This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
File:                     YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft (raw, json)
Hash identifier:          TRWuKolNB72nSWOCr+ZNH1uQykL1gpV5Yy90b0SYtn4=
Subject key identifier:   1C:80:C5:2A:87:49:A3:37:54:6F:5F:22:1B:90:50:3A:89:6C:48:FF
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Certificate issuer:       /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
Manifest number:          04D6
Signing time:             Thu 04 Dec 2025 23:03:30 +0000
Manifest this update:     Thu 04 Dec 2025 23:03:30 +0000
Manifest next update:     Thu 11 Dec 2025 23:03:30 +0000
Files and hashes:         1: YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl (hash: sDXkMZFSMLSSwb3nqqM551c1O6/8wn0SslDWfBEZXq4=)
                          2: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (hash: vft+eU4CpaMMVegJX2IoSc61ijnWeC2pmFFJGifleEc=)
                          3: B39CC5D0999C11F0B916112DC4F9AE02.roa (hash: 6q41hoRYSlGeQU/2jAswtSG8NBRB1otmd5Vb7tbOxSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
        Validity
            Not Before: Dec  4 23:03:30 2025 GMT
            Not After : Dec 11 23:03:30 2025 GMT
        Subject: CN=69321342-1840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:37:fe:21:4f:89:b6:50:99:b9:4e:ff:69:bd:
                    39:f6:db:6c:1c:42:0a:70:29:54:f9:24:37:24:29:
                    d2:87:a0:c2:9b:f3:f5:5a:c6:2b:a9:9c:c9:23:34:
                    c2:a4:b4:a6:c5:14:7f:9c:7b:97:c3:6a:56:4c:e2:
                    f2:7e:96:cf:7c:b1:e6:d1:e4:a7:d9:3e:19:e3:1e:
                    94:f8:81:c5:84:69:21:d1:43:3b:64:70:3c:c8:8a:
                    e7:2c:1c:0c:18:0a:45:73:5c:35:f9:f6:f9:af:42:
                    22:e6:1a:8f:86:93:b2:5b:57:17:a7:ae:19:1f:a8:
                    a3:8b:25:7b:8b:51:09:68:43:99:ed:10:e9:a0:f6:
                    14:32:c7:b2:82:cf:2a:f6:c5:0c:90:32:3e:16:0d:
                    4b:40:92:f3:85:cc:78:27:fd:53:7c:43:3b:49:fb:
                    65:97:ac:81:4d:8b:d7:36:60:46:0d:47:04:06:90:
                    02:d8:f2:28:d9:b9:04:d3:1b:a1:ff:a0:21:d5:27:
                    4e:b4:a2:7d:3e:f8:54:e8:67:0b:61:2a:9b:4b:24:
                    65:7d:e8:c7:c7:3c:6f:7c:1a:a9:3d:44:bd:bd:24:
                    62:e4:03:5b:82:b5:c6:54:6a:bc:56:aa:a2:69:95:
                    59:77:6a:ed:a3:04:17:23:35:17:b0:97:b2:24:0c:
                    d1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:80:C5:2A:87:49:A3:37:54:6F:5F:22:1B:90:50:3A:89:6C:48:FF
            X509v3 Authority Key Identifier:
                keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cc:1b:ad:17:d1:a9:ae:87:b7:bc:8d:78:ea:bc:63:09:cd:
         7b:40:d8:48:5d:8f:e5:a8:a7:5c:89:81:6f:cd:a9:dd:0e:18:
         4a:e0:e2:95:6c:be:b6:e2:6a:fa:87:fd:2e:91:fb:0c:c3:d1:
         5f:dd:b5:4d:bc:c6:ea:bd:4b:b6:8b:54:73:be:91:b3:19:d8:
         97:04:b2:1f:1e:72:eb:09:ef:2d:af:98:4a:07:e9:99:f0:45:
         90:4f:93:02:54:a7:0b:2b:a5:25:d9:fe:1f:8c:01:22:b8:d6:
         48:34:90:e0:c9:91:8f:f5:1f:bc:fe:35:c0:3d:ba:99:1b:ea:
         83:cf:4e:b7:21:4e:62:33:c6:0b:1b:95:63:99:2f:7f:7f:cd:
         f1:73:ee:98:2c:32:fe:13:82:5e:d8:0f:e7:c6:a5:4c:94:6d:
         3d:f2:91:95:1c:02:fc:c6:86:b2:7a:99:8d:89:5b:43:cf:3a:
         79:0f:34:60:56:b1:85:b8:2f:6d:a4:1e:be:08:89:7b:ba:63:
         23:18:24:e9:c0:c6:8e:59:3c:a9:b8:c8:05:5c:84:21:ea:aa:
         8e:5d:00:3a:9c:55:62:85:17:6b:c1:01:3a:be:10:65:4d:7b:
         71:3f:12:e6:f5:c2:e3:ef:54:60:cf:37:42:71:f3:7b:b1:75:
         6b:f9:a1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:20:16 2025 by rpki-client