This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
File:                     yPWXElLMBM4--LZy7nTid7LM1hU.mft (raw, json)
Hash identifier:          9EWM1l3uDnUv4GyNk6gFVR1Gkqs0pvbFGCeSm7HSUvQ=
Subject key identifier:   04:3B:9D:08:FA:87:CB:84:16:90:73:D4:DA:BE:47:96:C0:7E:10:A3
Authority key identifier: C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15
Certificate issuer:       /CN=A91F72E2/serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
Manifest number:          36
Signing time:             Tue 23 Dec 2025 06:21:31 +0000
Manifest this update:     Tue 23 Dec 2025 06:21:31 +0000
Manifest next update:     Tue 30 Dec 2025 06:21:31 +0000
Files and hashes:         1: yPWXElLMBM4--LZy7nTid7LM1hU.crl (hash: mMioLl/HiDYg/tg4/3ZGb1q1NZmMr3/Te5AwjwG2yZc=)
                          2: 13542BE28C9311F099562747C4F9AE02.roa (hash: 74FroNCdegFOPZiDBlEbhFtWJ9Myu+nQaF/Cyco73vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl
                          rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F72E2, serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615
        Validity
            Not Before: Dec 23 06:21:31 2025 GMT
            Not After : Dec 30 06:21:31 2025 GMT
        Subject: CN=694a34eb-0c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:79:69:cb:0f:bd:7e:0d:d9:97:20:59:0a:
                    98:6a:ea:ce:07:43:d5:4e:02:ee:ff:41:09:a7:8f:
                    ad:ae:c1:5e:b4:6f:90:cc:cc:9b:fe:b9:24:3c:d3:
                    e4:66:21:93:74:79:c2:c4:91:85:4e:9d:11:2e:de:
                    a1:45:df:5a:24:88:24:58:37:59:64:c7:ac:dd:74:
                    9c:3d:12:db:1b:d0:6e:a3:c8:5d:da:5a:c4:ec:c2:
                    c8:f1:40:89:7d:2c:d3:b4:3a:75:e7:72:eb:bc:8b:
                    c1:9d:eb:c1:66:91:63:c4:f8:d3:0e:ed:a3:b4:7e:
                    8a:12:db:b8:24:fa:75:05:69:fe:ca:6f:77:ec:6c:
                    d1:3a:94:f0:aa:12:4b:a8:1a:1a:0e:a9:cd:43:b6:
                    ea:be:fb:a6:e3:c9:e6:44:1e:2c:a1:65:e5:b6:ee:
                    bb:5f:35:a6:85:94:35:60:48:a7:3c:0b:ed:27:40:
                    60:23:83:29:b8:3d:ee:3f:5d:34:d1:85:e7:9c:61:
                    34:88:10:5f:10:17:9e:9a:bf:ce:d0:8a:89:02:eb:
                    13:57:10:49:09:f1:9f:14:4f:f7:f3:0d:1f:79:1e:
                    16:e3:51:e2:fa:be:35:6a:c3:74:14:15:98:77:6b:
                    fd:1d:11:78:d7:e1:fb:58:5a:3a:cf:05:49:de:8f:
                    5e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3B:9D:08:FA:87:CB:84:16:90:73:D4:DA:BE:47:96:C0:7E:10:A3
            X509v3 Authority Key Identifier:
                keyid:C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7b:52:13:d2:eb:1c:82:d1:a5:db:3f:a9:7f:20:17:09:a3:
         97:4c:82:fd:d4:5b:3c:d1:8c:9c:62:d7:a1:6e:15:73:58:4d:
         98:d2:e7:ec:1e:e6:8c:d8:75:5b:b1:e5:42:a1:03:6b:6a:7d:
         80:33:6e:59:6f:f7:50:8d:68:47:b0:0e:05:d5:69:16:c0:65:
         5e:46:db:5f:fb:b9:81:6d:72:9b:0e:6b:cc:40:e0:91:9b:ed:
         d5:83:5f:38:3d:2f:fe:a9:35:00:f3:34:37:c2:6c:68:fd:10:
         b5:fd:0a:1c:a6:98:39:5e:3e:d8:35:8c:a0:eb:0e:97:af:dc:
         20:f4:86:55:9f:3c:74:3b:1b:6a:f2:de:6d:6f:3d:12:c7:56:
         54:7e:b1:fa:7a:81:a9:b9:8c:9c:f5:6a:a7:05:c9:56:2e:b0:
         a9:12:0c:d0:d6:c5:c8:aa:0a:23:1c:11:4e:dc:2e:1c:b5:20:
         98:f7:39:fa:af:2d:25:05:5e:7e:17:2a:0b:16:75:0c:32:23:
         3d:e4:07:35:5f:2c:95:52:9e:fb:a1:19:e1:27:2d:c4:6a:4b:
         26:06:6a:47:f3:eb:98:d5:20:42:64:4c:ae:58:b5:cf:01:a0:
         85:6e:f9:68:74:37:fd:92:2d:58:1a:64:c0:cd:39:d9:c9:8d:
         30:2c:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:19 2025 by rpki-client