:
                    91:ae:21:0b:52:e8:eb:88:5a:47:da:e4:65:df:fe:
                    49:ea:16:f6:e4:45:c7:2d:db:36:13:23:0d:a5:75:
                    c2:43:63:ad:a1:8a:a1:28:7a:91:27:22:98:9c:6f:
                    2d:39:1f:6a:15:d4:48:69:55:3c:bd:b1:86:5a:0b:
                    b6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D9:46:7D:5B:87:AD:A5:01:37:82:15:93:10:C1:0C:18:EB:7E:A9
            X509v3 Authority Key Identifier:
                keyid:31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:68:ce:d5:61:48:c4:4f:d3:5e:65:47:5a:93:e2:dd:43:16:
         69:7e:e6:4a:c7:37:98:94:8b:09:aa:8b:5a:7d:b2:df:5a:46:
         c1:e0:32:67:a6:37:b3:00:eb:f4:16:6a:9e:b4:b3:a6:c5:b0:
         78:59:25:64:8d:fa:32:8e:ee:a0:5e:08:a7:a7:c7:24:b8:e5:
         ed:86:06:87:16:bb:ef:60:37:14:9c:ae:9e:71:62:2e:e9:b9:
         89:8c:5c:d0:20:a9:4c:4e:7a:b5:1c:5f:02:9c:0f:93:64:9a:
         32:e3:73:8a:8f:6d:b4:a9:d5:77:4d:ea:bb:f1:21:14:1a:db:
         4f:76:fe:81:02:bb:2e:54:a3:c0:af:70:f2:50:d7:71:4b:ae:
         6e:26:42:15:7f:fb:d6:a6:ad:06:68:52:df:ca:a0:39:98:73:
         88:a0:26:65:6e:4e:12:b0:75:1c:95:f0:34:75:80:78:dd:dc:
         a4:28:d4:c1:76:47:4a:39:78:ef:77:d8:07:13:61:8e:d6:ee:
         b7:14:06:e0:29:6e:74:13:7f:62:ad:75:bc:32:61:82:0f:47:
         a7:94:bb:31:e5:7b:eb:4a:e2:c9:ff:a0:29:bd:24:25:2f:2f:
         49:2a:bc:db:6e:fd:81:48:41:db:06:1a:09:ca:82:c5:c2:8b:
         f8:0f:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:19 2025 by rpki-client