This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
File:                     y7Nb36Nai-snCaTbsy49IWLsH6g.mft (raw, json)
Hash identifier:          N1oWqCI4suJx5WHkr8lmt1p1JtudswaoJiJOwjQLUBM=
Subject key identifier:   7B:76:E9:7B:77:B1:66:B9:E6:BF:E3:F0:D5:DB:5F:48:D3:77:CF:39
Authority key identifier: CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8
Certificate issuer:       /CN=A919130F/serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
Manifest number:          6E
Signing time:             Fri 05 Dec 2025 04:48:30 +0000
Manifest this update:     Fri 05 Dec 2025 04:48:29 +0000
Manifest next update:     Fri 12 Dec 2025 04:48:29 +0000
Files and hashes:         1: y7Nb36Nai-snCaTbsy49IWLsH6g.crl (hash: c5AQWX0oofRFU9OSki5+v3bVZCQFNuVXLdNDaPXjecE=)
                          2: 26B1D24C2A4211F08783A40EC4F9AE02.roa (hash: SDRI2ES0jWjnto/2GRG1yqaHYEDkagPUNjmUepTZiAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl
                          rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919130F, serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8
        Validity
            Not Before: Dec  5 04:48:29 2025 GMT
            Not After : Dec 12 04:48:29 2025 GMT
        Subject: CN=6932641d-2d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:aa:b9:57:4f:24:bc:95:21:a6:bb:93:14:
                    47:0d:a6:bf:f9:7e:28:cf:07:05:a7:02:1c:17:2c:
                    68:19:7d:3a:58:a3:79:cc:07:f2:ae:a3:af:28:74:
                    d4:81:89:a5:50:75:50:f2:7b:28:9b:01:13:3d:d0:
                    43:39:15:d3:6b:2f:c8:dc:b8:e3:7e:2c:3f:d0:71:
                    f3:c1:9d:25:cf:9d:7f:e3:41:5b:7c:a1:b2:e1:2a:
                    fc:73:4d:db:9e:eb:5b:7a:e9:b2:b6:e6:ef:16:94:
                    85:4e:3b:c8:0c:e8:ba:f5:91:fe:9b:8f:6d:00:94:
                    9c:8f:57:6f:b2:18:0a:aa:5d:70:cb:33:ac:3a:55:
                    8f:2d:36:0b:35:9e:25:be:88:cf:ed:ab:44:aa:0d:
                    fd:10:74:5c:3f:d3:8c:51:55:3e:ae:78:b9:f3:47:
                    bb:1d:4e:26:88:96:36:45:08:0e:73:00:d0:18:31:
                    d3:5e:6c:5c:38:90:53:9a:ca:c9:d5:5e:5b:62:fd:
                    77:68:14:62:a5:dc:a5:2c:42:40:de:41:6e:ee:d0:
                    be:82:65:3b:cd:db:10:69:a1:e3:f2:ef:28:79:64:
                    e8:3a:16:db:01:03:b5:31:8f:64:3b:a7:56:86:a3:
                    0d:85:2b:63:42:11:18:e4:ed:38:0f:be:76:97:0e:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:76:E9:7B:77:B1:66:B9:E6:BF:E3:F0:D5:DB:5F:48:D3:77:CF:39
            X509v3 Authority Key Identifier:
                keyid:CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:11:ea:92:73:88:ea:7a:8c:8b:bd:2e:73:9f:cc:60:4b:16:
         9a:6e:97:5a:b5:78:f5:72:9e:cf:28:cc:21:ac:64:07:e1:d0:
         47:e4:b1:f7:d4:44:b1:ff:3c:50:2d:40:68:0c:0f:c0:d2:58:
         25:72:bf:6f:9d:3f:ff:44:c7:9c:68:74:dd:43:bd:cb:b3:00:
         82:69:aa:d5:a5:3f:ab:da:be:22:0e:50:d3:19:7d:25:45:80:
         33:84:1e:83:f1:fc:2a:35:3e:77:c3:d8:4d:60:cf:24:dc:ed:
         a4:ea:20:4f:53:54:d0:9b:ae:c8:1b:01:14:8f:6e:9d:bd:6e:
         1d:1a:0c:be:3e:f3:0b:78:0e:93:b5:b5:5d:80:47:c0:0a:75:
         48:fa:48:60:00:08:d4:36:3a:9c:73:9e:82:3a:cc:c4:3a:97:
         80:f0:b3:a8:c6:a6:02:30:c1:31:e2:61:e3:bd:2f:e6:e5:c3:
         e1:40:ff:e7:4a:2d:a2:91:49:b8:2e:5b:07:95:70:69:93:09:
         3a:a3:6c:21:37:9c:ba:8b:1b:67:7d:3a:21:d1:9b:b7:09:c2:
         41:b8:58:33:52:24:51:b9:34:6a:db:e4:29:cf:a8:72:ac:2b:
         1f:59:b9:88:9f:59:91:9c:be:a1:ee:a0:bd:90:96:2e:42:15:
         16:47:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:04 2025 by rpki-client