This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
File:                     Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json)
Hash identifier:          bsHNRhVQETqYZp4JeETIi5TgE3zXRzEvM6uOO4ignFI=
Subject key identifier:   57:28:6A:25:53:95:FC:DE:DC:C0:B8:70:24:F6:76:48:C6:C7:51:86
Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8
Certificate issuer:       /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
Manifest number:          018C
Signing time:             Fri 19 Dec 2025 02:45:39 +0000
Manifest this update:     Fri 19 Dec 2025 02:45:38 +0000
Manifest next update:     Fri 26 Dec 2025 02:45:38 +0000
Files and hashes:         1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: A2Bc0VPhNkPsZPFHU4aPTY1XOcUyFrUimcsZ4dQCWII=)
                          2: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: kE++w6dMe6vv6iJt/yZB/08Yge3JgxZFXfCsI1Cs/54=)
                          3: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: 7uI5yVeYioLWbZ9dXVVN3HJtivNs33ypPPCY5KYoiS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl
                          rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8
        Validity
            Not Before: Dec 19 02:45:38 2025 GMT
            Not After : Dec 26 02:45:38 2025 GMT
        Subject: CN=6944bc53-19e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cc:52:95:35:b2:49:5f:24:5b:97:ce:3f:21:
                    f0:1e:88:5d:5c:15:1b:ce:c0:50:cc:ef:b6:e7:bd:
                    51:98:58:5f:33:96:5e:e0:57:3c:da:97:43:a5:69:
                    df:ea:b2:95:23:e4:46:81:90:d0:66:f0:f9:ca:f4:
                    4d:39:ed:6a:84:15:3a:b7:d6:18:de:f8:21:d9:69:
                    85:f2:50:5c:4f:e0:29:b5:41:c4:15:c8:e4:54:88:
                    cf:29:76:5b:40:93:49:1d:5a:1e:a8:68:f6:7c:45:
                    e1:ad:11:7d:cc:a3:13:16:75:6f:8f:15:c4:0a:4e:
                    9f:c7:83:0a:b1:2d:86:d3:0d:f1:af:af:da:a0:bd:
                    b7:9d:2b:d3:c9:d7:9e:28:85:e1:2a:40:81:10:e2:
                    f6:ab:0d:34:da:79:6d:79:49:e0:df:44:da:20:1f:
                    a6:73:9c:19:21:ab:96:49:86:8d:a2:21:99:d6:66:
                    be:aa:f7:e1:c5:3a:ca:03:03:3b:6c:2a:16:df:9a:
                    79:bb:97:04:8b:45:27:87:38:c6:7c:fd:69:d7:bd:
                    d5:ad:63:1a:15:07:4c:1e:60:c5:7e:13:85:a9:65:
                    de:a2:4d:b9:4c:ea:2e:7b:02:25:d0:0c:dc:e2:6e:
                    f5:1a:d8:3e:b4:5c:86:9c:3c:00:ec:98:b6:d7:62:
                    27:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:28:6A:25:53:95:FC:DE:DC:C0:B8:70:24:F6:76:48:C6:C7:51:86
            X509v3 Authority Key Identifier:
                keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8d:49:53:7f:33:69:1d:1d:eb:ff:07:ad:bc:ce:ea:60:34:
         ff:3e:a2:ad:f2:f4:a5:dd:b6:27:e9:bc:ac:18:02:d9:49:0d:
         01:e8:3d:1c:f4:63:61:0f:24:54:d4:0c:5d:42:7d:b8:77:7e:
         e4:ea:81:0d:58:10:56:a9:c7:39:06:8b:51:45:1e:a3:f3:2c:
         44:70:7d:df:e7:0d:76:21:10:64:60:0d:2e:b5:1e:fb:10:a9:
         c8:a5:d8:e8:b1:bd:3a:f1:ca:6e:14:b0:94:a9:2d:14:38:dc:
         fe:29:9e:c3:be:30:c1:39:f5:6d:c7:e1:20:cd:ca:77:35:56:
         1f:10:b0:b8:8e:7f:fa:91:25:a2:16:ec:38:27:cc:6f:c8:ea:
         43:b5:1e:60:e0:7b:ef:e6:1e:87:0e:98:bc:a3:f0:38:12:65:
         84:f0:b1:51:52:8a:74:4d:e6:16:7b:66:07:e4:ce:88:a4:1f:
         75:9b:ea:e2:0b:d2:55:49:f0:51:99:68:6e:8a:18:b3:bb:d5:
         68:11:2f:b8:e8:4f:2d:fa:27:50:47:5d:0e:a8:53:58:c8:73:
         e2:56:e8:12:76:25:b0:58:01:47:12:ab:64:13:e2:aa:1e:0a:
         70:9e:b5:d8:3b:e6:11:e6:71:44:c8:64:7f:43:65:5e:99:40:
         8c:a0:6f:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF
QzBBODc2RjgwHhcNMjUxMjE5MDI0NTM4WhcNMjUxMjI2MDI0NTM4WjAYMRYwFAYD
VQQDDA02OTQ0YmM1My0xOWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA28xSlTWySV8kW5fOPyHwHohdXBUbzsBQzO+2571RmFhfM5Ze4Fc82pdDpWnf
6rKVI+RGgZDQZvD5yvRNOe1qhBU6t9YY3vgh2WmF8lBcT+AptUHEFcjkVIjPKXZb
QJNJHVoeqGj2fEXhrRF9zKMTFnVvjxXECk6fx4MKsS2G0w3xr6/aoL23nSvTydee
KIXhKkCBEOL2qw002nlteUng30TaIB+mc5wZIauWSYaNoiGZ1ma+qvfhxTrKAwM7
bCoW35p5u5cEi0UnhzjGfP1p173VrWMaFQdMHmDFfhOFqWXeok25TOouewIl0Azc
4m71Gtg+tFyGnDwA7Ji212InhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcoaiVT
lfze3MC4cCT2dkjGx1GGMB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz
N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w
TmFtLUhNdXZXXzdzQ29kdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB/jUlTfzNpHR3r/wetvM7qYDT/PqKt8vSl3bYn6bysGALZSQ0B6D0c
9GNhDyRU1AxdQn24d37k6oENWBBWqcc5BotRRR6j8yxEcH3f5w12IRBkYA0utR77
EKnIpdjosb068cpuFLCUqS0UONz+KZ7DvjDBOfVtx+Egzcp3NVYfELC4jn/6kSWi
Fuw4J8xvyOpDtR5g4Hvv5h6HDpi8o/A4EmWE8LFRUop0TeYWe2YH5M6IpB91m+ri
C9JVSfBRmWhuihizu9VoES+46E8t+idQR10OqFNYyHPiVugSdiWwWAFHEqtkE+Kq
HgpwnrXYO+YR5nFEyGR/Q2VemUCMoG/z
-----END CERTIFICATE-----
Generated at Fri Dec 19 10:26:01 2025 by rpki-client