This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
File:                     yVIsOLleGYHYPa86djWzGQlA_Fs.mft (raw, json)
Hash identifier:          PNKy9YyHDRyCXuJ+kbELsg3xY1hygE2h2y5fqPkTyEE=
Subject key identifier:   99:41:A7:A6:71:82:54:94:68:58:79:2E:92:B1:56:68:B4:29:3F:73
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Certificate issuer:       /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial:       059B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
Manifest number:          058F
Signing time:             Thu 04 Dec 2025 21:54:01 +0000
Manifest this update:     Thu 04 Dec 2025 21:54:00 +0000
Manifest next update:     Thu 11 Dec 2025 21:54:00 +0000
Files and hashes:         1: yVIsOLleGYHYPa86djWzGQlA_Fs.crl (hash: 275J5rqiaSWpZFtgt3+1hLPJC7RS6k+YCDot3qI14ys=)
                          2: 6593B3840AD711F083DDB076C4F9AE02.roa (hash: Jai2ZPxFy4Omx4vuI3FyeaDVueoNejReZFJx8NI5lrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1435 (0x59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
        Validity
            Not Before: Dec  4 21:54:00 2025 GMT
            Not After : Dec 11 21:54:00 2025 GMT
        Subject: CN=693202f9-ae93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:ee:6c:88:8d:31:dd:72:45:37:95:41:b2:
                    37:2d:52:30:12:f6:73:d8:3c:0b:84:94:98:d3:41:
                    f9:c8:89:b2:b5:1c:4c:c4:d5:49:11:41:78:8e:4f:
                    9c:e7:85:93:9a:e8:52:4b:ce:65:a2:31:8c:4e:ef:
                    21:1e:da:b6:f1:c0:a5:e2:c2:73:cf:fc:eb:5a:62:
                    d0:c8:40:aa:02:76:f6:4a:e2:32:0c:eb:0b:56:f4:
                    92:0c:49:ba:a1:2e:af:e2:e9:9f:85:9d:c0:fe:61:
                    5f:5c:36:69:09:11:d3:5f:a2:29:0d:b0:41:51:fb:
                    bd:9f:d8:09:4b:c9:dc:3b:38:c6:89:e5:ab:1f:84:
                    5e:18:ec:c1:31:45:d4:e7:b7:b0:ee:61:a8:18:62:
                    fa:f9:60:59:ec:16:43:32:79:14:f4:dd:c0:7f:1c:
                    3c:b6:97:20:6f:31:0f:83:f8:20:14:63:96:70:7f:
                    b1:df:65:0b:c9:a4:09:e6:61:3a:86:fa:58:a1:74:
                    b7:66:62:a4:7f:31:64:e0:30:57:2d:ed:ed:54:dd:
                    46:85:8e:8b:d0:4b:ec:1f:e3:a9:b9:03:13:ea:e6:
                    cc:fc:1c:09:d8:ed:6d:8f:cb:86:ab:54:3c:f0:57:
                    44:cb:50:dc:67:b0:5e:64:30:93:64:2a:75:7b:e0:
                    12:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:41:A7:A6:71:82:54:94:68:58:79:2E:92:B1:56:68:B4:29:3F:73
            X509v3 Authority Key Identifier:
                keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:59:b9:79:e3:d2:7e:3f:c5:5c:1e:74:de:51:48:8f:1c:03:
         8e:5d:80:e5:45:ce:e3:da:e1:c9:3e:77:3c:74:1f:47:6c:7b:
         4a:ba:b0:f2:ac:78:80:9f:40:04:ea:ce:34:6a:a0:34:4c:cd:
         eb:1d:98:7c:15:02:f4:a8:d7:19:c6:38:ce:58:e3:4a:0d:4d:
         4d:e8:7d:83:04:32:a2:aa:7b:fe:65:67:b8:b4:52:19:e1:4b:
         9d:de:f1:1e:32:79:50:cf:af:90:b1:70:6e:cf:2a:dd:2c:53:
         c2:8b:a1:28:94:59:f9:29:d8:73:1b:3e:e5:da:7c:a5:e5:35:
         8a:d5:1d:12:c5:3f:f0:f0:18:0f:14:b8:c3:22:5c:40:92:a0:
         63:41:33:c4:fa:ef:e7:08:c1:fb:c5:f5:e0:6b:de:89:cf:a3:
         ec:a3:81:8c:9d:14:a5:e5:00:73:86:a2:e9:78:0f:df:5d:d0:
         49:8c:d4:48:93:57:ad:c6:64:a3:07:3b:bb:14:de:fa:4a:80:
         44:56:61:96:8a:3a:7e:18:81:e9:4d:ab:92:99:93:bb:c7:12:
         d9:70:89:60:d0:b5:2a:c5:11:b3:01:59:da:a9:40:ec:d3:b5:
         6f:50:ca:6a:81:cb:8d:b7:a0:3d:df:26:00:4f:d7:97:33:9c:
         e2:7a:9e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:04:26 2025 by rpki-client