This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
File:                     YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft (raw, json)
Hash identifier:          pw7MnYFqkz8EQuqvcxZ3gW9Z2Xqc2NP/pVNOFDr0pzQ=
Subject key identifier:   E0:87:2A:75:C8:4A:CF:2B:8A:A6:BA:CE:01:FF:74:DA:51:1D:7A:31
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Certificate issuer:       /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
Manifest number:          04F1
Signing time:             Mon 22 Dec 2025 23:37:27 +0000
Manifest this update:     Mon 22 Dec 2025 23:37:26 +0000
Manifest next update:     Mon 29 Dec 2025 23:37:26 +0000
Files and hashes:         1: YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl (hash: bXh2E9lH+dM03tSeMEVUBpBTAJq1cOAcdKmfF7+c5ao=)
                          2: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (hash: vft+eU4CpaMMVegJX2IoSc61ijnWeC2pmFFJGifleEc=)
                          3: B39CC5D0999C11F0B916112DC4F9AE02.roa (hash: 6q41hoRYSlGeQU/2jAswtSG8NBRB1otmd5Vb7tbOxSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
        Validity
            Not Before: Dec 22 23:37:26 2025 GMT
            Not After : Dec 29 23:37:26 2025 GMT
        Subject: CN=6949d636-ca8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:fa:2f:9c:29:6b:55:a4:c3:b1:21:72:13:
                    ce:bc:a1:55:a0:06:27:f8:6b:52:4b:cd:96:e7:aa:
                    f4:30:78:5b:a9:d9:f6:c4:c1:45:98:ea:75:fc:75:
                    bf:d7:d4:db:84:6e:a4:c4:0d:57:31:ad:f5:30:a9:
                    ea:f0:29:e7:63:e8:c4:c5:e8:80:93:46:65:2f:27:
                    dc:6c:e6:8a:5a:af:18:0f:9e:75:2a:2c:b1:24:17:
                    0f:01:97:32:f6:bf:4e:64:ba:fb:74:72:66:cb:fa:
                    b4:bc:59:fb:c9:b5:f5:75:f7:c8:cf:97:7d:f7:16:
                    16:10:36:be:46:a2:22:c0:73:31:16:98:8a:3b:99:
                    e4:17:79:a0:45:0e:91:a6:24:46:ef:fc:88:bc:2e:
                    6e:f9:da:58:3c:81:0d:da:a3:c9:6a:f1:e0:0e:b7:
                    d9:cb:69:f2:59:9a:a9:9c:a9:67:ce:cd:e7:ea:4e:
                    7b:70:79:a2:88:9c:88:84:33:38:06:9c:74:1b:40:
                    96:69:00:77:10:e0:42:d0:24:de:47:2e:a9:c6:8a:
                    dd:b3:67:bb:2f:c8:ef:b4:be:29:ab:bc:af:d9:cf:
                    a3:21:e0:ea:77:e5:9a:f7:e4:e4:29:de:68:ee:c9:
                    66:0f:f2:45:34:d8:82:bb:80:9f:20:94:57:92:48:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:87:2A:75:C8:4A:CF:2B:8A:A6:BA:CE:01:FF:74:DA:51:1D:7A:31
            X509v3 Authority Key Identifier:
                keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:59:67:f6:1f:6f:07:29:e4:d3:bf:ee:f8:fe:fc:d8:26:b1:
         c1:f4:60:a6:b1:73:10:68:d5:98:c1:e3:f7:36:56:4f:df:29:
         8f:d7:49:24:f9:c0:ce:20:72:89:f5:51:a9:0e:8c:c1:b4:16:
         4a:aa:e1:76:38:87:6c:f3:0c:73:00:18:d6:84:f2:34:db:1a:
         f5:d1:7a:20:aa:32:ad:15:57:ae:37:c2:8f:c5:f6:be:4b:00:
         66:82:59:4d:c4:00:85:4d:26:6b:2b:8a:22:e2:6c:8a:37:35:
         04:5f:5e:da:b9:a4:89:33:9e:86:44:f8:20:9d:0e:42:87:3f:
         42:18:2d:14:a2:38:aa:23:cc:44:34:3a:0a:78:75:cc:28:98:
         94:8a:e4:ed:27:29:86:dc:11:f9:0b:0a:c5:d7:94:b3:d5:37:
         d4:df:11:33:71:be:43:13:d5:80:61:ad:83:8c:4e:9b:e4:87:
         34:40:7a:4c:53:f8:eb:5e:0e:4f:f6:46:69:bb:dd:70:a1:5a:
         d5:ba:c5:b1:06:ee:2c:37:04:77:a3:53:3f:65:2a:16:41:9a:
         2b:3e:bb:29:6f:c8:5b:70:61:2b:2e:ec:48:a8:18:f9:28:15:
         e9:1c:c8:0d:17:49:b9:c4:0f:c4:24:7c:6c:41:46:41:7d:68:
         93:1e:3a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:00:39 2025 by rpki-client