This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
File:                     YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json)
Hash identifier:          vAjowUIIoNa5GgTDYBAVoP4kZxmiaFFGm2NTeY/Wo78=
Subject key identifier:   B9:E8:AE:24:60:20:EA:C5:E8:27:63:FA:35:F5:61:FB:5E:64:4E:08
Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8
Certificate issuer:       /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
Certificate serial:       1BD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
Manifest number:          1BC6
Signing time:             Mon 22 Dec 2025 16:01:46 +0000
Manifest this update:     Mon 22 Dec 2025 16:01:46 +0000
Manifest next update:     Mon 29 Dec 2025 16:01:46 +0000
Files and hashes:         1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: fU9fLrWhQd5IdIX5xCYv7MA3rAOeMa6+m3EuLSDD3is=)
                          2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: CIx5a/KDORd4MxJLQ+psYC26naN8iQLI+AuxYnr9L/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl
                          rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 16:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7120 (0x1bd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
        Validity
            Not Before: Dec 22 16:01:46 2025 GMT
            Not After : Dec 29 16:01:46 2025 GMT
        Subject: CN=69496b6a-f50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:de:cf:e0:c4:98:49:0b:a0:73:ef:97:6b:
                    5f:a7:8a:ec:d9:13:70:e9:a4:64:db:82:2a:6c:14:
                    42:df:bb:ab:94:28:9f:59:aa:0f:3e:ee:b2:e1:34:
                    ce:9b:1a:28:c4:bd:22:53:e5:a2:97:6d:97:51:0f:
                    18:50:ff:86:01:fd:9c:b7:db:df:50:2d:b5:1f:f5:
                    02:ed:86:31:72:fd:60:5b:67:a8:73:6c:83:44:46:
                    35:a4:db:1f:f2:a5:c6:ad:4a:e8:98:28:3f:56:b6:
                    54:6f:b2:95:7e:bf:6e:fd:60:4b:e6:b6:35:c8:a9:
                    0d:76:b2:a8:61:9e:d1:73:ce:28:01:44:bd:c3:03:
                    2b:bd:bf:71:22:99:f2:fc:9c:9b:62:9c:9e:07:b9:
                    12:d8:f0:c6:c1:a4:75:ea:73:ab:e9:81:84:6e:5c:
                    2d:20:ae:c4:17:ca:82:ba:2c:2c:d0:b8:26:1c:a7:
                    71:62:a3:7f:cd:1b:14:e4:91:04:5f:83:92:13:3c:
                    87:1c:45:48:08:8a:8d:5c:f9:a1:e0:91:d9:b7:ab:
                    42:d8:13:f2:97:91:e2:7f:b7:9a:2d:91:79:c6:7b:
                    2e:1b:fa:e4:6e:75:30:e4:a7:48:df:e7:77:15:96:
                    82:f8:08:ea:31:86:fd:15:33:0c:40:82:35:40:e3:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E8:AE:24:60:20:EA:C5:E8:27:63:FA:35:F5:61:FB:5E:64:4E:08
            X509v3 Authority Key Identifier:
                keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c2:dc:cb:11:20:b3:a6:81:45:56:e6:4d:c8:e4:03:ae:f5:
         80:5b:bd:e3:ac:84:c1:e2:8e:69:37:df:e5:d8:39:4b:3b:d9:
         c8:f4:23:c4:38:f2:f2:ac:55:04:45:05:94:f6:56:87:be:9b:
         16:b4:f6:6f:16:76:57:91:eb:c4:47:80:43:e3:af:54:65:3c:
         89:bf:af:eb:c7:a1:f0:04:0c:d7:83:63:b1:dc:dd:f5:ae:85:
         93:db:ac:4d:da:9c:e3:7a:e1:6c:b4:a2:1f:43:ab:9a:ef:20:
         25:0a:14:4c:90:a0:a0:e9:57:61:bb:6f:67:db:a9:8e:6e:cb:
         ce:b0:2a:f2:14:30:0e:88:d4:e0:12:44:68:10:90:ec:cd:8f:
         2f:86:84:58:b1:8c:0d:26:0c:f5:86:e0:c5:39:43:26:a0:72:
         43:df:81:98:76:2f:72:64:70:5d:9e:90:0f:33:66:bf:0b:e6:
         42:cf:80:ef:6b:08:69:a5:85:64:88:e4:bd:39:c0:e9:17:c6:
         f4:b0:24:41:09:ad:44:38:c5:c8:39:7c:88:24:f4:0c:d9:49:
         9c:de:72:29:1b:be:08:33:bb:19:0f:63:af:30:09:a1:83:e1:
         de:75:11:1c:2c:23:d7:f0:77:4b:49:fd:79:f9:86:19:41:2b:
         73:3f:08:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:28 2025 by rpki-client