This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
File:                     yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json)
Hash identifier:          B6jjVMph/HAHaxEk5XS9J3ZFVL6h3r+E4aH5NUS+6IQ=
Subject key identifier:   7A:DC:50:BF:EA:B6:D5:DC:5B:FF:01:25:A5:82:3A:EB:CE:91:64:2F
Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B
Certificate issuer:       /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B
Certificate serial:       0963
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
Manifest number:          095D
Signing time:             Mon 22 Dec 2025 19:30:16 +0000
Manifest this update:     Mon 22 Dec 2025 19:30:15 +0000
Manifest next update:     Mon 29 Dec 2025 19:30:15 +0000
Files and hashes:         1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: o+hrybRe8laA1A0C+gE83SFYbwHMM05ZCdmVeh2Cq6I=)
                          2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: SjfL0z+V8r1mG2yvSd88vw9Fy41PjMV8KGz6ODEkn2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl
                          rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2403 (0x963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B
        Validity
            Not Before: Dec 22 19:30:15 2025 GMT
            Not After : Dec 29 19:30:15 2025 GMT
        Subject: CN=69499c47-7a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:a1:6c:5a:77:f6:bb:c8:56:1b:67:18:a5:
                    46:62:e5:4c:19:2e:8f:ca:94:86:06:9b:c8:fb:96:
                    3e:18:08:41:2c:0a:3e:88:9c:d6:90:9d:67:36:38:
                    79:48:06:84:67:af:bc:40:79:62:a7:78:98:48:f8:
                    3d:9c:5f:a4:9e:bd:04:7c:20:d4:a0:da:36:5a:64:
                    e7:d8:c0:41:2c:92:ee:0e:81:29:bd:5b:a0:03:a5:
                    13:81:0f:e5:f7:bc:1c:47:66:1f:f4:03:fd:90:a7:
                    fa:e6:ec:c5:cc:44:aa:fd:b0:37:a4:a6:51:fa:ce:
                    f8:eb:01:40:a2:91:37:88:14:c8:9e:50:96:ec:9d:
                    f6:53:40:42:40:35:e2:92:f6:c8:d5:a9:03:70:7e:
                    06:aa:82:a0:95:41:c3:48:f2:cd:1e:c8:b0:76:e9:
                    f6:bc:81:2b:2b:7b:76:f7:11:b8:b6:dc:7a:1d:8f:
                    d9:ea:dc:31:63:47:51:c7:00:1a:ca:26:fc:6b:be:
                    ac:e8:5c:df:65:7f:7f:e1:1f:d3:b6:7e:26:32:81:
                    33:58:19:bf:17:37:f6:be:c4:3b:67:b5:e1:ab:82:
                    22:26:f6:21:fa:f8:4c:2d:5c:78:d6:3c:43:d8:f9:
                    51:10:dd:6a:75:ef:ad:d6:b1:fb:4c:99:ab:bd:20:
                    6d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DC:50:BF:EA:B6:D5:DC:5B:FF:01:25:A5:82:3A:EB:CE:91:64:2F
            X509v3 Authority Key Identifier:
                keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:95:18:e2:3e:ca:9a:e0:80:9a:21:c3:44:fa:05:d9:2f:68:
         bd:4b:dc:c8:c7:c1:d7:20:ca:5a:96:c1:5b:b8:c7:c6:ff:a8:
         8a:2b:03:15:6f:16:e7:7d:ef:b2:82:bd:a3:81:ab:f1:c9:47:
         17:bc:d6:b4:e2:49:18:81:ef:6b:57:6c:ae:a6:d9:16:ae:bc:
         c6:12:37:c6:9e:b9:74:08:49:d4:a3:60:ea:21:b7:c1:76:2a:
         b4:76:34:a2:24:07:9b:6b:71:87:4d:77:9c:ec:47:a3:af:df:
         a3:94:35:0e:21:85:19:d6:68:22:51:ca:68:98:2b:95:42:f6:
         b8:0a:b2:fa:df:57:ab:a9:6d:24:0e:0d:3d:35:32:fc:3e:6f:
         c1:7b:55:b5:c5:b1:52:41:77:97:ee:29:51:2d:44:ff:45:25:
         35:e9:f1:71:1c:e4:4f:c3:91:d8:f7:95:00:10:ce:72:fe:b7:
         01:d1:30:82:0f:9e:85:4e:02:ca:74:9a:03:ce:70:c8:9a:bc:
         fa:1d:05:79:93:c4:de:6c:e5:c4:12:3f:38:df:5e:0b:e1:7d:
         a2:83:b8:64:d8:52:87:4a:de:f7:73:75:33:00:e2:3c:fb:93:
         24:28:80:af:a1:c6:ab:4e:2c:48:d5:a8:0a:c3:9d:2d:3a:9b:
         c8:f3:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:27 2025 by rpki-client