This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
File:                     ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft (raw, json)
Hash identifier:          5Vm0Sk0MnxrKNe1Mc3TJhrFp9e2UrE+xD895H9033uQ=
Subject key identifier:   99:EA:D1:ED:E1:51:52:17:94:27:4B:6E:67:29:EF:D9:5C:8C:3C:28
Authority key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14
Certificate issuer:       /CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
Manifest number:          E9
Signing time:             Fri 19 Dec 2025 04:34:08 +0000
Manifest this update:     Fri 19 Dec 2025 04:34:08 +0000
Manifest next update:     Fri 26 Dec 2025 04:34:08 +0000
Files and hashes:         1: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl (hash: FMBfgPTxC7Zf6XR57bqWGjvB00PcqG3aaGaYYdczvcM=)
                          2: 86998830806F11EF91F9E57CC4F9AE02.roa (hash: zuZnWcJxNflnoIsWXIqoUOj1sGwHZyfS7R+rQUgHs48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl
                          rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C645, serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
        Validity
            Not Before: Dec 19 04:34:08 2025 GMT
            Not After : Dec 26 04:34:08 2025 GMT
        Subject: CN=6944d5c0-d13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:17:e2:10:27:7f:e1:8c:6a:83:05:8e:2d:e9:
                    6b:7b:43:23:48:d4:f8:8a:c4:6f:6d:3f:25:3d:c5:
                    33:dc:74:cc:eb:fb:44:f4:39:14:c3:51:94:14:44:
                    6a:d5:4f:35:35:c6:05:d5:c8:72:6b:c9:56:54:f8:
                    f2:48:dc:42:9d:fe:d5:92:78:5b:41:24:dc:09:33:
                    93:6f:d7:e4:d0:4b:3d:6a:77:fd:a0:90:85:5f:c4:
                    43:46:7e:a4:03:e0:c7:c2:25:50:0e:71:1a:80:e0:
                    f1:e8:61:88:e9:6c:56:04:ad:8b:79:0a:9e:f0:5a:
                    8d:90:25:97:4a:25:eb:9a:31:08:57:d6:48:07:f5:
                    9a:6f:8f:10:f4:87:f9:b9:47:b0:db:62:ae:6d:1d:
                    cc:97:2c:fd:21:c7:21:74:22:34:de:52:76:49:ac:
                    42:9d:40:9a:4c:48:19:24:d2:9f:c6:43:8f:fc:70:
                    1f:a4:2c:83:f9:a9:42:99:37:70:72:e1:dd:b6:a0:
                    78:67:a4:6d:6f:74:98:47:51:1b:f7:c1:8b:9c:b0:
                    6b:ff:03:d3:0b:c3:da:ed:72:29:9f:e9:b8:53:7b:
                    c5:d3:87:9e:f8:32:71:67:82:64:d8:53:c8:9c:23:
                    62:09:71:fd:21:b7:00:48:13:7f:6f:c4:93:e5:b4:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EA:D1:ED:E1:51:52:17:94:27:4B:6E:67:29:EF:D9:5C:8C:3C:28
            X509v3 Authority Key Identifier:
                keyid:CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:c3:e7:c7:94:88:c6:1d:42:1b:11:1e:3f:43:43:b2:d4:74:
         84:84:43:bf:6d:85:d2:1d:3f:f0:7c:b2:ae:52:82:27:e2:e2:
         cc:65:58:94:13:e4:32:99:c4:5e:76:46:73:12:8c:7f:e3:1f:
         d6:29:4a:25:59:5a:b2:b5:64:25:6a:62:cb:7e:a3:eb:2e:90:
         c3:39:d5:0e:72:4a:c9:50:24:4a:d0:1f:31:1f:08:63:05:1c:
         37:e4:8f:4d:53:41:bc:85:1e:67:32:c5:e4:12:94:96:59:1a:
         28:8d:09:8b:30:c9:f6:3c:7d:ab:0c:bf:8f:0b:e1:5b:d5:30:
         a9:eb:3e:d2:38:07:da:6e:ac:80:6a:da:06:a3:1a:28:ba:3c:
         fb:0a:da:2e:c1:3a:c4:74:ad:25:59:77:92:af:7f:2d:c3:48:
         ec:ee:55:e0:b0:9a:f5:70:41:49:d7:da:87:5f:4b:84:68:32:
         70:6d:4c:b0:ab:44:ea:17:27:b7:c7:a8:a2:f9:51:45:79:5f:
         46:0d:65:2d:05:d2:fc:fe:6f:12:ef:64:7b:f1:6d:22:15:60:
         7d:55:80:12:cb:07:5a:77:f4:cc:3f:07:b6:5b:b4:6b:8a:3f:
         69:65:69:7c:5d:33:73:de:70:07:f2:ae:94:68:c3:62:0a:c5:
         60:0c:25:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM2NDUxMTAvBgNVBAUTKENCMEMzMzBFMzgzNzk0OEZFNURERkE2MDQ3MzI3NzVE
NEIwQ0Y4MTQwHhcNMjUxMjE5MDQzNDA4WhcNMjUxMjI2MDQzNDA4WjAYMRYwFAYD
VQQDDA02OTQ0ZDVjMC1kMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6BfiECd/4YxqgwWOLelre0MjSNT4isRvbT8lPcUz3HTM6/tE9DkUw1GUFERq
1U81NcYF1chya8lWVPjySNxCnf7VknhbQSTcCTOTb9fk0Es9anf9oJCFX8RDRn6k
A+DHwiVQDnEagODx6GGI6WxWBK2LeQqe8FqNkCWXSiXrmjEIV9ZIB/Wab48Q9If5
uUew22KubR3Mlyz9IcchdCI03lJ2SaxCnUCaTEgZJNKfxkOP/HAfpCyD+alCmTdw
cuHdtqB4Z6Rtb3SYR1Eb98GLnLBr/wPTC8Pa7XIpn+m4U3vF04ee+DJxZ4Jk2FPI
nCNiCXH9IbcASBN/b8ST5bQhJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnq0e3h
UVIXlCdLbmcp79lcjDwoMB8GA1UdIwQYMBaAFMsMMw44N5SP5d36YEcyd11LDPgU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzY0NS8xRUVFQkQyMjgw
NkYxMUVGOEI0NUQ3NzlDNEY5QUUwMi95d3d6RGpnM2xJX2wzZnBnUnpKM1hVc00t
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l3d3pEamczbElfbDNmcGdSekozWFVzTS1CUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzY0NS8xRUVFQkQyMjgwNkYxMUVGOEI0NUQ3NzlDNEY5QUUwMi95d3d6RGpnM2xJ
X2wzZnBnUnpKM1hVc00tQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDMw+fHlIjGHUIbER4/Q0Oy1HSEhEO/bYXSHT/wfLKuUoIn4uLMZViU
E+QymcRedkZzEox/4x/WKUolWVqytWQlamLLfqPrLpDDOdUOckrJUCRK0B8xHwhj
BRw35I9NU0G8hR5nMsXkEpSWWRoojQmLMMn2PH2rDL+PC+Fb1TCp6z7SOAfabqyA
atoGoxooujz7CtouwTrEdK0lWXeSr38tw0js7lXgsJr1cEFJ19qHX0uEaDJwbUyw
q0TqFye3x6ii+VFFeV9GDWUtBdL8/m8S72R78W0iFWB9VYASywdad/TMPwe2W7Rr
ij9pZWl8XTNz3nAH8q6UaMNiCsVgDCVZ
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:28:24 2025 by rpki-client