This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
File:                     yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json)
Hash identifier:          OwpIuISV7v8euZ8/iTeWSYFWdlH0daSedQCRm7QsFEY=
Subject key identifier:   F8:22:E0:5D:A2:98:5E:6C:7B:00:7F:88:97:6C:36:4E:05:56:0B:0D
Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
Certificate issuer:       /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Certificate serial:       0C66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
Manifest number:          0C5C
Signing time:             Thu 18 Dec 2025 18:20:19 +0000
Manifest this update:     Thu 18 Dec 2025 18:20:18 +0000
Manifest next update:     Thu 25 Dec 2025 18:20:18 +0000
Files and hashes:         1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: TqKZVPTKD1RCxKqo92yovtuf/3CAAkNLidQBIlkCQvc=)
                          2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: oTWmtO2mgStqeMj6jPmXnnLNrPwchhiOjUM05tQ62SY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
                          rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3174 (0xc66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
        Validity
            Not Before: Dec 18 18:20:18 2025 GMT
            Not After : Dec 25 18:20:18 2025 GMT
        Subject: CN=694445e3-739d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d7:5a:fb:0f:dc:64:31:11:59:dc:32:a5:f4:
                    73:cc:51:2d:6b:17:3a:17:17:fe:ae:34:3a:14:83:
                    75:3d:69:2b:33:1f:9f:99:f1:1c:41:ad:3f:db:ae:
                    30:73:39:ab:73:87:8f:df:ef:84:80:24:d6:8b:84:
                    38:f2:83:30:eb:64:92:9a:36:a4:53:58:78:8f:2d:
                    3a:ad:cb:f0:6d:b0:25:21:de:8c:3b:b7:96:5d:37:
                    61:7d:34:0c:38:41:4b:2e:97:29:25:63:33:f1:01:
                    15:68:06:f4:7a:3c:a1:89:76:2b:61:87:f5:05:13:
                    b3:fc:a2:66:97:0b:03:59:04:2e:f6:cc:a3:d2:b3:
                    71:8f:65:07:f3:dc:37:7e:e3:ff:95:3f:e6:c1:9d:
                    2e:6e:ee:ab:1c:5f:d4:e1:47:34:2c:54:fa:f1:08:
                    9a:5d:ac:13:73:4e:92:26:a5:76:c1:41:e5:d7:40:
                    e0:09:ac:40:ea:4c:04:b7:78:14:b0:d9:91:34:e1:
                    75:4f:7d:7b:46:3e:b0:ea:39:20:a4:36:33:e8:0c:
                    ea:6a:ab:db:20:29:c6:45:de:e9:fb:22:86:d4:5d:
                    4a:21:62:be:7f:49:14:d1:8c:35:1d:ff:54:1c:c1:
                    c4:e4:f8:71:ee:60:01:1c:1e:ef:02:72:c2:88:a7:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:22:E0:5D:A2:98:5E:6C:7B:00:7F:88:97:6C:36:4E:05:56:0B:0D
            X509v3 Authority Key Identifier:
                keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:44:15:d5:86:be:70:04:00:e5:59:4e:37:46:ae:76:20:93:
         09:31:66:e4:d0:2a:eb:3e:06:66:7b:50:c5:84:92:89:b1:f0:
         99:6f:cf:2d:e1:6b:f1:df:28:c8:f2:e9:60:ec:2c:16:cd:e0:
         7f:46:78:1f:29:b9:c6:89:d9:15:37:6b:5d:07:20:88:ec:61:
         17:69:7f:df:30:fe:bb:bd:bf:93:11:42:13:d7:3c:8b:1b:f5:
         41:22:cc:91:7b:70:9f:77:55:5d:0c:91:8d:ff:f5:71:65:f8:
         10:7e:52:69:64:df:1a:e5:d0:8e:34:60:10:b0:86:fd:a1:85:
         de:21:88:2f:20:8b:61:a3:94:30:7b:23:59:e9:bf:cb:4b:3c:
         77:08:25:45:24:d5:11:59:4c:53:0c:df:fa:cf:af:4d:59:3d:
         0a:19:4b:c7:9f:43:bd:45:80:66:aa:63:51:d0:ba:d2:80:4d:
         9b:88:61:68:f2:3a:92:d2:88:27:49:d6:4e:c2:65:d2:a5:29:
         d1:c8:f7:06:0a:81:28:81:dd:66:75:6f:90:89:1d:4a:56:b9:
         39:19:52:5e:38:64:91:10:f7:15:11:d4:a4:37:89:3a:f8:a0:
         8f:57:d9:10:12:c2:22:d8:b8:e8:37:fd:70:ef:9f:91:43:aa:
         2d:eb:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:54:20 2025 by rpki-client