This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
File:                     1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json)
Hash identifier:          TMKCDg9+/RSMtIjfNLqI2jixH1vqhOyD8ZJzsHHXV+Y=
Subject key identifier:   D2:80:0E:0C:CD:D5:32:B2:6F:C1:12:25:96:AC:5E:98:5C:FE:F5:D4
Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98
Certificate issuer:       /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
Manifest number:          01F4
Signing time:             Fri 05 Dec 2025 00:50:28 +0000
Manifest this update:     Fri 05 Dec 2025 00:50:28 +0000
Manifest next update:     Fri 12 Dec 2025 00:50:28 +0000
Files and hashes:         1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: l0Lga16XYLmzOmCpc8lQZmEPxxKym6VU6/D2I5r1Uz4=)
                          2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: QVZDCd1ya5oxlLiJqZP/4xPWOb/nFUonfRIHAss0Ydc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl
                          rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
        Validity
            Not Before: Dec  5 00:50:28 2025 GMT
            Not After : Dec 12 00:50:28 2025 GMT
        Subject: CN=69322c54-4f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:d6:be:24:c5:0f:9a:33:1f:6f:57:29:8d:
                    c2:97:b5:70:b2:2c:98:0a:98:6c:f9:73:e4:37:bf:
                    f1:07:25:03:64:02:b2:57:53:ee:c3:8f:5f:94:f7:
                    cc:00:1a:0b:2b:ae:2d:c5:1f:33:91:5a:2e:41:7a:
                    2c:75:4c:23:7a:71:b0:dc:80:c3:fc:34:eb:e7:31:
                    46:3a:14:ec:2a:15:6d:66:5d:30:69:cc:d1:5f:f2:
                    1d:36:31:7d:dd:85:2d:5c:20:c9:a1:36:b3:ae:d8:
                    fb:44:5a:e4:6d:a2:2a:55:47:fc:6a:73:f9:a0:df:
                    a0:22:1f:d8:6a:1e:ec:65:22:86:88:f4:ed:00:2e:
                    b0:85:ae:3b:4c:4b:9b:a0:b1:01:8c:ef:68:bf:c2:
                    c3:4a:a9:59:00:d9:53:81:7e:e8:1d:c9:bc:78:82:
                    f2:f4:39:8d:d7:c0:bb:a6:1c:82:7e:fc:ce:67:44:
                    90:f6:82:6f:18:04:80:2c:cb:a8:42:df:66:ce:53:
                    c3:73:ce:86:2f:46:bc:5f:c3:a2:5e:5f:70:69:bf:
                    6a:0f:c5:f1:36:c9:48:35:04:13:e7:05:10:3b:74:
                    d3:10:dc:b5:bb:96:2f:0e:ee:a8:6e:a1:26:3b:ff:
                    f6:15:0e:17:ae:86:24:96:3d:50:75:b8:e6:4f:9f:
                    6c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:80:0E:0C:CD:D5:32:B2:6F:C1:12:25:96:AC:5E:98:5C:FE:F5:D4
            X509v3 Authority Key Identifier:
                keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:43:e7:8a:49:0c:6f:5c:90:2e:b8:fd:66:7d:78:fd:04:54:
         69:19:0a:5a:04:e0:38:a7:41:8b:84:04:bb:bd:47:13:28:c4:
         03:10:df:35:bc:56:c9:df:8f:05:79:5e:b3:be:26:88:e5:b3:
         7b:b4:9d:a7:1f:e9:eb:e8:34:fe:e0:93:d2:c8:da:7a:fb:bc:
         cc:37:65:15:01:89:cb:94:a9:a6:d8:78:e9:4e:93:44:04:0a:
         25:18:d3:ea:57:5c:1f:05:6a:06:f5:5b:ad:57:36:2f:43:e8:
         63:ed:61:45:06:1d:52:91:23:2f:52:92:27:88:b0:f9:45:45:
         85:e4:54:6d:54:77:10:91:85:56:68:b9:f4:dc:9e:23:5f:10:
         b1:8b:81:36:c5:fd:3a:eb:15:b6:5d:30:1d:0d:3a:da:65:66:
         cc:2d:c2:cd:c9:e9:e1:4a:d1:22:cd:b4:c2:6f:c9:68:ed:b6:
         64:f6:74:00:37:28:38:72:79:e9:1d:c7:43:68:16:c9:24:f7:
         1f:b6:d4:35:37:c9:5d:8b:33:37:95:df:07:21:77:f5:5d:a3:
         c9:6f:ef:26:f0:65:41:74:40:34:ca:49:60:53:17:3f:2c:0a:
         36:72:0f:b0:70:e3:56:97:8b:d4:1c:9b:7b:41:7a:d8:3e:18:
         8a:22:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:05 2025 by rpki-client