This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
File:                     SL_YCBmvF_vAh15iBvAoIqewTpg.mft (raw, json)
Hash identifier:          xZ4itRr8BAr2+6clzoeAhG8IV0j/0VoLF8rOOW3Ppmc=
Subject key identifier:   C0:0D:58:2C:9D:FF:D6:60:A5:2A:F0:84:23:DE:E2:5E:AD:E4:1B:4B
Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
Certificate issuer:       /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
Manifest number:          045C
Signing time:             Fri 05 Dec 2025 00:41:09 +0000
Manifest this update:     Fri 05 Dec 2025 00:41:08 +0000
Manifest next update:     Fri 12 Dec 2025 00:41:08 +0000
Files and hashes:         1: SL_YCBmvF_vAh15iBvAoIqewTpg.crl (hash: syTr3MQo54mBRYxQAmCsW2/pbL+3MhA0temkfDL/ewU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D, serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
        Validity
            Not Before: Dec  5 00:41:08 2025 GMT
            Not After : Dec 12 00:41:08 2025 GMT
        Subject: CN=69322a25-8d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:b6:c8:98:ba:63:77:7a:2d:4e:3f:1d:b4:
                    39:07:8f:f8:a7:84:63:40:10:8d:8e:7f:c0:05:b6:
                    99:f0:2f:87:8b:7f:cf:b1:ba:d7:d8:1b:ea:dc:7b:
                    cd:44:48:7d:6f:61:99:02:ee:91:8e:97:22:ca:08:
                    fd:01:a4:3a:11:f8:35:b1:1b:f8:bb:95:1e:c1:1c:
                    e4:e9:2f:9b:27:3b:c8:e5:15:97:9d:c7:87:84:12:
                    28:eb:7d:11:67:7d:4f:ba:08:e9:a7:f6:b2:e0:48:
                    b9:60:dd:ca:19:cf:f7:ed:96:bd:5c:14:08:5b:52:
                    f3:71:97:04:1a:34:9f:fa:6b:de:42:96:69:fa:1b:
                    87:20:33:b8:98:73:64:25:80:72:91:a5:70:3f:72:
                    06:43:3f:73:c2:63:58:4c:bd:39:0e:eb:26:a0:f9:
                    b8:4b:65:62:83:26:8f:05:9a:03:a7:45:cd:fc:45:
                    22:c8:88:99:94:8d:67:b2:90:6d:08:4d:2d:b1:e3:
                    15:fe:af:c7:01:78:74:ba:50:62:48:f0:7e:1a:27:
                    0a:c8:0d:27:1a:69:7d:35:2b:91:3a:59:5e:4d:8b:
                    25:bd:d3:27:39:56:52:22:af:5b:62:3c:62:1e:06:
                    c4:07:55:fa:e5:af:2d:4b:f6:f1:22:17:0f:3e:30:
                    14:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0D:58:2C:9D:FF:D6:60:A5:2A:F0:84:23:DE:E2:5E:AD:E4:1B:4B
            X509v3 Authority Key Identifier:
                keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:18:af:c0:d4:d7:17:a9:fc:22:16:48:97:b9:3b:17:7b:fe:
         9d:73:49:b6:54:03:bf:90:06:3c:c1:ba:cf:57:b1:fa:67:12:
         22:b8:52:57:71:7c:b7:3d:79:9e:50:ce:8a:58:aa:fd:1b:58:
         ce:dc:69:5c:92:c1:f2:15:6b:ce:40:9b:e0:01:49:1b:27:18:
         77:02:fd:8e:4a:47:cd:e6:95:e6:82:34:df:58:e0:b6:5e:56:
         0a:b5:fb:5a:a5:37:7d:4c:e3:a5:d9:52:47:a5:e3:c8:ad:f1:
         2c:b9:3e:f7:98:84:1f:67:dc:7c:73:8c:dd:dd:e9:99:1a:f0:
         84:f6:3e:18:c3:9f:d1:db:5a:32:8c:68:98:a9:64:73:92:2d:
         b6:51:df:eb:96:e3:8b:9b:bc:52:32:de:6a:15:8a:09:53:6b:
         49:6e:08:83:54:41:ef:7f:12:14:0b:17:bf:15:c4:d4:e8:38:
         b1:11:8a:cb:a3:7b:62:cb:78:52:42:9f:83:1f:3b:a2:fd:25:
         03:2f:4d:93:c2:0c:46:54:3a:9f:67:57:55:db:57:bd:e6:f7:
         27:3c:af:d6:fd:de:0d:e4:42:85:a8:e2:be:38:12:cc:9f:8b:
         3b:aa:2d:15:38:26:1a:b2:1a:3a:26:b9:d9:ad:1e:43:a0:d7:
         04:e7:15:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:36 2025 by rpki-client