This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
File:                     ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json)
Hash identifier:          1vuF7FR9+POQwR8Qvn0mqlPZp8ISsx4kj+83pJRffGA=
Subject key identifier:   1D:B7:16:48:FA:5E:80:66:42:54:F4:C4:45:9A:1B:95:96:DC:BA:32
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Certificate issuer:       /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial:       2563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
Manifest number:          2546
Signing time:             Mon 22 Dec 2025 15:35:28 +0000
Manifest this update:     Mon 22 Dec 2025 15:35:27 +0000
Manifest next update:     Mon 29 Dec 2025 15:35:27 +0000
Files and hashes:         1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: 1RycecV1TcGE/nkosMKVsxDfzQjOGK6vqhAZKG67z/c=)
                          2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: 2tz7LMjITp7vanRGF3Qd5TIIIj7fKWHmsVgw8s6O7nY=)
                          3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: W5nO0Dm01E1L0J0RrwxDTx9HsKlaz3AShpTaXk9sHks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
                          rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 15:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9571 (0x2563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
        Validity
            Not Before: Dec 22 15:35:27 2025 GMT
            Not After : Dec 29 15:35:27 2025 GMT
        Subject: CN=6949653f-0070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:17:1b:64:f2:04:73:ea:b6:93:8e:bc:04:
                    51:5e:80:2e:e7:b0:aa:c0:44:48:42:20:2c:0f:53:
                    54:66:ac:da:f1:de:e7:29:aa:d4:25:44:8d:07:77:
                    d5:be:3a:11:c8:b5:bf:f6:c0:22:fa:ea:40:18:d8:
                    58:99:3c:1f:9f:08:8e:42:af:3f:ab:b0:80:11:09:
                    88:da:a2:1e:e7:19:0d:f2:90:4f:d7:b9:f0:95:71:
                    f9:d7:7f:fe:93:d8:eb:f6:73:41:e9:e9:86:40:72:
                    b6:2e:c2:68:22:ad:99:d8:89:a1:0d:91:0a:eb:e5:
                    87:45:4f:3a:3f:d6:34:e1:98:a2:9c:db:c0:77:94:
                    b4:b2:b0:07:b2:d4:d9:d4:30:b5:ac:e2:80:69:2b:
                    ac:91:80:54:6d:10:68:82:57:5a:b7:51:b9:e8:80:
                    bd:db:45:1f:b9:17:80:b1:10:a3:ba:a4:18:1a:40:
                    ca:92:bf:6a:aa:0f:54:f6:46:8b:cd:d9:ba:31:cc:
                    59:f9:f4:e6:d4:74:80:37:cc:a4:60:37:76:39:09:
                    6a:cf:b4:d0:15:b0:bd:89:eb:42:82:74:07:84:73:
                    a5:b9:f8:4f:cd:5d:bc:53:5b:8c:a1:71:f7:45:d4:
                    32:61:c9:e1:80:3c:c0:82:c4:eb:78:ad:45:54:2e:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B7:16:48:FA:5E:80:66:42:54:F4:C4:45:9A:1B:95:96:DC:BA:32
            X509v3 Authority Key Identifier:
                keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:35:7b:2d:05:8e:23:4e:fa:93:58:31:85:7a:d0:c1:6f:
         71:10:3f:fa:ee:86:29:ee:19:82:07:8a:01:fc:8a:7d:dd:57:
         5b:6e:c0:36:c0:70:f6:7d:0f:39:0b:76:f7:36:ec:71:d3:5c:
         f2:5b:70:a0:1d:6d:d9:11:8d:17:76:99:6b:31:7c:47:5a:a7:
         a2:ca:a3:06:3d:90:6f:e2:6b:fa:33:61:dc:02:e9:ca:dd:24:
         38:ea:d8:52:bd:ae:2f:d9:b5:2a:ab:c4:ba:32:cf:2d:4b:b2:
         7f:af:64:02:17:20:f8:4b:33:f4:cc:8c:f6:fd:d3:33:09:8a:
         58:e5:09:dc:c8:19:6b:61:60:de:4d:54:aa:7c:f6:f2:93:58:
         94:11:76:98:89:62:46:f9:8f:55:b0:ab:be:16:a1:09:51:61:
         1c:26:07:2e:75:d7:a8:0f:6d:56:e0:dc:3c:ef:ca:88:01:af:
         7e:5b:5e:0c:cf:02:20:a1:c7:2b:d2:ef:fc:7f:f7:d3:c5:cd:
         fe:45:08:32:e0:a5:86:a2:95:ed:aa:70:7b:d0:67:74:1c:df:
         8f:e0:03:5e:f7:20:41:6b:e4:93:1c:62:c0:ad:c8:d1:d4:53:
         91:5b:7b:0c:d0:fe:c9:d8:46:d4:c7:93:6b:dd:aa:9a:fd:1d:
         74:43:cd:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4
N0QyRDhGNTcwHhcNMjUxMjIyMTUzNTI3WhcNMjUxMjI5MTUzNTI3WjAYMRYwFAYD
VQQDDA02OTQ5NjUzZi0wMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr94XG2TyBHPqtpOOvARRXoAu57CqwERIQiAsD1NUZqza8d7nKarUJUSNB3fV
vjoRyLW/9sAi+upAGNhYmTwfnwiOQq8/q7CAEQmI2qIe5xkN8pBP17nwlXH513/+
k9jr9nNB6emGQHK2LsJoIq2Z2ImhDZEK6+WHRU86P9Y04ZiinNvAd5S0srAHstTZ
1DC1rOKAaSuskYBUbRBogldat1G56IC920UfuReAsRCjuqQYGkDKkr9qqg9U9kaL
zdm6McxZ+fTm1HSAN8ykYDd2OQlqz7TQFbC9ietCgnQHhHOlufhPzV28U1uMoXH3
RdQyYcnhgDzAgsTreK1FVC5N4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB23Fkj6
XoBmQlT0xEWaG5WW3LoyMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3
MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm
TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAOODV7LQWOI076k1gxhXrQwW9xED/67oYp7hmCB4oB/Ip93VdbbsA2
wHD2fQ85C3b3Nuxx01zyW3CgHW3ZEY0XdplrMXxHWqeiyqMGPZBv4mv6M2HcAunK
3SQ46thSva4v2bUqq8S6Ms8tS7J/r2QCFyD4SzP0zIz2/dMzCYpY5QncyBlrYWDe
TVSqfPbyk1iUEXaYiWJG+Y9VsKu+FqEJUWEcJgcuddeoD21W4Nw878qIAa9+W14M
zwIgoccr0u/8f/fTxc3+RQgy4KWGopXtqnB70Gd0HN+P4ANe9yBBa+STHGLArcjR
1FORW3sM0P7J2EbUx5Nr3aqa/R10Q826
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:18 2025 by rpki-client