This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
File:                     yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json)
Hash identifier:          78iqE93BoVMiLJhA/NKNGaS3kvfHKqB9391sm6w6+mQ=
Subject key identifier:   A9:CD:53:D5:E2:76:68:CD:A4:04:9A:78:6D:06:F4:24:99:E3:80:1F
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
Manifest number:          01CD
Signing time:             Tue 23 Dec 2025 01:56:52 +0000
Manifest this update:     Tue 23 Dec 2025 01:56:52 +0000
Manifest next update:     Tue 30 Dec 2025 01:56:52 +0000
Files and hashes:         1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: mIQuhVZqy4SnDGXjqPERiVxkdErWBVH6fi+MXXJ/YUA=)
                          2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: CaEKHRoKKS0xih9+MI5NnGo2p0uXvy+Gde+CICjV6ME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
                          rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: Dec 23 01:56:52 2025 GMT
            Not After : Dec 30 01:56:52 2025 GMT
        Subject: CN=6949f6e4-bd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:91:79:45:7d:5e:6e:56:24:93:ab:e2:7d:
                    dd:7e:b2:fe:70:ad:3c:22:75:88:a8:9b:a1:9c:25:
                    e4:ab:90:df:38:a8:c7:63:8f:72:21:7a:7e:1d:f8:
                    b0:27:67:e1:c4:78:d1:24:f7:73:4e:7f:f2:41:3c:
                    2e:34:ea:9a:1f:00:1a:b9:20:76:2f:9a:01:ee:b3:
                    89:1f:e1:b1:b9:03:c8:73:fa:e2:e1:e1:ac:9f:b5:
                    96:e7:5f:91:03:33:bd:3c:07:1f:98:75:ff:8f:22:
                    81:1f:e4:10:a6:91:4e:7e:39:5e:1b:04:35:f9:33:
                    9d:ea:c5:ec:af:b5:2b:33:aa:9b:b9:57:ed:29:3b:
                    19:cf:46:b7:c5:9c:47:ad:f5:57:fe:dc:c1:ef:f3:
                    6c:9f:97:8b:4e:c0:86:db:b2:60:fa:d7:0e:10:36:
                    18:6e:0b:fb:64:dd:cb:b8:2f:1a:3c:71:ad:d9:af:
                    24:26:6d:3d:b6:1a:f7:28:6d:c6:22:bf:2e:59:3e:
                    22:37:6e:b6:31:9e:c6:92:62:68:43:bd:43:16:10:
                    16:7b:45:50:ac:96:15:fd:b6:56:9b:83:e7:93:53:
                    58:56:23:84:43:35:e3:d9:0d:19:f5:b0:e4:22:05:
                    10:f7:97:29:b8:06:a2:74:b6:ad:b9:b7:86:b2:49:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CD:53:D5:E2:76:68:CD:A4:04:9A:78:6D:06:F4:24:99:E3:80:1F
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:40:c9:aa:ba:7d:75:15:6a:06:40:0a:35:d9:03:40:4f:24:
         a4:e0:84:82:4a:32:23:db:9c:b8:4a:d0:8b:80:40:df:49:79:
         47:24:76:29:c0:d1:c2:5c:be:61:63:39:2f:1e:82:56:c3:dc:
         c3:7e:43:8f:ea:d1:69:d1:97:37:47:63:00:5b:ca:0e:29:fc:
         b8:a1:98:62:be:9a:8e:38:b5:40:16:af:12:8f:b1:25:34:4f:
         1f:e8:55:81:b8:01:98:1f:df:f7:7e:17:04:50:c8:e6:aa:b5:
         28:01:d6:d6:4e:4f:49:d2:fe:bf:49:a9:cf:c1:4a:98:a9:b5:
         d2:54:3d:60:61:7c:03:25:d9:f9:40:8d:66:a7:ca:71:ec:c6:
         fd:0f:66:9e:e2:bc:81:63:9d:3f:2f:01:2a:ed:14:1b:1e:9e:
         82:ea:d5:0a:35:54:df:99:bd:07:6a:d1:c2:0c:5f:cb:81:de:
         34:90:47:d0:c3:3b:ce:d2:c3:64:18:e8:95:bf:93:27:b1:10:
         95:0a:81:67:ca:ba:ce:a5:61:fa:38:c9:a9:80:48:65:65:40:
         99:b9:8b:fa:4b:b1:f0:b0:9d:09:78:5a:e3:c0:f4:ab:54:d5:
         b5:15:81:68:9d:31:fb:4d:0c:91:3a:97:29:e2:f8:87:be:dd:
         e9:92:eb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:29 2025 by rpki-client