This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
File:                     yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json)
Hash identifier:          BI80wZUPwaWs1okIacxt4NVC71CfHeuj+i7xaBURamo=
Subject key identifier:   D8:29:21:ED:55:18:5B:B0:FF:48:93:8C:55:23:AA:93:AF:41:17:D0
Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
Certificate issuer:       /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
Certificate serial:       14D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
Manifest number:          14D6
Signing time:             Sat 06 Dec 2025 16:24:49 +0000
Manifest this update:     Sat 06 Dec 2025 16:24:48 +0000
Manifest next update:     Sat 13 Dec 2025 16:24:48 +0000
Files and hashes:         1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: pzEb8p6oKKtk3zuHcCDCKfjQ/vvPESWNkGn4lpHf4UQ=)
                          2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: 9CCdXAmyhsUIKZ6n8Wk1KKSvrNfp24roJJogpEjyBYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl
                          rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5336 (0x14d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
        Validity
            Not Before: Dec  6 16:24:48 2025 GMT
            Not After : Dec 13 16:24:48 2025 GMT
        Subject: CN=693458d1-07dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:b3:4d:d6:0c:9e:6f:56:93:78:ca:a5:1b:
                    34:9d:81:2a:ab:48:04:22:a1:43:44:c1:00:dc:0d:
                    47:39:4a:fb:f8:82:96:cb:f2:06:1b:7c:4d:fc:87:
                    76:a1:1d:d3:dd:8a:d1:25:00:b1:d9:a9:62:c1:8a:
                    eb:4a:52:b6:c9:20:b5:6f:53:2e:6d:ab:f6:38:8e:
                    8f:4e:78:26:e7:a3:4b:3d:18:e9:12:00:f6:a7:f6:
                    3e:95:d6:44:fc:ec:ae:fe:43:3f:30:cd:b8:d8:56:
                    9e:8d:f8:4e:7e:03:0c:a2:80:31:ea:ae:ad:6b:d2:
                    7d:d3:7f:5a:3a:bb:34:27:b5:2b:6e:e3:4d:00:7a:
                    ad:cd:f8:78:57:f9:9b:4f:f9:7c:a0:11:6b:81:bb:
                    3b:80:f5:ea:3d:10:92:e5:44:4b:97:b5:39:10:79:
                    d0:b5:51:de:14:16:e0:22:99:38:fd:66:d2:75:66:
                    39:a3:a0:36:15:b3:87:1b:9b:e4:67:e2:26:ea:b8:
                    80:36:90:8e:1b:0f:77:b1:c7:78:61:a5:83:56:3c:
                    cf:a1:88:41:1d:17:e4:55:18:ef:5a:0b:70:b8:86:
                    71:27:00:51:a3:83:ad:d0:e2:e6:92:ea:3e:6c:13:
                    8b:8c:ed:f1:39:8a:ad:25:5c:00:e5:61:cf:98:26:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:29:21:ED:55:18:5B:B0:FF:48:93:8C:55:23:AA:93:AF:41:17:D0
            X509v3 Authority Key Identifier:
                keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0b:5c:17:da:3b:9e:70:35:d1:03:da:68:37:ca:33:6f:92:
         92:d6:72:12:68:45:c5:58:88:f1:64:82:46:0c:be:ce:66:bd:
         34:53:cb:46:f2:b9:bd:ad:4b:00:3b:9b:88:bf:23:e2:99:b0:
         6a:4f:80:5d:39:77:25:fb:9f:e1:ea:c2:ba:6d:af:c1:e0:94:
         9c:d9:69:49:bd:47:c4:e2:2b:dc:52:34:a3:f7:0c:11:cd:bc:
         a6:e9:68:ad:20:f4:3d:b1:a6:16:00:05:91:02:b3:82:ab:62:
         69:1c:6d:37:a2:34:16:0e:00:5d:0c:cb:4d:95:61:1e:6a:6b:
         7b:4b:47:ae:ee:6f:a2:93:5f:f9:20:96:90:ce:72:83:d3:fd:
         29:5b:15:2e:b9:72:2e:d2:3b:21:83:5c:f6:6e:f8:66:22:95:
         8a:7e:87:11:52:d5:f8:a2:23:4e:f4:b3:08:9e:9b:e9:0a:9b:
         45:58:0c:b9:4d:5e:ee:fc:d0:4a:31:3b:df:3f:74:13:ab:1a:
         d9:4d:26:e9:cd:39:db:a2:b2:ea:9f:67:61:bb:7c:bc:65:5f:
         64:b0:4e:bd:82:85:65:7e:b3:43:62:31:f3:59:ef:1c:83:52:
         b9:02:af:81:a6:5f:4e:f8:70:c0:cd:30:2a:11:37:28:f9:fa:
         34:41:d7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:39 2025 by rpki-client