This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
File:                     yCt7N51v7So8MMRTfg-HzLYIIus.mft (raw, json)
Hash identifier:          FpwpCgvAwEPtPGHnEaL2YkZrLsG7N6szn7Ve+rsKcKY=
Subject key identifier:   02:87:C6:83:D4:25:04:F4:58:06:B8:95:CC:A6:73:0B:01:0B:DE:7B
Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
Certificate issuer:       /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Certificate serial:       01CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
Manifest number:          01C6
Signing time:             Fri 05 Dec 2025 01:12:59 +0000
Manifest this update:     Fri 05 Dec 2025 01:12:58 +0000
Manifest next update:     Fri 12 Dec 2025 01:12:58 +0000
Files and hashes:         1: yCt7N51v7So8MMRTfg-HzLYIIus.crl (hash: HVv6LXuhQVBe9z98mDRBIpOUv9MSMPy/8pQhQTVKz0U=)
                          2: B50ECD32A57E11EEB4533738C4F9AE02.roa (hash: 1HSPz5fptSUhMZGOqCo4GWHbK/jQcYLJDQgsd3l//0k=)
                          3: 348BAEE41C2D11EEB362491FC4F9AE02.roa (hash: qxrX+Z3cG6vZ3aS4ZRQYNGD9CmXUX4wxNipZHWRT9gc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
                          rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB96, serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
        Validity
            Not Before: Dec  5 01:12:58 2025 GMT
            Not After : Dec 12 01:12:58 2025 GMT
        Subject: CN=6932319b-9215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:72:6f:41:0f:79:98:70:39:13:88:03:f1:
                    fd:05:31:42:22:28:87:03:19:3b:cf:4a:5c:f3:5e:
                    35:7b:4d:1c:24:74:7a:e0:02:53:d3:c5:6d:b2:13:
                    5a:16:52:20:ff:df:e9:07:e2:74:2b:6f:07:31:63:
                    93:c0:8b:96:f5:f6:dc:4b:03:bc:2a:f7:59:56:16:
                    ce:be:3c:9b:a9:42:31:af:d8:00:e1:ef:d9:e0:46:
                    4b:4a:bd:6b:21:70:4e:0e:99:98:5f:f6:7d:ec:1d:
                    6e:11:c9:ff:cd:ef:77:e7:db:0e:e1:fb:ad:06:83:
                    e0:d0:99:83:6a:22:c9:d2:d1:dd:2f:5b:9e:c8:e7:
                    31:32:c3:09:c7:24:7a:5a:a4:21:eb:dd:32:c9:37:
                    d5:c5:d6:9e:40:2c:70:03:f2:76:7a:79:bf:26:3c:
                    97:e2:c6:59:35:01:fc:65:26:74:09:d6:c5:e1:52:
                    1e:2d:ea:59:b5:c2:d8:78:7b:70:f0:26:ee:12:8e:
                    66:4e:18:86:d7:f0:2f:5f:e4:7f:8d:40:d9:de:7c:
                    1b:94:99:34:9a:48:61:2a:26:84:d1:a7:7e:1d:03:
                    89:a8:82:55:c7:cf:d8:1f:29:bd:40:c4:3a:48:05:
                    70:05:61:90:1c:c7:96:ab:02:de:bc:a5:11:9a:4d:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:87:C6:83:D4:25:04:F4:58:06:B8:95:CC:A6:73:0B:01:0B:DE:7B
            X509v3 Authority Key Identifier:
                keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:25:ec:be:95:48:12:30:98:ff:71:89:fc:0a:64:0c:2c:55:
         ce:8e:e4:8b:20:8f:e6:d9:93:ae:30:a3:9a:94:ff:34:ab:77:
         ac:6b:69:85:c1:77:24:84:b0:83:cb:d5:c7:bc:68:3c:a6:27:
         0e:20:26:5a:02:67:14:40:e1:ed:27:6f:cf:2b:e1:ef:01:e6:
         06:69:d9:09:63:d2:33:e9:49:5f:fe:a7:fa:18:82:b2:b6:bc:
         af:bc:1c:44:1d:69:dd:35:a4:27:ca:ba:a4:70:3b:72:8d:65:
         70:89:bb:30:cf:30:55:87:be:ff:20:b9:6a:cb:3b:25:a7:70:
         dd:83:d9:cd:ed:69:f3:9a:43:63:b5:a0:22:81:4a:ef:dd:b9:
         5f:b1:e3:24:53:af:8f:1a:17:53:50:6c:4c:44:58:c8:fe:f4:
         ed:b8:61:ae:4d:6d:73:7e:0b:3f:81:a2:d9:fd:cf:55:3a:87:
         4a:7c:14:27:3f:ee:f3:68:8e:a6:47:a8:d0:34:5b:20:82:74:
         fb:5c:fc:02:fc:dc:29:fa:01:c6:a2:8a:a5:bc:3a:19:35:7f:
         89:2d:67:d0:bf:2c:da:67:9b:f3:d5:f0:3f:8e:44:7c:76:5f:
         9b:0e:21:84:34:e5:3a:ee:94:3a:ba:4c:76:16:ae:b1:7c:28:
         60:3b:ac:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:59:32 2025 by rpki-client