This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft
File:                     7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft (raw, json)
Hash identifier:          bLbwBzcbAzx+2831oWFc5wL3nf63W61uf0WgP57sefo=
Subject key identifier:   0E:F0:E6:6E:C5:8E:DA:D2:17:4F:75:37:BD:D8:FD:A7:DC:E3:32:B5
Authority key identifier: ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70
Certificate issuer:       /CN=A9180542/serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70
Certificate serial:       0DD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft
Manifest number:          1432
Signing time:             Mon 22 Dec 2025 17:31:06 +0000
Manifest this update:     Mon 22 Dec 2025 17:31:06 +0000
Manifest next update:     Mon 29 Dec 2025 17:31:06 +0000
Files and hashes:         1: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl (hash: jPNp1fuWEXcdylbcTlQvXu4tqergFs6Q6FSFm2c4OT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl
                          rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3545 (0xdd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180542, serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70
        Validity
            Not Before: Dec 22 17:31:06 2025 GMT
            Not After : Dec 29 17:31:06 2025 GMT
        Subject: CN=6949805a-71a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:e7:38:a7:a3:28:1b:f6:9a:e2:ff:f4:82:
                    62:4f:4a:c8:78:b0:b2:0f:bd:89:b2:34:97:30:2c:
                    15:8f:37:d8:36:7f:5b:a4:07:2d:82:25:39:46:1b:
                    77:0b:b2:dc:d8:a3:9b:a9:57:14:aa:2e:b0:e4:68:
                    5c:2d:76:e6:ce:be:65:b1:67:b8:71:f4:54:96:c1:
                    bd:6e:ff:c3:d5:b3:93:86:53:df:65:69:19:71:24:
                    de:97:fe:b7:cd:e3:95:53:f1:cd:7f:92:df:bf:20:
                    94:54:8b:f1:46:02:42:4d:2d:f1:ed:1a:5c:15:f6:
                    1f:d2:b8:4c:e9:55:eb:4e:cf:b0:78:59:e1:42:fe:
                    8d:72:5d:58:79:74:4e:7e:8f:91:b9:d0:cd:07:f3:
                    e0:7e:c4:d0:b5:ab:05:38:cc:d1:0e:c6:4b:d9:b4:
                    60:e7:f7:27:a3:7a:aa:fe:e7:6a:36:cb:12:0d:68:
                    66:fb:e6:31:2e:28:41:6e:1a:83:03:f6:5d:02:c9:
                    a0:9d:06:90:ac:03:a5:24:36:28:1a:9d:19:bf:0d:
                    48:a4:2c:e8:8f:d0:65:d3:10:e0:f2:be:28:3b:63:
                    fc:55:fa:0d:a0:e9:77:30:d9:17:fd:24:dd:e8:30:
                    ac:98:35:6f:24:6d:bd:f7:c3:b1:b3:ec:13:88:cc:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F0:E6:6E:C5:8E:DA:D2:17:4F:75:37:BD:D8:FD:A7:DC:E3:32:B5
            X509v3 Authority Key Identifier:
                keyid:ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:21:99:60:6c:fe:98:89:4a:d5:c6:e0:2f:cc:9f:aa:9f:4f:
         5f:66:81:a0:72:7d:eb:2a:c5:f7:6c:7c:65:2e:6f:50:06:ea:
         60:30:3a:59:16:f5:71:c8:2f:8b:4c:5d:6d:6c:55:d2:43:66:
         b7:2c:cc:99:f3:46:48:4d:25:4c:11:d2:c9:10:35:77:e0:26:
         52:cb:a5:22:b6:3e:a6:25:96:6b:06:1b:5c:9a:77:2e:e0:34:
         bb:7c:77:f0:d6:37:45:fb:ac:e0:aa:b3:8b:67:fb:9f:fb:26:
         f2:d4:07:74:77:9f:8d:4f:93:54:18:13:01:34:a5:76:d3:ea:
         89:68:25:bf:52:69:bd:2d:d3:da:18:a3:2d:fd:df:a9:a0:70:
         fe:b3:bf:5e:55:4f:db:55:bb:03:a7:24:67:f9:2d:b7:c9:6f:
         a0:e8:a2:6c:d2:04:8e:70:bf:95:ef:c3:8a:05:aa:cc:1b:bc:
         97:04:c3:c1:bf:d1:53:e1:b5:34:5e:ec:41:19:13:ad:0b:a7:
         21:ca:d8:98:71:9d:38:63:0b:e9:e5:05:a5:6b:ca:7f:9d:a8:
         e1:a0:e4:24:da:2b:2a:f8:08:7a:5d:55:8e:60:ab:3d:a2:97:
         70:fb:2a:aa:9e:10:14:e8:52:2e:35:ad:fc:c8:61:cb:e9:93:
         dc:cc:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:17 2025 by rpki-client