This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
File:                     y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json)
Hash identifier:          4jLlEYvoBrXrN++7BuwE6C6rGp5diO2M3eBbqcXuTac=
Subject key identifier:   39:2B:03:C5:BA:57:EE:96:F5:C0:0C:4E:9F:D3:7F:A9:DB:9B:FB:60
Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47
Certificate issuer:       /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
Certificate serial:       0458
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
Manifest number:          0451
Signing time:             Sat 06 Dec 2025 22:53:04 +0000
Manifest this update:     Sat 06 Dec 2025 22:53:04 +0000
Manifest next update:     Sat 13 Dec 2025 22:53:04 +0000
Files and hashes:         1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: hDXDD2SPTiBCmbk1q6VBrCwKSY92ZnPRgRIHZ4atLPA=)
                          2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: y07yi3J6Aa7eEJGzw1k5V3IUk9jp0TMK1pgfx7x0M/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl
                          rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112 (0x458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
        Validity
            Not Before: Dec  6 22:53:04 2025 GMT
            Not After : Dec 13 22:53:04 2025 GMT
        Subject: CN=6934b3d0-8029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:cc:eb:1f:11:d5:8d:67:fe:99:ac:e8:67:
                    19:bc:7e:88:6e:22:82:ec:d8:21:2f:62:c0:bc:cb:
                    ae:ea:68:b2:19:5f:36:e2:97:f2:d5:1c:3d:4f:03:
                    b8:b9:63:33:cc:bf:3f:95:38:4f:67:25:c7:1f:2d:
                    a1:8d:71:ef:61:8e:97:b9:2e:8b:c7:33:ad:1e:42:
                    8d:0a:94:5c:8b:8f:d5:f4:68:68:cb:75:f3:8b:b1:
                    b3:98:af:40:f4:26:2e:2c:c7:b9:e3:b0:93:88:5e:
                    85:24:0f:a1:6c:ab:54:60:f5:a6:3a:62:d2:57:44:
                    88:de:42:39:32:28:8f:f2:c2:81:08:11:34:17:e9:
                    6f:03:a9:91:c2:39:cd:80:e3:bd:ba:a1:b7:fb:04:
                    62:bb:5d:fc:0a:24:fc:4a:50:4e:34:89:83:b9:f2:
                    45:50:40:4d:6d:e3:92:87:d5:80:02:18:4d:b6:45:
                    71:26:c4:cb:ff:92:92:eb:4a:23:59:0c:78:eb:b5:
                    b5:1f:bf:c5:4e:a0:93:f1:51:5e:4f:d0:da:96:2d:
                    6c:28:04:d8:e6:ea:8d:91:32:74:4c:2e:94:e3:bf:
                    41:49:f4:7e:86:3f:56:49:5d:e9:3c:62:1d:52:fc:
                    c4:e8:a5:3d:87:2d:b2:d8:32:2d:db:d3:c2:19:5a:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2B:03:C5:BA:57:EE:96:F5:C0:0C:4E:9F:D3:7F:A9:DB:9B:FB:60
            X509v3 Authority Key Identifier:
                keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:bc:62:ce:9a:32:d4:e3:47:b3:cb:67:a8:6a:db:cd:ef:03:
         a1:08:15:63:4a:c0:00:ff:1c:1a:8f:94:d8:38:4d:fe:29:c8:
         a1:16:f3:b3:f8:5c:87:9a:ba:e3:7e:f7:4c:c4:e9:eb:fd:23:
         e5:42:47:c7:8b:75:02:20:3c:e7:c4:e4:2b:24:63:b7:54:28:
         65:88:43:1a:0b:d8:98:4b:bd:88:8c:08:ae:e2:90:6b:da:1a:
         fb:0c:95:37:d2:1a:d0:dc:af:1e:b9:78:24:5d:36:0c:8d:6a:
         c5:a8:a5:00:5f:c0:9f:12:2e:48:74:9d:76:e8:6f:40:00:eb:
         94:b9:30:50:88:1f:bd:34:51:d2:bc:bc:ae:28:95:ed:af:ec:
         75:06:4f:6b:28:66:b4:2a:4e:28:0f:9a:66:b7:f7:09:55:03:
         40:51:39:98:86:19:9f:a1:1d:dc:54:29:6c:ad:9c:b0:a6:c0:
         57:d9:47:20:1b:c0:f9:b1:ec:ec:ad:c9:2a:1a:6d:11:ad:7b:
         fe:7a:3e:45:a4:8b:c3:e2:22:31:36:04:ab:20:4c:2d:28:3c:
         5e:d9:cf:ec:3d:78:51:a9:f7:86:83:83:b1:c9:da:c0:24:12:
         64:5b:53:d1:b1:cc:49:db:be:fc:11:ba:c0:62:cc:94:c0:ff:
         50:c1:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:59:18 2025 by rpki-client