This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier:          cLRoCG4hNd2iE6SR2mP2Kvrt5SnGQ5PT8yCcWxLncSA=
Subject key identifier:   6B:5C:F2:CC:0F:94:56:5C:5F:24:92:62:6B:AB:71:B5:AA:63:A2:83
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number:          023E
Signing time:             Tue 23 Dec 2025 00:54:47 +0000
Manifest this update:     Tue 23 Dec 2025 00:54:47 +0000
Manifest next update:     Tue 30 Dec 2025 00:54:47 +0000
Files and hashes:         1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: /MM+KVuYolStdozpfi9ndXEtK6jn1S9MVaLXg4aYHPc=)
                          2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: GPH0EzTOvf8jZ7f6MSDgIy6jbOQ54/6c8g2ijkFuu3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Dec 23 00:54:47 2025 GMT
            Not After : Dec 30 00:54:47 2025 GMT
        Subject: CN=6949e857-baed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:bd:e2:a9:59:b7:20:61:44:f8:41:eb:3d:
                    4e:8f:f6:41:1b:09:8a:49:80:a3:b7:94:e2:e5:dc:
                    66:21:5e:63:7f:eb:e0:73:27:a5:9d:9a:42:cd:26:
                    31:fb:10:59:53:22:53:89:06:24:d0:8f:d3:2a:15:
                    f2:79:ea:2e:eb:6a:37:02:0e:77:5e:32:09:61:ab:
                    99:10:d9:29:bb:0b:ed:4f:65:64:6d:4b:c0:e6:70:
                    af:70:66:8e:14:b7:10:38:13:eb:a6:c2:e2:d5:15:
                    46:69:8c:0c:b2:5b:5f:04:3a:02:93:e5:4e:8a:93:
                    df:99:40:03:67:ba:05:eb:bf:61:58:bf:fe:96:3c:
                    d6:67:15:98:45:8b:d5:8f:6a:22:58:a9:53:9a:14:
                    d8:18:b9:5a:bc:a1:a2:b9:a3:53:15:f4:0b:4e:e9:
                    ed:48:7f:18:3e:fb:44:9e:35:6f:d7:12:34:c6:a4:
                    9b:cb:38:a1:1a:a3:64:c8:0f:16:bc:8e:33:71:2e:
                    59:c5:0d:7f:47:ff:e7:82:c7:ea:2e:97:1a:35:6a:
                    0e:8f:af:7e:32:a4:80:63:5c:7a:56:21:9c:72:d0:
                    d7:49:38:c8:a7:d1:39:84:ad:47:72:d7:ad:4e:d0:
                    67:3a:29:5c:93:0e:19:dd:ec:e7:4b:11:01:d9:4a:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5C:F2:CC:0F:94:56:5C:5F:24:92:62:6B:AB:71:B5:AA:63:A2:83
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:ca:c1:1f:c3:8d:ab:12:10:fd:ca:c2:fe:48:d9:ca:1b:
         c8:e4:75:39:5f:38:f2:11:03:42:9c:95:d8:58:05:c5:e6:55:
         c3:8b:b3:ac:67:73:66:68:29:7a:2d:6d:ec:09:01:48:ed:8e:
         de:e6:2b:73:da:f9:fc:29:8c:49:5e:63:12:65:9e:75:83:75:
         a8:72:e7:a8:d7:f3:33:3d:ec:f8:1f:32:1d:f8:29:3f:15:5c:
         fe:87:45:d1:81:28:e0:ee:62:b2:36:62:5d:37:30:06:bf:da:
         e6:f9:17:87:d2:8f:3f:e8:cd:9f:61:35:fd:75:73:c7:bc:97:
         d1:36:1a:97:b4:26:10:03:c3:ad:2f:fa:13:80:a9:16:dc:ec:
         ea:ff:e4:1b:e6:59:3d:6e:55:ba:cc:a0:82:ca:07:41:25:d8:
         4b:3f:ae:05:a0:b8:de:c4:0e:b0:16:54:ea:37:06:54:46:85:
         1c:d2:49:01:73:50:a8:0b:7a:13:75:a6:52:4c:de:d2:c7:4e:
         50:44:c7:69:71:ac:c9:4e:69:6a:d0:44:3b:64:98:92:25:fc:
         dd:5c:78:80:85:eb:6e:43:2e:56:b7:e0:73:17:81:a6:2f:eb:
         bb:2e:64:9d:e5:6f:7c:75:03:d0:48:5c:bd:3b:14:53:14:01:
         f9:2f:2b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:57 2025 by rpki-client