This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
File:                     aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft (raw, json)
Hash identifier:          dEmm0ztTrVxM6OVYttbyWKbT8xOYEnX65n6fpzz7fZY=
Subject key identifier:   5C:E4:17:0A:54:FA:EE:56:D1:3E:7F:88:7E:16:B3:53:36:D4:01:9A
Authority key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10
Certificate issuer:       /CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710
Certificate serial:       1508
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
Manifest number:          1508
Signing time:             Sat 06 Dec 2025 16:23:14 +0000
Manifest this update:     Sat 06 Dec 2025 16:23:13 +0000
Manifest next update:     Sat 13 Dec 2025 16:23:13 +0000
Files and hashes:         1: aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl (hash: WRV4aN/Z2/N49LhGoPUN2TNpp63VQ2NAdBPct2P+JjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl
                          rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5384 (0x1508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174125, serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710
        Validity
            Not Before: Dec  6 16:23:13 2025 GMT
            Not After : Dec 13 16:23:13 2025 GMT
        Subject: CN=69345871-2233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:20:59:7b:0f:31:91:e2:e0:15:a7:e1:cb:
                    58:3e:e7:60:cb:a0:df:bc:d4:b9:ee:c0:39:1d:64:
                    2f:0e:13:ab:81:14:44:e9:ed:6b:bc:8a:9c:3b:8a:
                    79:b6:78:47:15:48:d1:c5:a7:76:4f:ea:a4:fb:85:
                    ca:45:38:f4:d4:9a:23:a8:f2:00:52:b6:26:0f:8d:
                    c1:be:63:f5:ca:7f:8b:d6:1e:17:7c:80:7b:f7:15:
                    31:59:b2:02:67:96:cc:79:07:fe:b4:80:b2:02:65:
                    46:31:af:26:2d:d7:47:cb:d7:fb:c2:7c:c7:ec:8f:
                    83:e6:08:0e:17:32:8e:79:21:f3:fd:7a:53:f3:bc:
                    13:34:42:6b:58:b1:4d:da:5e:ae:e4:00:4e:18:1e:
                    80:55:77:80:bc:18:2c:8e:8c:2c:f2:f3:e7:3c:10:
                    76:79:90:c9:d2:51:54:98:75:9b:00:11:e5:ad:fb:
                    d8:24:4f:ec:af:92:ea:dd:d0:15:03:84:31:1a:ec:
                    da:d5:cd:d7:bf:c2:15:c0:c6:36:00:4d:a8:19:19:
                    3b:e3:fd:73:20:5b:f2:4d:d9:c9:51:0f:14:9a:69:
                    a7:87:46:61:84:1b:49:db:0e:80:0e:ac:23:16:78:
                    2a:f1:58:81:50:c9:b0:a1:92:a1:de:b3:96:22:35:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E4:17:0A:54:FA:EE:56:D1:3E:7F:88:7E:16:B3:53:36:D4:01:9A
            X509v3 Authority Key Identifier:
                keyid:68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:de:3a:f9:61:7f:04:0c:ac:0e:53:73:64:af:4b:c0:4a:e2:
         3d:94:59:1a:f8:75:f8:74:7b:25:c7:19:a7:eb:24:2b:37:b3:
         f8:80:22:fc:70:de:9a:3b:fe:ee:8c:55:20:b3:b0:21:06:9c:
         c0:87:bd:43:c5:29:81:67:24:ad:70:b6:08:ce:40:1c:27:b0:
         9f:a6:29:31:78:eb:a2:dc:5e:90:cd:dd:84:bd:ae:f9:3e:ba:
         a1:59:0d:1f:f3:8e:0e:d5:69:2e:18:fb:1d:17:2d:02:12:ce:
         af:9f:96:8b:90:9f:9c:6b:82:bf:cb:56:fa:1f:68:34:12:62:
         08:30:a1:06:59:82:5a:f8:80:1b:18:a8:af:5b:7c:cf:8d:9e:
         22:06:8a:f4:b7:18:7f:42:72:1d:4b:4e:de:10:86:a2:ab:d9:
         cc:48:dd:94:ec:85:60:5a:6a:26:9d:2c:d9:c1:3a:ad:a0:78:
         0d:be:93:da:e6:ee:f9:77:6b:ad:a0:57:d7:2e:ea:23:22:a3:
         c4:7c:b1:5a:1f:ca:9b:0f:e5:21:50:59:61:8e:50:59:7f:4f:
         35:be:cd:49:aa:48:50:9d:6d:a9:57:f2:3f:34:4e:38:6b:fe:
         e0:fa:e9:7b:16:30:ce:6f:7a:8a:4c:85:66:a1:ce:6f:76:83:
         a5:8c:15:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQxMjUxMTAvBgNVBAUTKDY4QzYxMTk3RUJBNDFBNjREODVGMjU1OUUxRDQwRDZF
NzVGQ0I3MTAwHhcNMjUxMjA2MTYyMzEzWhcNMjUxMjEzMTYyMzEzWjAYMRYwFAYD
VQQDEw02OTM0NTg3MS0yMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnpQgWXsPMZHi4BWn4ctYPudgy6DfvNS57sA5HWQvDhOrgRRE6e1rvIqcO4p5
tnhHFUjRxad2T+qk+4XKRTj01JojqPIAUrYmD43BvmP1yn+L1h4XfIB79xUxWbIC
Z5bMeQf+tICyAmVGMa8mLddHy9f7wnzH7I+D5ggOFzKOeSHz/XpT87wTNEJrWLFN
2l6u5ABOGB6AVXeAvBgsjows8vPnPBB2eZDJ0lFUmHWbABHlrfvYJE/sr5Lq3dAV
A4QxGuza1c3Xv8IVwMY2AE2oGRk74/1zIFvyTdnJUQ8Ummmnh0ZhhBtJ2w6ADqwj
Fngq8ViBUMmwoZKh3rOWIjX/iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzkFwpU
+u5W0T5/iH4Ws1M21AGaMB8GA1UdIwQYMBaAFGjGEZfrpBpk2F8lWeHUDW51/LcQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyNS9GQUI2QkU4ODVE
NjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dtVFlYeVZaNGRRTmJuWDh0
eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FNWVJsLXVrR21UWVh5Vlo0ZFFOYm5YOHR4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDEyNS9GQUI2QkU4ODVENjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dt
VFlYeVZaNGRRTmJuWDh0eEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBz3jr5YX8EDKwOU3Nkr0vASuI9lFka+HX4dHslxxmn6yQrN7P4gCL8
cN6aO/7ujFUgs7AhBpzAh71DxSmBZyStcLYIzkAcJ7CfpikxeOui3F6Qzd2Eva75
PrqhWQ0f844O1WkuGPsdFy0CEs6vn5aLkJ+ca4K/y1b6H2g0EmIIMKEGWYJa+IAb
GKivW3zPjZ4iBor0txh/QnIdS07eEIaiq9nMSN2U7IVgWmomnSzZwTqtoHgNvpPa
5u75d2utoFfXLuojIqPEfLFaH8qbD+UhUFlhjlBZf081vs1JqkhQnW2pV/I/NE44
a/7g+ul7FjDOb3qKTIVmoc5vdoOljBXl
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:41 2025 by rpki-client