This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
File:                     YiOr1va2e6_v4-c2Rv16ZuECFL4.mft (raw, json)
Hash identifier:          4+wsNEp9Xp5Xqem3rSrLYB3hsfAbPkUjRa7xXhRlIDE=
Subject key identifier:   E4:8F:82:2B:8A:F4:05:4E:B0:E6:4C:A8:55:88:C7:55:39:4A:76:06
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Certificate issuer:       /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
Manifest number:          0131
Signing time:             Tue 23 Dec 2025 03:34:53 +0000
Manifest this update:     Tue 23 Dec 2025 03:34:52 +0000
Manifest next update:     Tue 30 Dec 2025 03:34:52 +0000
Files and hashes:         1: YiOr1va2e6_v4-c2Rv16ZuECFL4.crl (hash: d0h9MaQ8k0k6lU1fjUq/MO4OfWTK1tj2gX8j2W2WoYg=)
                          2: 878615B88D3211EF9E092384C4F9AE02.roa (hash: 1a6J1IrsKbEFpskMpI4op6cGGhceRlU8MHnA+P2UnnM=)
                          3: A937C2200FA511EFBDB06936C4F9AE02.roa (hash: 7elI6AMeNa1Ca+M4fsrsmJ6YMM78ASd0PDly2IpzKgA=)
                          4: 884A59828D3211EF9E092384C4F9AE02.roa (hash: xOaimOfUZBkRNhY2P91bf0+ib8Nd/3H7NeCCoMewY1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
                          rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176FD9, serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
        Validity
            Not Before: Dec 23 03:34:52 2025 GMT
            Not After : Dec 30 03:34:52 2025 GMT
        Subject: CN=694a0ddd-f2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:6c:62:d2:4a:77:f1:3b:54:13:3a:92:0c:
                    d7:59:29:de:69:a6:e4:fe:81:dd:1a:ab:7b:07:80:
                    0b:10:c7:33:82:da:34:25:7c:8a:96:b3:34:15:cb:
                    56:62:39:a5:dc:17:ea:af:06:e7:d9:7d:79:b9:92:
                    97:13:5f:0b:83:c9:36:8f:d7:58:2b:48:49:41:98:
                    58:95:ab:4e:f4:0d:c0:e2:0e:1e:31:f8:a1:58:0d:
                    64:b3:10:34:83:3a:fa:38:80:ef:14:cd:94:df:2c:
                    67:89:f2:95:3e:03:64:32:b4:82:c6:f9:eb:de:a6:
                    8b:31:ea:06:63:68:01:df:de:65:49:19:db:d5:9a:
                    81:9c:4c:e9:f8:39:3e:d1:5c:09:df:8f:3d:e6:25:
                    25:2d:a7:1b:b4:fa:d5:b7:b6:25:60:99:77:96:b9:
                    ff:1b:53:e1:92:7f:9e:7c:15:41:c0:5f:b1:97:3d:
                    3b:ff:ba:02:8a:34:dc:93:9b:4b:9b:e0:91:74:0c:
                    df:21:86:3c:40:7f:ed:4f:a1:c2:c0:b8:7a:bf:7a:
                    e3:80:2a:cc:7f:0c:27:c2:7d:0b:27:08:d8:a1:a0:
                    b7:8f:12:a9:96:52:47:be:36:a1:0d:f1:f3:35:03:
                    f1:c7:72:99:88:48:cd:97:ec:18:06:e9:5a:ed:7d:
                    e5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8F:82:2B:8A:F4:05:4E:B0:E6:4C:A8:55:88:C7:55:39:4A:76:06
            X509v3 Authority Key Identifier:
                keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4b:a0:b2:c2:3c:3b:d8:b2:31:d5:b6:f5:79:df:17:4a:d6:
         40:ec:de:62:4d:69:ae:3d:38:d8:09:df:20:7a:ed:3d:61:df:
         d1:8b:16:12:99:0c:cd:e7:71:85:f2:8d:86:72:8c:6c:2a:4d:
         c6:4d:4e:63:b0:cf:6e:8d:15:6a:a9:c0:e4:99:57:96:23:00:
         6b:4a:28:e9:1b:ed:a0:2c:c3:c1:af:14:3f:b6:a0:04:be:b1:
         18:65:90:01:c8:cc:79:01:41:d8:39:ff:a9:5e:89:7b:52:cb:
         1e:8c:f0:b3:20:d3:e2:d9:2f:3e:a3:77:cf:9f:56:e4:74:ae:
         f9:cc:52:8e:49:13:29:1a:ed:4b:2f:57:42:e4:5f:b5:fb:e8:
         d7:7f:c7:04:8f:ff:ca:ef:e6:9b:57:6a:ab:7d:e1:e5:e3:3e:
         66:57:7c:f1:54:58:a1:3a:ba:52:21:4d:3b:ec:a3:50:ed:67:
         1d:1b:d1:71:15:fb:83:64:90:fa:ca:dd:b8:a0:25:43:58:62:
         3b:fa:4f:4b:55:bc:d2:e9:fb:c1:1a:ac:2f:6e:20:9a:48:ba:
         03:0e:60:95:68:21:d2:fd:e3:8d:71:e7:6c:c1:e6:4a:3d:32:
         00:c2:98:3e:5b:f7:cc:c4:58:9a:f5:8f:97:16:36:e8:8c:6f:
         94:fc:54:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:14:45 2025 by rpki-client