This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
File:                     Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft (raw, json)
Hash identifier:          ve6QfpbFuNtT/DFmnGIGokTrJMnWUYl6bEprFR9zXhg=
Subject key identifier:   11:CE:E5:E9:D3:12:E8:13:DA:8A:B3:B4:C6:AB:6B:BC:E5:2B:D8:D5
Authority key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
Certificate issuer:       /CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
Manifest number:          0161
Signing time:             Tue 23 Dec 2025 03:03:45 +0000
Manifest this update:     Tue 23 Dec 2025 03:03:45 +0000
Manifest next update:     Tue 30 Dec 2025 03:03:45 +0000
Files and hashes:         1: Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl (hash: 2XzyyJT45cRRi6vm6FA5bJwgNjSxcHGBaa7otLZvHks=)
                          2: D1D880A6C4FB11EEA30ECF34C4F9AE02.roa (hash: sXO9LSsf3fJyHZpoHAHnJgUx+BT7oOg1NHM6hli9qcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
                          rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118689, serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
        Validity
            Not Before: Dec 23 03:03:45 2025 GMT
            Not After : Dec 30 03:03:45 2025 GMT
        Subject: CN=694a0691-db74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:81:17:fa:b0:84:39:38:ff:c3:37:9d:21:
                    1d:72:59:57:6e:f9:13:ed:ac:91:34:5b:1d:9f:0a:
                    72:a3:2e:06:61:13:6b:14:d6:68:ee:f2:22:0a:c2:
                    c7:63:b4:c9:f9:04:0e:93:8c:c7:77:c1:27:19:fe:
                    27:f9:1b:31:df:6f:7d:05:6e:73:5e:29:dc:12:97:
                    fb:09:cf:c1:7b:88:d2:e3:42:ad:6a:71:b7:d5:04:
                    93:7f:d1:ce:cb:89:2d:f7:73:2e:21:4b:ec:26:c7:
                    38:f8:fc:b2:04:38:4c:d4:5e:43:ab:a9:54:a0:ea:
                    bc:20:79:d0:7a:e7:8c:ea:af:db:2b:36:ff:e6:ae:
                    c0:a1:be:d0:3c:57:8d:dc:19:17:7d:c9:15:b4:ef:
                    08:24:31:60:fd:6d:ba:fe:79:99:4e:54:3e:f4:84:
                    60:57:57:e0:a4:b4:32:67:bb:5b:da:c8:fd:5c:02:
                    5b:30:f7:76:f2:b6:d2:cc:86:8d:b9:35:c5:fe:9b:
                    1b:da:45:00:2c:cf:0b:03:e2:f6:44:21:ae:84:b1:
                    95:b9:f5:9d:cc:2a:2c:be:af:c4:ed:55:2c:21:58:
                    c0:6b:99:4d:20:e9:00:54:20:2c:e1:81:89:ac:00:
                    72:11:d7:76:47:76:0a:95:31:ab:fd:ed:77:f6:8d:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CE:E5:E9:D3:12:E8:13:DA:8A:B3:B4:C6:AB:6B:BC:E5:2B:D8:D5
            X509v3 Authority Key Identifier:
                keyid:63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:23:9e:d7:47:26:fa:95:85:80:81:f1:92:f0:45:24:25:
         db:e1:65:1f:04:30:f5:44:c4:d2:05:77:9a:a4:97:29:0f:b5:
         37:ab:3b:e9:e7:c6:41:b6:9e:a4:de:1c:27:57:3c:24:58:52:
         63:30:ae:2e:d3:fe:dd:8a:fc:28:f6:b9:fe:f8:a9:c0:6e:e8:
         79:9c:03:43:c7:48:6d:5d:2d:1c:62:f5:ed:db:40:f0:f2:22:
         e3:26:56:b5:db:c1:af:b3:9c:5f:b3:e3:da:93:f8:1b:a4:df:
         f2:74:d0:79:71:38:fe:fc:22:90:7f:7d:0a:f6:64:72:b9:9c:
         bf:79:0f:25:5e:4c:57:be:64:58:1c:11:06:24:fb:5f:2f:76:
         57:6b:46:9b:ae:fd:11:aa:29:2d:68:5d:24:b4:c9:98:ef:68:
         46:62:b9:2e:13:7a:a0:48:a3:09:b9:c4:d6:a7:5b:56:7b:31:
         a6:30:fa:71:b8:32:d8:5f:d8:01:36:e4:01:cb:43:44:2a:33:
         87:ad:0d:4e:bb:4c:ca:5d:92:f1:02:5c:5e:2d:13:01:ce:55:
         00:f7:a1:02:56:00:a6:ae:91:43:76:5a:cc:a1:1d:69:64:b5:
         a7:f8:67:24:fe:ec:2e:9e:a8:61:94:ae:fb:ec:44:bc:87:51:
         50:c9:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:51:11 2025 by rpki-client