This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
File:                     yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json)
Hash identifier:          1hmx3MWYi6z4ALV+JP8OjHg1Lf7lOZK+Itio52OtyrE=
Subject key identifier:   B7:54:1D:7D:B5:CF:74:2F:BB:03:22:B7:02:9B:EA:8B:2D:B1:BC:0C
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Certificate issuer:       /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
Manifest number:          0247
Signing time:             Tue 23 Dec 2025 00:47:29 +0000
Manifest this update:     Tue 23 Dec 2025 00:47:29 +0000
Manifest next update:     Tue 30 Dec 2025 00:47:29 +0000
Files and hashes:         1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: vWBmjEaEXs+d52GZKXG1Zfz4BJewSH9Buqo7p+pF/ec=)
                          2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: 0dlbreUmhOPpVhne6aJZBNls5GiTDrN1TntwCVFUe0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
                          rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
        Validity
            Not Before: Dec 23 00:47:29 2025 GMT
            Not After : Dec 30 00:47:29 2025 GMT
        Subject: CN=6949e6a1-e7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:d0:70:54:07:49:75:e3:4f:fb:46:a2:4e:
                    12:f5:ea:ae:db:24:d0:12:91:84:85:89:aa:d2:4b:
                    0c:a9:ad:fc:c8:93:0c:12:ed:79:5f:be:e7:88:83:
                    82:fd:27:8a:71:83:23:25:58:5b:a8:8c:b5:88:50:
                    29:d4:88:48:8b:82:fc:33:96:6c:9f:7e:3e:ea:87:
                    0d:cf:32:e2:1e:f5:74:c3:2f:07:52:39:38:6d:63:
                    7d:0c:35:fe:49:8c:ab:65:ba:e2:f4:6a:65:ab:94:
                    9f:06:b8:fc:3f:a1:99:f3:eb:c7:09:4c:48:01:3b:
                    5c:0f:62:3f:aa:fa:9c:93:4f:63:dd:85:d5:2e:0d:
                    12:4e:cc:9f:c6:bb:c8:8a:80:d4:e8:a5:15:bc:9c:
                    94:03:89:c9:20:e4:09:51:6f:b7:b8:60:98:ec:47:
                    87:b8:98:c9:96:ab:55:5b:bf:79:4e:56:21:6a:f8:
                    b8:e8:dc:36:0f:99:38:ac:f0:5a:2b:0d:8e:4e:2f:
                    ba:e5:a2:a6:d7:43:4a:a8:7a:54:b1:ea:ae:6a:c5:
                    1e:f8:83:de:ef:95:43:e2:00:ed:ea:26:a0:5c:d0:
                    5f:57:67:3f:09:e1:d7:fe:7a:e0:8b:61:e3:16:79:
                    20:e8:44:44:ce:8c:a4:60:08:90:8b:65:b0:7b:98:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:54:1D:7D:B5:CF:74:2F:BB:03:22:B7:02:9B:EA:8B:2D:B1:BC:0C
            X509v3 Authority Key Identifier:
                keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8e:d3:55:31:86:19:b1:34:e2:a5:d6:5a:f0:d5:a1:ae:87:
         ec:87:58:0f:66:69:c4:e7:03:ad:cd:85:4c:70:29:b8:08:af:
         be:7f:ac:e3:f0:c0:9e:a6:3d:b5:4d:6e:70:f2:74:0b:30:ea:
         b2:30:62:01:1c:37:00:46:05:cd:72:ed:9e:16:41:7e:a4:2f:
         46:34:12:b1:4e:eb:d4:66:76:37:8e:dd:54:ad:31:43:40:bf:
         fe:d0:e3:49:2d:d6:86:68:7b:dc:e6:6c:97:6e:50:cd:a5:6a:
         a9:2f:e5:bd:76:d9:e4:d8:76:7a:ee:46:79:35:d2:e1:41:b8:
         e4:74:66:bc:62:14:8c:bf:72:fd:42:7f:d3:e6:76:d8:25:91:
         9a:e2:65:8b:9e:b7:4c:e7:c4:31:04:f1:ca:ae:6a:4f:df:ea:
         c9:24:44:45:02:e6:2d:58:71:9e:a4:d0:37:08:3d:72:c5:37:
         ab:6d:0c:36:f3:04:fc:a1:d0:e8:d2:be:2a:e9:62:9c:21:95:
         e3:2d:1a:fb:f2:b2:10:49:bb:60:7c:af:a5:7f:c9:69:21:2d:
         60:c1:4d:ba:84:a8:7f:9c:4a:c6:a8:2e:e0:4b:7c:b0:8f:cb:
         c6:cb:51:f2:01:3e:a2:7c:c9:68:39:22:98:1e:8d:f1:77:95:
         3a:29:87:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:26 2025 by rpki-client