This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
File:                     YoQgfQ0noui_TS6xT7EpytT2zD8.mft (raw, json)
Hash identifier:          3277eQhQHNoA+Hvsiw+XAo4XGGxu9cFLFOy4297G2Yc=
Subject key identifier:   64:F7:ED:6A:4A:55:7D:C0:71:B4:1B:E4:C8:C5:94:DF:59:79:45:74
Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
Certificate issuer:       /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Certificate serial:       0F0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
Manifest number:          0EF0
Signing time:             Sat 06 Dec 2025 17:05:02 +0000
Manifest this update:     Sat 06 Dec 2025 17:05:02 +0000
Manifest next update:     Sat 13 Dec 2025 17:05:02 +0000
Files and hashes:         1: YoQgfQ0noui_TS6xT7EpytT2zD8.crl (hash: s6w4fwUZCqrA+AvpgnNlm+yXcM0XaeaYEmM2GUOFUjs=)
                          2: 58105BCA5ACB11EA84F2392EC4F9AE02.roa (hash: VOr56XdXHCfTJb7vCteXD3c/7SeyxHXCJjM/HYRl50c=)
                          3: 50E999AA911911E9BEF5F94EC4F9AE02.roa (hash: oCjpYZp3Jq8v9CYytKf/Jy8pzYlTc/kezyUqPc+tK1E=)
                          4: 2012E112712611EB8BCB2B84C4F9AE02.roa (hash: yrTYzTGLD7DdI6Sq4pABNT1xu81eDL8OtDlxoy9a6BI=)
                          5: 504E3B04911911E9BEF5F94EC4F9AE02.roa (hash: XFUDQ5YpEwqHQdCoCuZZOQlERoKAxzu3Gpexl3i5/54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
                          rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3851 (0xf0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914275E, serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
        Validity
            Not Before: Dec  6 17:05:02 2025 GMT
            Not After : Dec 13 17:05:02 2025 GMT
        Subject: CN=6934623e-ce62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:73:df:bf:ce:33:97:a5:27:d0:6d:7a:b0:
                    0b:16:dd:9c:21:e6:ae:49:4a:50:7b:80:76:11:ef:
                    16:a2:ec:63:f8:e3:1c:03:8d:2e:80:2d:b8:97:a1:
                    1c:e4:bc:97:1f:81:ec:0d:20:f1:94:81:98:cb:a9:
                    27:53:e6:3d:e9:ae:37:2f:7f:fb:87:b3:6f:c0:ac:
                    79:86:6d:33:ad:f8:4a:0a:19:9c:d1:0c:f4:aa:7d:
                    f7:2c:22:b7:fa:ad:e3:da:49:f2:f2:07:27:55:38:
                    7a:23:0a:24:74:b7:0e:6d:13:66:55:c1:40:bf:28:
                    3a:40:39:77:d6:78:9e:8a:45:55:0e:2e:b0:f9:9c:
                    28:2e:8e:a8:a5:df:f3:cc:ec:5d:b3:77:ce:99:b0:
                    1d:a1:fa:0a:a3:ed:28:8f:fa:5a:bd:30:2a:40:09:
                    1f:30:e9:3d:1c:99:df:05:44:a1:5e:ea:4d:29:d0:
                    00:eb:a0:82:a6:a6:1b:07:5d:51:d5:5a:a7:4e:2b:
                    a1:ba:26:1b:90:84:a1:cc:d0:6f:10:13:6a:46:d3:
                    c6:0e:ab:ed:7d:58:a6:b4:de:ba:c0:69:2f:42:02:
                    41:c5:bb:5b:c4:b3:67:b0:45:fa:ae:45:ff:fe:0e:
                    f1:f7:ea:e5:eb:f7:b5:1e:40:83:28:b1:eb:02:0c:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F7:ED:6A:4A:55:7D:C0:71:B4:1B:E4:C8:C5:94:DF:59:79:45:74
            X509v3 Authority Key Identifier:
                keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0d:b1:9c:7a:24:29:ec:c8:4d:b9:86:bc:4f:95:8e:15:81:
         76:bc:56:35:3b:5c:e4:ba:5c:b5:71:c0:ef:58:84:e6:b1:1c:
         b1:3e:3a:b1:5f:d9:f2:e1:0b:a5:6a:b2:e1:fe:f4:9b:aa:53:
         8c:58:30:3c:2f:46:a3:a1:52:67:dd:92:fa:c2:5e:e5:73:f1:
         c6:62:a2:3e:7d:b8:e4:52:26:6d:3c:43:0a:68:35:28:99:9a:
         4c:88:51:e5:5f:b5:8a:92:5b:e1:c9:73:e8:28:8d:d4:14:ed:
         d2:02:d7:54:43:81:08:fd:9d:16:ac:c9:1a:ae:bd:80:1f:37:
         42:6e:98:a4:6d:a2:4a:80:3e:e0:b3:b2:17:e9:e1:0d:d5:e6:
         84:e3:37:28:84:f3:6f:c5:e2:f8:75:36:0e:fb:a4:14:e8:54:
         d3:89:7b:b6:39:a2:0e:cc:59:28:49:bc:ef:35:5c:b0:46:74:
         f7:ab:20:d0:3a:62:51:80:e1:cb:62:dd:18:f8:8e:bd:fe:23:
         9b:c0:bf:50:f5:fb:99:f4:32:08:11:41:64:82:54:04:ea:2d:
         46:fd:db:3e:d1:f0:c7:fe:84:fd:2c:1e:4e:13:bf:31:d7:7e:
         23:35:15:d7:71:98:e3:5e:c4:7f:b7:48:4d:b8:2d:ca:6c:e6:
         73:cb:5f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:52 2025 by rpki-client