This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File:                     Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier:          wR5eifefDqzq3gkJeeOVFDNMrp5E4uhtPFGOASAo0w0=
Subject key identifier:   9E:5C:0E:5D:09:18:10:73:F1:89:5B:F7:A8:62:C0:98:7D:7A:18:06
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       3574
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number:          352E
Signing time:             Tue 16 Dec 2025 15:15:57 +0000
Manifest this update:     Tue 16 Dec 2025 15:15:57 +0000
Manifest next update:     Tue 23 Dec 2025 15:15:57 +0000
Files and hashes:         1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: em1V+gkWcdcBXXf6DO+eAx4020n6JHzM/w/1PmTOggc=)
                          2: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: XwBBgkLccrCOQa/KYpZw9ulkTxWOJIkjA80pfYyhDlg=)
                          3: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: km2MH0Iw6GW5QwrXI89g4lBCI72LIAO4pZvcSNjM0vw=)
                          4: 8D6AE850AD3911F0992C7B7CC4F9AE02.roa (hash: /55M0NnZWX6DXIC45V+UWpM/vfw1N0aS3pMri6ZFvUM=)
                          5: 0F3E8640D99D11F08333CF1766D3641D.roa (hash: pS2BtCG96+96mJXvMihVypxW8GWS5Zzf8IoBuSz2UP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 15:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13684 (0x3574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: Dec 16 15:15:57 2025 GMT
            Not After : Dec 23 15:15:57 2025 GMT
        Subject: CN=694177ad-c870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:5b:5f:ee:4f:90:26:4c:b8:44:c2:8d:73:
                    f0:ae:a2:cc:17:c0:87:e9:38:13:98:d6:a5:e8:d6:
                    bd:1e:e0:0d:d4:d8:ae:63:97:c4:18:ae:92:6a:5c:
                    07:ba:f4:57:71:ee:5d:da:b6:6c:9c:87:85:16:04:
                    b0:6b:91:cd:d6:2a:b8:50:6f:7f:12:54:36:d5:a8:
                    f1:48:c9:fc:f3:c5:af:58:6a:90:2c:76:0b:bc:5a:
                    bd:57:9f:a7:c6:cb:d5:80:f9:7c:b6:42:fa:40:b4:
                    d4:36:04:fb:90:08:6e:4c:b2:07:9f:b8:3d:76:82:
                    f9:f9:42:1a:3f:3a:5e:86:8f:0b:96:74:5d:b2:c1:
                    d0:2a:b5:c8:46:97:16:9d:5a:26:c7:50:76:b0:94:
                    b0:df:ef:4c:b2:b2:42:3a:93:fd:a8:f8:69:f6:d9:
                    e2:61:21:35:90:37:cf:73:d9:f1:25:47:e8:ea:04:
                    7c:9e:71:08:24:49:58:f5:6c:36:c2:92:7b:2f:37:
                    fb:85:fa:b8:22:f7:59:ad:22:e2:c9:f6:5a:29:88:
                    3d:57:40:8e:b9:85:66:1a:d7:e0:2f:1f:35:b4:9c:
                    67:b2:73:ab:3b:77:f9:4e:27:8c:74:44:8f:2d:09:
                    59:19:bd:55:4e:a1:9b:93:36:30:54:9f:3a:11:99:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5C:0E:5D:09:18:10:73:F1:89:5B:F7:A8:62:C0:98:7D:7A:18:06
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:43:f7:d5:e1:35:8a:1a:df:a9:71:be:49:bf:47:68:92:3b:
         c4:7c:28:76:e2:bd:2e:86:1d:c8:19:b6:58:c4:24:70:fd:23:
         c0:10:ca:06:9f:53:87:a5:b1:2f:97:ef:fb:b6:4d:1f:d5:d1:
         f6:bd:1c:8e:c5:ce:a8:96:66:16:f9:e0:f2:7e:1b:df:2b:d8:
         5a:92:50:c9:a0:9c:a7:88:5d:a4:91:3c:dc:0a:5d:64:43:da:
         c4:e7:86:db:b8:e3:8b:02:d2:0d:19:f1:cb:dd:44:60:78:94:
         63:77:7e:73:a3:10:74:0f:4c:0b:d4:8d:0f:20:4a:67:f7:03:
         97:1f:a2:47:79:94:86:86:e5:7b:6b:2e:47:cc:78:50:42:5d:
         6d:9c:38:7d:9c:e1:6b:f9:f2:ca:19:d9:fb:1e:09:0c:43:f3:
         36:b5:17:f2:b3:93:02:6f:17:28:3e:aa:c7:98:d9:c7:79:da:
         6e:2f:41:e6:55:ec:7b:8a:73:ed:47:6d:d0:c2:b1:0b:fe:eb:
         a2:8e:60:d8:08:75:44:fc:fd:64:93:28:ef:dc:3a:d0:ca:7d:
         ac:3f:09:c6:42:5b:8f:7a:1b:ea:09:9c:51:4f:61:1c:6a:9d:
         37:e3:6f:67:98:98:09:25:f9:a1:c3:08:ea:c4:a1:6d:7c:b6:
         c9:33:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 16:41:29 2025 by rpki-client