This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
File:                     zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json)
Hash identifier:          vHInHrdtkDHOl9uFemK/zPW6KaDsxTiK7bLYBR1MwQs=
Subject key identifier:   0B:5A:97:D4:C5:9C:2A:92:4A:4D:E8:9A:98:CE:8F:B5:F5:33:10:C5
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Certificate issuer:       /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
Manifest number:          0184
Signing time:             Fri 19 Dec 2025 02:53:26 +0000
Manifest this update:     Fri 19 Dec 2025 02:53:26 +0000
Manifest next update:     Fri 26 Dec 2025 02:53:26 +0000
Files and hashes:         1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: e+Ng8GBKlcA2FyFNZVcuRPX8zxPuCZT9E8ep6nF3Qd0=)
                          2: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: cOcYEcKHuf/JYD0AEBC5IpcPkABHQnNi85MejRVjkMU=)
                          3: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: 05BxmRyvKNcOlG0da2lnXsYOxEsMKdSx2ZRkaVaMWv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
                          rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
        Validity
            Not Before: Dec 19 02:53:26 2025 GMT
            Not After : Dec 26 02:53:26 2025 GMT
        Subject: CN=6944be26-0319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:d2:7a:a6:34:3f:a8:77:57:2a:a6:53:5c:
                    40:c9:2a:50:f6:08:f7:67:af:13:54:bd:11:d3:c8:
                    5a:ad:ae:2b:01:4e:82:74:b9:09:fb:63:d9:2b:3f:
                    eb:c8:ae:9f:f5:cf:06:27:7c:72:c5:82:ce:f8:91:
                    c6:a3:7e:95:c8:70:9f:65:99:13:de:0e:87:12:9c:
                    89:1e:fb:ab:de:a4:c4:3a:f9:f5:a8:e8:65:e7:28:
                    35:0f:c6:eb:86:4d:f1:00:0a:ba:63:ae:a3:8e:a5:
                    65:cd:e7:be:1b:48:a6:d3:12:3b:24:92:d4:0b:b3:
                    eb:25:f2:74:16:be:d1:8e:38:ad:da:6a:97:68:43:
                    92:89:e2:b2:82:27:99:29:8f:7b:70:b0:4e:7e:62:
                    f1:2b:bf:11:a2:aa:58:f5:b4:5b:c2:59:ac:3b:a5:
                    c9:f2:ed:ad:cd:f5:08:d9:11:44:46:5d:54:42:86:
                    4a:90:fe:e1:4c:60:eb:22:95:77:99:1c:59:f3:a0:
                    c7:f6:a7:65:a9:7b:24:bf:ff:72:c6:bd:7f:7f:2a:
                    58:39:59:8b:22:46:6a:d1:a3:94:68:2f:1b:95:bb:
                    2d:38:bf:81:24:36:9c:8f:b7:1f:81:62:ad:55:56:
                    4e:7b:fb:76:2f:61:2e:b8:10:d6:93:51:a6:16:7b:
                    fb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5A:97:D4:C5:9C:2A:92:4A:4D:E8:9A:98:CE:8F:B5:F5:33:10:C5
            X509v3 Authority Key Identifier:
                keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:71:ef:cc:4e:e7:5c:25:a4:06:fd:fe:4f:50:19:6a:95:d1:
         66:5a:01:e8:60:20:58:e2:07:a9:fc:ff:40:ce:8a:5b:a0:81:
         9e:c0:13:69:a3:e8:84:2c:52:d4:7c:17:7d:64:56:52:58:65:
         cc:79:63:0a:1b:c0:f4:3e:88:9d:9b:6a:1f:80:ba:35:a6:62:
         e8:f4:e0:1d:11:c4:cd:3e:b3:b3:16:c7:44:0f:f9:ad:3b:75:
         7d:fa:a4:93:b4:3b:f4:6b:33:1e:bf:cd:be:20:95:6b:bf:d4:
         3a:95:a6:d4:11:79:ac:1a:e6:81:3a:4c:ee:87:5d:32:1c:65:
         ee:36:ac:78:4e:56:8c:ca:d4:24:e5:f4:9b:9d:8e:af:d4:18:
         a9:55:72:56:19:e4:e6:ce:87:d6:a3:17:26:48:c6:67:35:59:
         99:56:ea:0c:0c:c6:0c:8a:1c:92:32:ea:a3:40:86:6e:93:53:
         2d:52:78:33:17:83:93:14:0e:fb:fd:8e:1b:46:e5:c3:f4:9f:
         21:cb:1f:6a:0a:af:d8:e4:59:5e:53:79:e7:4a:f9:5d:7c:42:
         2d:31:09:b2:3b:9d:99:c7:86:f4:2b:93:16:76:02:83:d0:71:
         a7:fe:36:9b:b9:dd:dc:cb:fe:99:eb:73:62:bc:e4:20:35:d8:
         52:9b:07:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:51:10 2025 by rpki-client