This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
File:                     lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft (raw, json)
Hash identifier:          C+D4kwmJ1GmCaCVITMKj8Ncw2Nyt/YWi/qyDlYOtiM0=
Subject key identifier:   74:5F:A2:1D:19:78:6A:30:C5:9D:C6:41:E5:DF:B2:71:45:36:DC:9E
Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73
Certificate issuer:       /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473
Certificate serial:       03FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
Manifest number:          03F4
Signing time:             Sat 06 Dec 2025 23:08:27 +0000
Manifest this update:     Sat 06 Dec 2025 23:08:27 +0000
Manifest next update:     Sat 13 Dec 2025 23:08:27 +0000
Files and hashes:         1: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl (hash: vX4IoHjiASdbFfuLTNclwBTbVf6vLqNr/62d3hZ3Be8=)
                          2: 886907F8EE9911EDB02DA367C4F9AE02.roa (hash: Wvz4cNe0OC8IhG60u+77ZZqG7jnCfkJuPUgGit+D/Bg=)
                          3: EAAACB14A46111ECA6D7AC4AC4F9AE02.roa (hash: G0VAwKVz22dJplsZ8JCisNdr5V+Bm42xeQ9XdjBCqhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl
                          rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B180, serialNumber=9585475735E2EE103A88357769E176306D197473
        Validity
            Not Before: Dec  6 23:08:27 2025 GMT
            Not After : Dec 13 23:08:27 2025 GMT
        Subject: CN=6934b76b-f57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:ee:d7:1c:fe:1a:04:b6:2d:76:3f:ec:e8:
                    29:60:59:e3:3d:e8:ab:b7:07:51:70:c7:2a:07:0e:
                    f4:d3:55:82:a5:6b:3d:bc:eb:9b:7a:f0:8f:a8:a8:
                    88:50:b9:a1:a4:f9:4d:6d:4c:cd:3f:1c:68:99:01:
                    4d:74:a2:e5:dd:01:3f:dd:87:cd:b6:70:da:d6:0e:
                    0f:c7:0a:d8:08:53:13:54:b4:8f:6c:c4:9b:29:44:
                    92:8c:a2:1a:3e:ec:77:1c:51:35:66:ae:1d:bd:9f:
                    93:f1:e9:64:da:c1:8d:ba:b3:c8:a2:ad:91:67:1b:
                    9d:e0:c1:31:0f:e0:03:7d:e3:41:a7:a4:a4:c9:c1:
                    25:5f:70:00:96:ef:cd:37:8a:e5:64:cf:5d:db:df:
                    6d:5b:a0:81:5c:cf:65:a9:03:f0:56:6c:26:76:f5:
                    93:d8:41:5d:dd:44:27:41:18:c5:8a:bd:cc:3c:04:
                    ed:3a:e8:0e:10:86:c6:2f:a0:40:9a:1e:d2:45:02:
                    94:5f:9c:81:a3:45:94:fb:3b:c4:d5:18:b8:c6:d4:
                    36:d1:2b:67:4d:ed:95:f6:dd:5f:72:1f:8c:e9:f0:
                    96:c1:34:e2:e1:76:85:3c:5a:e2:7b:b4:aa:ec:51:
                    72:07:32:cc:c5:99:89:15:76:a7:35:8c:6c:6e:4a:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5F:A2:1D:19:78:6A:30:C5:9D:C6:41:E5:DF:B2:71:45:36:DC:9E
            X509v3 Authority Key Identifier:
                keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:57:0a:eb:bc:ba:c1:2c:c2:55:a1:d3:8c:c4:ba:17:1e:b1:
         76:64:91:04:bb:b6:1e:07:73:16:31:6e:00:27:e1:23:d5:8a:
         cf:48:de:18:f9:49:3d:7b:99:82:16:65:85:b2:0f:04:b7:69:
         ce:8f:eb:2e:71:0d:b6:18:09:b7:cd:4b:79:0b:72:71:ec:06:
         a4:4e:59:d6:e6:1c:41:73:3b:c1:6e:a5:fb:15:d0:1e:70:9d:
         84:4b:06:1f:d0:f6:28:f9:37:06:a6:53:af:d2:88:cb:b6:60:
         b9:57:92:9f:f4:52:f7:a3:0a:80:5b:86:82:06:a5:83:bf:a3:
         8f:91:1a:7e:ef:eb:01:55:84:9e:74:8f:08:cf:04:da:ad:8b:
         aa:7f:fc:02:1c:a6:22:6a:3a:f3:20:7d:61:9a:3a:ac:68:31:
         c0:a6:0c:da:ec:8e:7f:2a:09:a2:90:8f:0a:2a:27:b9:39:38:
         0c:d7:58:98:57:34:3c:2a:5f:97:63:a8:44:8a:d2:8b:ee:d1:
         ee:8a:1a:74:d6:bf:aa:eb:96:be:0b:e0:83:95:22:18:1a:be:
         9c:4f:06:84:d0:e6:5d:88:4a:f5:fd:c3:02:5e:15:82:be:fd:
         4b:ee:e8:e6:97:40:3d:f8:25:ac:91:59:5e:1a:93:65:85:9b:
         92:69:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:11:02 2025 by rpki-client