This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
File:                     ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json)
Hash identifier:          MKkL14WvsfCHBpfApOsN7/4/QhrPvSQFHrygFZSfkkU=
Subject key identifier:   13:C9:03:B0:87:6F:91:64:B3:8B:11:84:BA:76:0E:84:42:97:A0:C7
Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51
Certificate issuer:       /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951
Certificate serial:       09DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
Manifest number:          09D4
Signing time:             Mon 22 Dec 2025 19:20:39 +0000
Manifest this update:     Mon 22 Dec 2025 19:20:39 +0000
Manifest next update:     Mon 29 Dec 2025 19:20:39 +0000
Files and hashes:         1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: 821XY7nQxTLEUiRHE+V/ukhcvUrkbmIQO3tL3TzFYGY=)
                          2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl
                          rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2523 (0x9db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951
        Validity
            Not Before: Dec 22 19:20:39 2025 GMT
            Not After : Dec 29 19:20:39 2025 GMT
        Subject: CN=69499a07-580b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:4b:af:13:67:6f:1b:82:4f:ef:46:6d:5e:
                    e4:c0:89:62:aa:2c:f1:23:cf:1a:23:79:d9:31:2d:
                    52:5b:25:62:f6:fe:6b:03:1f:55:dc:67:4a:42:8b:
                    a9:3a:66:42:21:f7:8f:e5:35:0f:61:ae:aa:be:e8:
                    0b:ed:a6:1b:26:11:e6:36:bc:03:8d:a0:c9:a5:64:
                    88:8d:e3:5a:e4:80:a7:5c:24:fa:61:7d:7c:f8:2c:
                    b9:f3:f9:8b:61:25:d5:2a:bf:36:b0:9b:d2:11:51:
                    b1:09:02:25:a6:6e:30:12:35:9e:32:68:de:0a:60:
                    70:6a:20:69:d7:e6:1b:25:71:4c:dc:b1:21:48:ee:
                    7a:a0:9b:23:80:b4:be:ca:10:0a:95:e2:cb:56:c1:
                    e2:cc:db:3d:a1:62:1d:5e:bd:3c:92:89:1d:f6:5d:
                    d4:34:b7:99:b4:cc:be:dd:7e:66:99:40:ab:c1:96:
                    7e:ef:50:0b:a1:85:99:9e:93:37:89:bb:07:91:d5:
                    6d:0f:a1:34:48:14:6f:a3:96:01:32:25:96:57:62:
                    dc:50:87:26:a1:92:7d:bf:02:1f:41:d3:10:b8:00:
                    a0:c5:9a:db:a5:ae:d8:1a:da:bd:e2:98:da:8e:e4:
                    fc:d9:72:d0:24:93:f1:29:e6:c7:6b:6e:f5:11:0b:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C9:03:B0:87:6F:91:64:B3:8B:11:84:BA:76:0E:84:42:97:A0:C7
            X509v3 Authority Key Identifier:
                keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:1b:77:9e:4c:1d:9b:28:eb:7f:c0:44:b1:0a:05:24:17:12:
         40:6f:c5:62:f8:a0:44:8b:08:dc:f5:dc:c1:ab:10:4c:c2:20:
         6e:c5:4d:f2:6b:dc:de:0f:70:08:c3:5f:51:8f:43:79:fa:72:
         53:c4:f9:bc:0f:ea:8b:8b:9c:03:eb:e1:d2:a4:07:4d:64:2c:
         1f:72:25:87:27:65:5f:93:bb:92:8f:98:4c:e6:fe:21:37:22:
         25:d7:93:dd:e9:11:54:0b:6d:3f:ec:41:b5:5e:95:68:6d:95:
         21:33:0f:9c:5e:a3:3e:c2:4a:0d:2c:4d:53:9b:8f:eb:8a:e3:
         a8:cb:fd:10:88:2f:79:d4:9b:52:8c:b4:4a:c5:b4:c1:64:f5:
         38:f5:b5:6f:9c:b0:bd:f9:fd:25:ce:76:c5:23:9c:ac:32:c0:
         30:50:85:ec:4e:b0:c5:24:c0:31:77:61:bd:05:80:00:23:3e:
         4e:13:59:9a:dc:af:d3:69:b3:05:a9:f6:2e:12:1c:78:45:97:
         58:c2:89:6b:f3:01:55:35:bb:ff:f8:75:76:e7:00:be:86:70:
         c1:72:b5:23:11:9d:28:78:ab:36:84:17:80:e2:59:d5:ef:01:
         30:cc:de:08:cf:ac:e1:fe:dc:dd:b0:a7:ac:54:31:5c:cc:10:
         01:a8:1f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:33 2025 by rpki-client