This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
File:                     YeQBev9HdnE8_cggXML7IXhGK6E.mft (raw, json)
Hash identifier:          1GGPenGsKZGGMgehRFFCaWq8V4yX4owwLExHWdL4FTs=
Subject key identifier:   67:9C:C4:59:4F:9A:59:28:30:84:AB:A5:6A:F2:A7:5B:10:BB:EB:96
Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
Certificate issuer:       /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Certificate serial:       0AA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
Manifest number:          0A94
Signing time:             Thu 18 Dec 2025 19:10:46 +0000
Manifest this update:     Thu 18 Dec 2025 19:10:45 +0000
Manifest next update:     Thu 25 Dec 2025 19:10:45 +0000
Files and hashes:         1: YeQBev9HdnE8_cggXML7IXhGK6E.crl (hash: 2jxr08GNJstYgXC3VqJ9V3XS+05K2QPC8wACxQu0UQs=)
                          2: E3DD6362787A11ED89732760C4F9AE02.roa (hash: VMcYRd+8siR3JswMEyznU2Fdgu69nUJbPEZeRjRvvQ8=)
                          3: 1B2FD0247B3511F0AB5E9728C4F9AE02.roa (hash: BSU1YtaPy+k/TzpvEr7vkS6sqBC2QgKnaMQMqvgHJ20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl
                          rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2722 (0xaa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A824, serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
        Validity
            Not Before: Dec 18 19:10:45 2025 GMT
            Not After : Dec 25 19:10:45 2025 GMT
        Subject: CN=694451b6-143f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:b7:c3:ba:e4:e9:45:81:50:11:22:ba:50:
                    20:b2:a8:ad:d3:32:6f:be:86:d1:2f:42:8a:b0:c7:
                    7f:04:55:ed:08:14:58:a2:80:1c:7b:aa:be:57:f2:
                    d8:d1:8b:9b:db:d1:45:8b:be:88:ad:39:48:65:69:
                    37:3c:8d:78:06:b5:e0:35:91:60:db:6f:02:45:08:
                    c6:6a:19:af:11:d7:9a:1b:50:6c:8f:30:8d:ba:73:
                    7d:0b:17:35:5e:f0:ac:f4:5c:cf:bf:0e:0d:81:c8:
                    3b:c4:e1:84:48:2f:e3:2e:39:73:4c:1c:45:11:bd:
                    e2:b2:36:6b:19:bd:46:22:cf:c7:79:bd:93:8a:7e:
                    83:3e:4a:2f:f7:a1:cd:08:3a:e1:ef:c5:5b:6c:83:
                    04:96:a5:b6:5c:b6:65:63:fe:25:d7:b5:87:62:0c:
                    9d:bc:0b:1e:86:b9:56:bc:2c:14:81:99:d3:40:c5:
                    15:ab:0f:c9:a9:0d:63:97:6b:b8:3b:65:46:3f:2a:
                    ff:07:13:3d:84:8c:ba:18:38:d9:71:f9:10:c2:68:
                    45:ec:62:ca:93:62:09:54:e3:6b:91:ba:e5:cb:73:
                    ff:27:09:5c:a6:e2:b7:f6:39:be:27:05:56:f4:12:
                    32:cf:77:ca:01:8c:c5:04:f7:5f:d3:d6:e7:23:2e:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9C:C4:59:4F:9A:59:28:30:84:AB:A5:6A:F2:A7:5B:10:BB:EB:96
            X509v3 Authority Key Identifier:
                keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d8:57:5d:7d:14:b8:2d:48:aa:05:1d:48:ad:fc:d6:89:b1:
         5f:3c:a7:eb:e7:a5:93:fb:af:6d:39:6a:f0:cd:cd:28:45:4c:
         40:fa:fe:20:43:77:a4:04:1d:47:d4:d4:ce:9b:f5:ef:f3:93:
         08:5a:70:7e:d3:14:70:9c:17:cc:14:20:f3:6f:33:c7:57:51:
         c9:f7:88:02:37:69:ca:f0:9b:05:06:a8:a7:89:72:a7:1c:c1:
         5a:6f:f5:5a:42:d8:40:66:79:a2:bc:ed:ff:41:af:6c:a8:5c:
         5d:56:dd:eb:4d:74:80:5e:4b:b5:82:b7:a5:e9:6b:31:45:35:
         20:51:a3:1d:da:c3:fb:1d:f8:5b:87:50:95:b5:cd:9d:f6:95:
         7d:cc:9d:cf:c9:fb:ef:a5:59:49:43:bb:63:44:4d:ac:47:45:
         ab:c5:51:1a:af:3c:6f:26:00:c7:1a:e4:40:f6:1a:47:c5:11:
         ff:c8:c1:f0:33:31:df:6b:13:68:97:71:29:6b:17:c4:30:8b:
         28:81:40:b5:99:52:cf:9e:7e:9e:83:00:82:ea:c2:d0:d4:66:
         7d:89:54:de:13:e1:16:ca:db:a2:4d:fb:fb:7c:40:b2:44:27:
         8b:59:8f:7a:78:0d:11:12:73:df:06:19:be:47:b8:4a:a3:a4:
         8b:c9:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:07:47 2025 by rpki-client