This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
File:                     YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json)
Hash identifier:          209L3kzUT+ANajW5AvdQDHGvEPYYU6K71gBKmrX/D5w=
Subject key identifier:   D0:0C:FE:B6:8D:0C:21:0F:B5:CB:D2:85:BA:33:AA:5D:D6:10:C6:4B
Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8
Certificate issuer:       /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
Certificate serial:       1BC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
Manifest number:          1BBE
Signing time:             Sat 06 Dec 2025 15:54:38 +0000
Manifest this update:     Sat 06 Dec 2025 15:54:37 +0000
Manifest next update:     Sat 13 Dec 2025 15:54:37 +0000
Files and hashes:         1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: Xoq63GPgOybvxv//eOBAYkWEEyVBOHhzoVngiBM287E=)
                          2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: CIx5a/KDORd4MxJLQ+psYC26naN8iQLI+AuxYnr9L/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl
                          rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7112 (0x1bc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
        Validity
            Not Before: Dec  6 15:54:37 2025 GMT
            Not After : Dec 13 15:54:37 2025 GMT
        Subject: CN=693451be-7803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:05:65:37:51:9e:ba:3d:94:cc:05:f5:34:
                    13:26:65:c2:ae:66:5c:30:a0:d3:9a:e8:48:46:6a:
                    12:9b:80:c1:2d:92:c2:27:4a:6f:04:0f:b6:1f:cf:
                    25:bb:13:d0:64:db:07:57:b0:d6:44:81:12:b1:ff:
                    65:2b:08:67:09:96:f6:a5:d8:be:12:13:dd:6d:fb:
                    d2:01:76:c0:ba:8f:58:1e:d5:21:cb:8a:bf:e0:c0:
                    95:45:e2:c8:aa:87:3c:bb:fb:9f:36:b1:79:51:76:
                    63:12:73:2f:b5:7a:c3:bb:c9:9c:68:be:61:8c:41:
                    d2:a9:3c:13:11:c1:7e:ff:8f:e1:4f:b6:b0:d1:56:
                    1c:68:80:ef:b1:42:ef:aa:8e:2f:10:91:1c:f5:2a:
                    f2:32:b8:f1:77:37:b5:2d:e9:f3:08:4c:a9:dc:f6:
                    57:c6:fc:9f:43:1d:a4:e4:f7:64:81:8e:6b:7d:4d:
                    fe:38:d7:8f:46:2d:5e:f5:2a:c7:16:41:71:c9:9c:
                    ee:67:7b:3a:89:45:57:36:c4:e5:a5:8a:bd:56:a3:
                    a6:2a:bf:2c:eb:da:11:7b:23:50:62:0a:67:b1:8f:
                    1a:1a:09:33:b7:98:8b:64:d5:c3:05:85:c7:f4:0e:
                    3c:9c:f9:66:db:2e:d0:fe:f4:de:5a:df:89:bb:be:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0C:FE:B6:8D:0C:21:0F:B5:CB:D2:85:BA:33:AA:5D:D6:10:C6:4B
            X509v3 Authority Key Identifier:
                keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:25:c7:09:07:3a:8d:08:ec:ee:93:3f:0d:c1:93:89:aa:d9:
         a1:12:a4:ac:d4:9f:d5:2d:87:ba:39:41:4c:ea:df:3b:a6:d7:
         c2:f8:b8:08:17:6a:3c:9e:e5:09:32:69:00:2e:51:7e:6a:5f:
         a3:bc:6b:d3:ed:59:4a:8b:16:9f:24:e8:60:20:69:59:16:f8:
         ef:bb:fa:f0:e8:e7:73:96:3e:a0:aa:91:06:40:8f:49:92:b0:
         c4:9f:0d:fc:5f:46:06:44:a7:f9:46:cd:19:25:63:67:3b:6d:
         f5:04:f4:b4:26:ae:b4:54:d5:98:c9:5a:5f:83:a0:ee:62:e5:
         d1:17:d2:0e:4c:9e:c6:0f:f9:3f:33:00:9c:8b:67:ce:8b:b1:
         89:ef:63:0b:c9:3f:f3:f0:89:11:0d:f6:82:20:bf:55:df:d1:
         6e:06:31:ad:ca:40:1a:f9:ed:73:c2:63:fa:9e:8f:05:a3:14:
         d4:fd:87:1a:a1:d8:ac:a9:ef:ed:e3:ec:14:94:8e:eb:6d:4e:
         05:b4:78:bd:c4:f0:89:31:77:82:fa:1b:73:85:7c:3c:4d:8a:
         b2:44:3c:8f:75:51:cd:0a:6d:f6:da:c5:d4:73:86:40:f1:be:
         19:80:05:9e:aa:93:a0:ae:da:bb:fd:bc:d5:5c:0b:4f:0a:a0:
         40:0a:36:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:32 2025 by rpki-client