This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
File:                     zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json)
Hash identifier:          fN1SA0+SOkS4SuyvhOEgVIGIC+T3CPU0FIaaK5Y+DM8=
Subject key identifier:   EA:B3:48:5A:E7:9D:7E:42:E7:A9:27:66:9C:B5:19:65:DB:A7:85:00
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Certificate issuer:       /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
Manifest number:          017D
Signing time:             Fri 05 Dec 2025 01:58:30 +0000
Manifest this update:     Fri 05 Dec 2025 01:58:30 +0000
Manifest next update:     Fri 12 Dec 2025 01:58:30 +0000
Files and hashes:         1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: lD+G2wWoRe0Doed5Sj+XGSkStiMiXr4O/ASzNAbhcLM=)
                          2: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: 05BxmRyvKNcOlG0da2lnXsYOxEsMKdSx2ZRkaVaMWv4=)
                          3: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: cOcYEcKHuf/JYD0AEBC5IpcPkABHQnNi85MejRVjkMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
                          rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
        Validity
            Not Before: Dec  5 01:58:30 2025 GMT
            Not After : Dec 12 01:58:30 2025 GMT
        Subject: CN=69323c46-5a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:cf:7f:4f:c4:35:3d:f4:14:00:5b:c3:de:
                    16:fa:9e:b3:d7:cb:b9:a8:22:6f:0b:d8:fe:dc:57:
                    1c:e3:76:5a:1e:59:c8:53:ae:65:cf:f4:6a:e2:50:
                    67:c1:75:85:6f:b8:de:f6:43:0d:3b:95:2c:9f:d2:
                    d9:34:52:39:01:9a:48:1c:73:5d:83:02:3d:e3:cb:
                    eb:ed:f0:32:d6:eb:a8:ab:23:dd:d4:44:66:d7:08:
                    02:fd:53:b3:12:4c:4a:b2:c5:ba:11:6e:14:68:f5:
                    c3:bc:73:51:69:3d:d3:b5:a4:8a:df:fc:f6:0e:6d:
                    dc:21:b8:61:0a:7d:1d:46:da:b4:f7:09:a4:ab:1c:
                    e3:4d:7d:cf:f9:22:c5:d4:1a:b7:05:0f:2f:12:e3:
                    3d:13:3a:c8:91:1f:96:5f:6f:a0:74:8e:0c:62:4d:
                    5c:be:ca:ec:f3:d7:35:22:08:d9:9a:87:2d:1b:33:
                    ec:28:36:de:f7:9d:4c:19:45:cd:82:06:71:ff:45:
                    cb:53:9f:7b:a6:3e:fe:71:d6:ff:72:43:eb:6f:8b:
                    e7:e3:e8:25:d3:4a:71:96:6d:21:71:3c:88:f3:71:
                    b6:ef:96:f6:bb:4c:44:f6:3f:59:9e:8c:62:5b:83:
                    a7:9b:3f:fc:49:b2:10:b7:2d:21:11:0a:72:a6:9e:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B3:48:5A:E7:9D:7E:42:E7:A9:27:66:9C:B5:19:65:DB:A7:85:00
            X509v3 Authority Key Identifier:
                keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2d:72:5c:b7:dc:6c:24:05:2f:56:16:67:ba:43:99:50:64:
         00:0a:59:71:b0:f5:69:68:14:95:2d:7b:e8:f3:23:54:f2:aa:
         75:df:a5:a6:e5:5b:72:b1:d7:14:7c:56:92:f2:ba:0a:97:64:
         8d:28:ae:f0:10:27:7e:8c:e9:0d:88:47:e7:4f:51:6a:36:db:
         97:c2:c5:c6:74:84:25:f8:d4:7c:b9:ce:50:d6:a7:b7:b1:09:
         a8:07:e6:c4:3d:c3:7a:67:e3:a9:3f:d5:f8:37:db:65:25:8c:
         c8:51:6b:60:ec:17:01:f6:71:93:ee:43:99:53:7d:44:c9:fc:
         d0:8b:e9:68:4d:92:43:f7:2a:7d:ab:1a:0f:a2:14:1d:71:65:
         04:0d:cb:bb:1f:c7:7e:49:d9:e3:f4:42:3d:66:46:6f:15:55:
         a2:d9:80:86:2c:e3:0d:52:40:91:c7:7c:d9:a6:a5:ae:ce:bf:
         f5:96:c8:c4:77:fb:d9:36:e7:a7:7b:e5:e8:e5:69:2a:31:99:
         6a:ee:0e:58:7c:87:4a:fb:80:3f:8a:51:09:ef:03:e8:43:98:
         3e:86:b4:d1:28:16:95:48:5f:00:20:43:b8:5e:45:9d:b5:de:
         5e:26:4e:1b:bd:7a:5a:e9:d4:35:05:80:8d:1b:51:61:50:d9:
         67:15:f3:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQyNjExMTAvBgNVBAUTKENEODlBODI2OEVCMTFFMzMwRkJENDRDMDQ4NzIwRDEz
MjVDNUE2MEIwHhcNMjUxMjA1MDE1ODMwWhcNMjUxMjEyMDE1ODMwWjAYMRYwFAYD
VQQDEw02OTMyM2M0Ni01YTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoPPf0/ENT30FABbw94W+p6z18u5qCJvC9j+3Fcc43ZaHlnIU65lz/Rq4lBn
wXWFb7je9kMNO5Usn9LZNFI5AZpIHHNdgwI948vr7fAy1uuoqyPd1ERm1wgC/VOz
EkxKssW6EW4UaPXDvHNRaT3TtaSK3/z2Dm3cIbhhCn0dRtq09wmkqxzjTX3P+SLF
1Bq3BQ8vEuM9EzrIkR+WX2+gdI4MYk1cvsrs89c1IgjZmoctGzPsKDbe951MGUXN
ggZx/0XLU597pj7+cdb/ckPrb4vn4+gl00pxlm0hcTyI83G275b2u0xE9j9Znoxi
W4Onmz/8SbIQty0hEQpypp4ciQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqzSFrn
nX5C56knZpy1GWXbp4UAMB8GA1UdIwQYMBaAFM2JqCaOsR4zD71EwEhyDRMlxaYL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2MS9EMDY1QkM0Qzkz
NDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhqTVB2VVRBU0hJTkV5WEZw
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZbW9KbzZ4SGpNUHZVVEFTSElORXlYRnBncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDI2MS9EMDY1QkM0QzkzNDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhq
TVB2VVRBU0hJTkV5WEZwZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBoLXJct9xsJAUvVhZnukOZUGQACllxsPVpaBSVLXvo8yNU8qp136Wm
5VtysdcUfFaS8roKl2SNKK7wECd+jOkNiEfnT1FqNtuXwsXGdIQl+NR8uc5Q1qe3
sQmoB+bEPcN6Z+OpP9X4N9tlJYzIUWtg7BcB9nGT7kOZU31EyfzQi+loTZJD9yp9
qxoPohQdcWUEDcu7H8d+Sdnj9EI9ZkZvFVWi2YCGLOMNUkCRx3zZpqWuzr/1lsjE
d/vZNuene+Xo5WkqMZlq7g5YfIdK+4A/ilEJ7wPoQ5g+hrTRKBaVSF8AIEO4XkWd
td5eJk4bvXpa6dQ1BYCNG1FhUNlnFfMq
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:31:54 2025 by rpki-client