This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
File:                     SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft (raw, json)
Hash identifier:          0wjwPVTJPnkifL8Mc2/sldjdR7wN9SFJyCfEphNJjj4=
Subject key identifier:   F4:3D:6C:20:12:C4:DD:09:8D:41:D6:EA:7D:09:60:C5:4A:0B:2B:83
Authority key identifier: 4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D
Certificate issuer:       /CN=A9182EC4/serialNumber=4B2A86659545F92566354247A4F08F3CE5BE6C0D
Certificate serial:       3389
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
Manifest number:          3389
Signing time:             Sat 06 Dec 2025 15:10:56 +0000
Manifest this update:     Sat 06 Dec 2025 15:10:55 +0000
Manifest next update:     Sat 13 Dec 2025 15:10:55 +0000
Files and hashes:         1: SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl (hash: DVDnafePShj10d/Yn+KRocS6uqffBr0FYanJ7bB8pZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl
                          rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13193 (0x3389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182EC4, serialNumber=4B2A86659545F92566354247A4F08F3CE5BE6C0D
        Validity
            Not Before: Dec  6 15:10:55 2025 GMT
            Not After : Dec 13 15:10:55 2025 GMT
        Subject: CN=6934477f-3031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:17:93:d8:85:a0:46:0d:ed:20:2f:0d:7e:
                    5b:aa:a2:36:e6:b5:cc:b9:72:a9:82:0f:29:40:cb:
                    01:d7:a2:ce:07:34:b9:15:1b:7a:b3:5a:cd:3b:95:
                    4a:89:15:21:67:e0:37:ed:8b:3c:ff:e5:1f:20:c0:
                    b0:d5:e0:ff:7e:d1:15:d0:3e:8a:c8:56:4b:09:2d:
                    dd:64:ff:df:e5:0c:a1:2f:cd:20:4f:f3:61:5c:cb:
                    ab:43:56:d6:3d:1a:ee:fa:8d:09:86:ef:20:28:d5:
                    21:67:e3:dc:8c:fb:03:1e:82:53:9d:c8:96:d4:04:
                    00:83:f2:4c:9e:9b:bd:c4:c5:bf:cc:25:ee:67:5a:
                    cd:fc:b0:fb:41:0c:8b:90:72:37:f3:ac:c1:df:8a:
                    49:e9:3f:c2:40:c2:04:a6:38:a1:c9:c0:5c:bc:a5:
                    99:86:d7:4b:91:90:e5:77:f2:a8:06:2c:f0:73:25:
                    4f:9d:91:96:da:c6:85:90:bb:81:cd:35:62:11:2e:
                    bf:2b:7f:c1:46:ae:39:a0:26:37:63:34:de:b7:6a:
                    7a:f9:08:9a:5b:be:0f:1f:46:a1:3d:24:84:48:35:
                    d2:92:b9:c7:a0:f7:a7:36:18:47:24:7f:84:a9:02:
                    d0:9e:3f:17:14:63:d0:a6:61:ca:7d:09:6a:8b:e9:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3D:6C:20:12:C4:DD:09:8D:41:D6:EA:7D:09:60:C5:4A:0B:2B:83
            X509v3 Authority Key Identifier:
                keyid:4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a8:cd:56:b4:28:5b:41:c0:49:4d:86:fc:72:11:25:53:7a:
         8a:3d:f4:2f:e2:6e:9b:75:b4:97:52:ce:c0:74:da:62:7d:1a:
         70:a9:16:41:65:96:ec:bc:2d:a6:a4:62:fa:ef:bc:12:33:e6:
         23:9f:fc:16:1d:55:6d:13:f8:2a:29:8e:9c:fb:2d:75:f1:fd:
         d5:eb:f3:99:e7:95:5c:9f:b3:b5:7c:48:cf:d3:61:5f:3c:8c:
         42:5e:90:ba:9e:2c:6b:66:24:fb:3d:21:d8:36:2a:90:8d:8d:
         f9:b0:88:0a:91:c0:a3:d5:1d:f8:ce:33:39:23:29:17:8c:97:
         5a:57:f1:3f:bf:de:ca:d3:6b:e2:c8:80:b9:4f:8c:d6:6c:bc:
         79:ec:53:76:87:98:b0:97:68:37:52:e5:7b:32:7e:04:3e:29:
         a3:c8:6f:0b:f0:7c:7b:58:d3:05:ca:74:d0:7a:02:ef:c2:48:
         f8:79:ab:db:8d:c9:77:00:6a:d7:77:43:d4:8a:dd:2c:d9:49:
         3d:0c:48:e7:4c:d2:2b:c3:ca:39:4b:38:b4:60:90:b0:84:61:
         bc:d1:ad:7d:72:14:d3:f7:61:f1:da:81:13:95:b9:9b:f8:b2:
         1c:a6:15:6c:62:00:58:e0:15:9b:02:66:7f:5a:7f:d5:48:5c:
         af:2f:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:30:16 2025 by rpki-client