This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
File:                     aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft (raw, json)
Hash identifier:          ynWBC6SGI2Ge9aDURWfGrmp4HKinHaMuOQcfCaFH3BA=
Subject key identifier:   A7:45:4D:D7:9D:2C:76:28:C9:EB:4E:9E:85:F2:EA:7F:56:10:05:ED
Authority key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10
Certificate issuer:       /CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710
Certificate serial:       1510
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
Manifest number:          1510
Signing time:             Mon 22 Dec 2025 16:33:08 +0000
Manifest this update:     Mon 22 Dec 2025 16:33:07 +0000
Manifest next update:     Mon 29 Dec 2025 16:33:07 +0000
Files and hashes:         1: aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl (hash: i6X6+fcN9E45KWWG3cCvXS1tLzk7rWjyWELZ4HFygEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl
                          rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 16:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5392 (0x1510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174125, serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710
        Validity
            Not Before: Dec 22 16:33:07 2025 GMT
            Not After : Dec 29 16:33:07 2025 GMT
        Subject: CN=694972c4-3ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:22:6d:83:33:b6:e9:d0:72:d4:7d:2b:64:
                    af:6a:1a:34:96:34:76:8b:6f:6f:b4:34:91:a1:4a:
                    90:1b:86:73:f9:ef:f0:3e:47:f4:f6:2d:8d:3f:47:
                    bc:26:4a:66:35:a2:f7:b6:77:12:c3:e7:c9:d1:b9:
                    d4:f1:00:2c:4c:b7:90:44:66:28:e0:62:ce:47:a9:
                    4c:be:b2:ab:20:fa:f6:f9:f2:e3:89:be:d0:49:07:
                    bd:78:6a:ba:5d:eb:03:3e:29:b4:6d:c4:cf:9b:83:
                    7a:fe:25:bc:6f:d3:de:3c:8e:af:db:fe:17:92:1c:
                    06:1d:b6:56:5b:91:9b:3d:b8:c6:b5:fc:d8:fb:22:
                    7e:29:5c:1e:55:30:b4:4e:17:91:eb:cd:26:2a:b2:
                    1e:e1:eb:77:9e:72:b8:5d:e3:b1:11:07:07:82:fd:
                    45:cc:ce:a7:71:35:e0:58:84:45:9f:66:63:d1:a4:
                    7a:cd:6e:4d:a7:92:d0:86:32:89:1d:26:c9:fe:60:
                    9d:47:8e:09:59:2b:88:39:5b:8d:b5:75:20:04:4f:
                    94:43:ad:f0:3f:0a:b5:aa:a8:89:b9:15:3a:a3:5e:
                    1c:72:39:de:32:94:3f:90:92:b1:54:a6:44:d6:0d:
                    bc:e6:f1:0c:b4:93:a7:17:92:d1:ec:bc:85:6f:0b:
                    27:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:45:4D:D7:9D:2C:76:28:C9:EB:4E:9E:85:F2:EA:7F:56:10:05:ED
            X509v3 Authority Key Identifier:
                keyid:68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9d:af:eb:1f:bc:0e:30:2f:78:ee:6d:21:3f:85:22:1a:59:
         d1:44:3d:e1:34:89:3a:c5:3e:1a:26:7a:82:25:4d:3f:20:41:
         5d:83:14:fe:4f:97:30:96:4c:b1:1e:13:23:86:d8:11:c0:dc:
         24:70:d4:e1:80:87:93:31:bb:a7:48:4e:d7:21:de:c4:ee:5f:
         dc:fb:fe:9c:bb:c2:3a:64:fe:de:0a:25:e0:34:35:37:a9:93:
         4f:ea:a5:36:08:43:d7:3f:1b:03:f2:28:ed:d6:db:43:a3:a1:
         ef:07:df:34:66:ed:b5:03:ae:ad:13:9c:a4:62:48:4b:b8:f2:
         ea:4f:f7:fd:a5:1d:d1:3e:f0:d7:8e:f2:d4:86:27:e5:b4:ea:
         5c:ae:16:f0:a7:20:48:62:d4:1c:52:69:a8:08:05:29:1f:78:
         df:53:c2:79:a0:d1:ef:8f:2f:c5:06:d8:a8:32:ea:99:cb:40:
         5a:71:dd:19:f6:95:58:6b:ec:5e:b9:c4:70:4c:58:b7:ab:e5:
         9c:62:82:5c:b8:f9:d6:77:5c:4d:c2:fc:88:87:0f:97:54:bf:
         1d:a6:de:c7:43:72:fd:e4:cc:0f:7d:06:83:74:8e:a7:92:bc:
         68:3d:6e:ae:32:bf:77:03:93:07:d0:9a:c2:98:a1:71:d7:d7:
         7e:96:86:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:43 2025 by rpki-client