This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
File:                     Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json)
Hash identifier:          7yqhjpdc8OItV+/ldTMHcby1WoF0JInk1Y4W+Dbz8qI=
Subject key identifier:   6E:53:BD:8F:C3:EE:9D:BD:A4:49:60:6B:B9:D2:88:0C:35:BB:AE:77
Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8
Certificate issuer:       /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
Manifest number:          0185
Signing time:             Fri 05 Dec 2025 01:51:50 +0000
Manifest this update:     Fri 05 Dec 2025 01:51:49 +0000
Manifest next update:     Fri 12 Dec 2025 01:51:49 +0000
Files and hashes:         1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: AiFIQAOxElpagPxUZInha5gjQ8aCYIHfypQxagG+lpg=)
                          2: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: 7uI5yVeYioLWbZ9dXVVN3HJtivNs33ypPPCY5KYoiS0=)
                          3: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: kE++w6dMe6vv6iJt/yZB/08Yge3JgxZFXfCsI1Cs/54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl
                          rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8
        Validity
            Not Before: Dec  5 01:51:49 2025 GMT
            Not After : Dec 12 01:51:49 2025 GMT
        Subject: CN=69323ab6-af32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:57:db:5f:a4:44:db:3b:31:d0:bd:b2:da:
                    40:82:14:81:09:d7:c2:10:66:52:c8:a4:73:3b:33:
                    bd:c4:f7:22:0a:58:54:45:1d:72:76:bc:b4:f5:10:
                    01:7f:46:ee:e0:a9:32:51:c6:5e:00:f8:c8:bb:b2:
                    b8:5e:b2:1f:58:f3:7c:34:25:50:b1:b2:aa:0b:f4:
                    8d:54:ee:48:a4:b4:00:8e:91:c9:19:0e:fe:b0:c5:
                    55:ea:70:d8:36:60:95:91:d8:a7:89:86:94:a2:a4:
                    0c:8f:71:d0:8f:4d:0e:1b:d3:5a:1f:64:80:48:b1:
                    78:6e:ca:a2:76:be:95:ec:14:ab:82:5d:1e:f4:e2:
                    09:3e:f2:e0:b8:2e:2e:1b:47:cb:2b:7a:70:44:c8:
                    0b:e9:6d:ee:20:b9:83:ad:cb:74:03:01:71:e0:58:
                    5a:6a:cc:10:0d:a4:a1:54:b6:70:0e:8c:11:5e:06:
                    cd:2e:5c:fc:69:1a:9c:7a:58:e3:58:e8:97:45:c0:
                    b7:0f:b9:5f:1d:f4:97:ff:90:7f:a8:d6:97:e8:18:
                    05:2f:1f:f7:ac:8d:75:e4:95:80:57:43:3a:95:49:
                    55:28:b7:51:1d:f7:08:73:32:73:ab:f7:da:47:2b:
                    72:6a:2b:ce:8c:96:1a:71:35:67:74:c9:e1:17:45:
                    81:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:53:BD:8F:C3:EE:9D:BD:A4:49:60:6B:B9:D2:88:0C:35:BB:AE:77
            X509v3 Authority Key Identifier:
                keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:dd:59:82:1a:53:85:44:60:34:67:30:f8:98:fd:ff:a7:16:
         3f:c1:f5:6d:5a:fb:3a:cd:9e:6b:77:d5:35:45:5f:0e:9d:d7:
         4d:2b:9e:87:78:73:f2:a2:b4:00:75:86:25:e1:58:36:71:36:
         35:27:6d:c1:9e:3f:7d:46:4b:a4:e7:98:9f:62:ac:fe:e0:9b:
         f5:8d:f1:5d:27:a8:79:56:33:d3:59:eb:38:c1:8e:88:9a:d9:
         ee:9b:ff:ee:74:24:d7:38:e6:eb:3f:75:a6:c9:51:33:cd:7d:
         86:e2:18:a5:e0:05:d3:aa:60:9e:70:6c:29:33:f9:ab:d4:75:
         7f:8f:9c:21:c7:02:15:80:3d:23:50:cf:2b:6c:c4:a8:2a:90:
         a9:84:c1:ae:1c:3e:55:11:2a:fe:77:86:70:9b:50:cd:c6:d8:
         55:8f:19:65:fe:3c:58:75:a0:1f:78:ae:14:40:34:01:39:d4:
         52:df:0a:21:32:5e:b9:cb:c4:56:02:32:57:b4:6c:a9:a9:65:
         c1:9e:83:63:2a:ba:20:55:1d:40:92:a1:45:94:68:0e:16:1d:
         8b:21:23:cd:09:4c:f7:32:93:64:ca:b8:34:08:37:42:d8:8e:
         60:7e:32:45:ec:2a:44:a8:7f:38:45:20:28:b8:08:4a:de:7f:
         5f:bc:9c:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF
QzBBODc2RjgwHhcNMjUxMjA1MDE1MTQ5WhcNMjUxMjEyMDE1MTQ5WjAYMRYwFAYD
VQQDEw02OTMyM2FiNi1hZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwaVX21+kRNs7MdC9stpAghSBCdfCEGZSyKRzOzO9xPciClhURR1ydry09RAB
f0bu4KkyUcZeAPjIu7K4XrIfWPN8NCVQsbKqC/SNVO5IpLQAjpHJGQ7+sMVV6nDY
NmCVkdiniYaUoqQMj3HQj00OG9NaH2SASLF4bsqidr6V7BSrgl0e9OIJPvLguC4u
G0fLK3pwRMgL6W3uILmDrct0AwFx4FhaaswQDaShVLZwDowRXgbNLlz8aRqceljj
WOiXRcC3D7lfHfSX/5B/qNaX6BgFLx/3rI115JWAV0M6lUlVKLdRHfcIczJzq/fa
RytyaivOjJYacTVndMnhF0WBBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5TvY/D
7p29pElga7nSiAw1u653MB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz
N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w
TmFtLUhNdXZXXzdzQ29kdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDF3VmCGlOFRGA0ZzD4mP3/pxY/wfVtWvs6zZ5rd9U1RV8OnddNK56H
eHPyorQAdYYl4Vg2cTY1J23Bnj99Rkuk55ifYqz+4Jv1jfFdJ6h5VjPTWes4wY6I
mtnum//udCTXOObrP3WmyVEzzX2G4hil4AXTqmCecGwpM/mr1HV/j5whxwIVgD0j
UM8rbMSoKpCphMGuHD5VESr+d4Zwm1DNxthVjxll/jxYdaAfeK4UQDQBOdRS3woh
Ml65y8RWAjJXtGypqWXBnoNjKrogVR1AkqFFlGgOFh2LISPNCUz3MpNkyrg0CDdC
2I5gfjJF7CpEqH84RSAouAhK3n9fvJy0
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:10:56 2025 by rpki-client