This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File:                     1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier:          jtX8kAdlYDr61GEJ/Q9YmFlYQOUQ1bk602bRFXdLasE=
Subject key identifier:   68:2F:C8:1B:7E:88:14:62:24:9F:CC:92:E3:3B:A9:D8:62:64:26:A6
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer:       /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number:          011C
Signing time:             Tue 09 Dec 2025 02:53:14 +0000
Manifest this update:     Tue 09 Dec 2025 02:53:13 +0000
Manifest next update:     Tue 16 Dec 2025 02:53:13 +0000
Files and hashes:         1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: jqd9kdonKjw8AN8lfu/A1ZrBvCrR/t+NzMs8kcw7rhw=)
                          2: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: nAAKqeX52YyyXJwlWmzPJZzOWJlGdlFjHrIUMleQhJo=)
                          3: CCC81F9A703F11F0AD014F1AC4F9AE02.roa (hash: 5E8RDsoVjXmI/w7ZZOkVeITuRBDxCdB14YXNUGb/6bY=)
                          4: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: vjvAzTCHT28iPRQdCoJZnbSPvYtHv4wDBYZ54035Ceo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
                          rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 02:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
        Validity
            Not Before: Dec  9 02:53:13 2025 GMT
            Not After : Dec 16 02:53:13 2025 GMT
        Subject: CN=69378f1a-158e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:85:b0:cb:9f:be:d8:a8:e9:09:c1:81:61:
                    c5:f9:56:2e:5f:2f:e4:50:b2:16:48:06:d9:62:20:
                    36:4f:c5:58:95:c4:f2:b0:f8:cc:92:1a:6b:5b:44:
                    1c:ca:0a:a0:93:8e:83:f5:3b:ee:f6:21:b1:06:ba:
                    a5:9e:32:41:9f:b1:39:25:17:20:72:e1:80:02:79:
                    6d:d8:61:f4:65:8c:f9:4d:59:22:3e:11:19:40:f7:
                    88:a7:5e:a9:67:68:80:a3:28:3e:89:8c:ed:ac:7f:
                    f0:e8:f1:4d:bf:96:28:45:5f:62:dd:ec:f2:4f:d5:
                    d9:1c:22:58:5b:b7:6d:74:03:59:d6:cb:7e:d1:9c:
                    ed:07:db:16:f2:06:e5:16:34:64:c9:ce:61:31:2b:
                    6f:1c:7e:d7:8b:84:29:c5:b1:85:3c:ab:62:f9:cb:
                    ef:88:d6:8c:10:37:df:d4:af:1d:9b:ce:49:b7:a3:
                    d2:9f:76:d8:7e:85:4b:1b:81:06:62:73:ce:3d:57:
                    ab:a0:8e:34:9e:97:94:21:06:ee:5b:81:24:ea:79:
                    f5:f1:0f:c1:96:1d:62:ea:e6:2d:e1:5f:1d:e9:bd:
                    12:b9:e8:4e:01:65:21:28:f5:f6:55:9c:30:0e:61:
                    25:f9:b6:1a:13:a4:d8:53:d0:92:d8:d6:0a:55:c8:
                    1e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2F:C8:1B:7E:88:14:62:24:9F:CC:92:E3:3B:A9:D8:62:64:26:A6
            X509v3 Authority Key Identifier:
                keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:47:e5:16:d9:3c:9a:49:0e:00:26:cc:91:1c:58:39:4e:64:
         1a:be:9d:62:7e:19:94:cb:52:89:9b:9b:cd:8e:c8:eb:b4:3a:
         c2:8f:97:68:50:ab:43:98:2b:ae:b7:0b:45:78:36:2d:c3:80:
         f4:e4:37:83:37:7e:7c:92:41:49:e7:50:66:3f:54:63:bb:c6:
         9c:4c:f2:b9:7f:fc:03:40:67:3a:17:f0:15:f6:50:92:0f:bf:
         04:1e:fc:d5:0f:65:d9:44:25:01:91:d4:87:3a:97:89:a7:80:
         20:87:9a:3a:48:3b:7c:07:ee:89:32:2d:01:79:0e:78:a5:f1:
         51:12:fb:ce:ee:92:5b:cb:b5:46:59:8b:2a:fc:aa:54:22:b2:
         04:41:3c:d5:da:32:50:e5:e1:69:d7:a9:47:3d:c4:67:44:e2:
         a7:b1:f3:39:a4:de:5f:30:64:76:33:d4:6b:c7:2d:16:f9:36:
         4a:6e:d5:d8:ee:d4:90:b8:1b:db:1f:a1:ce:8f:ee:84:eb:7f:
         66:df:c5:03:71:69:42:ea:40:07:f8:93:cb:b7:c2:87:fe:40:
         c3:4b:18:48:ef:7a:d4:85:86:70:38:58:ec:4b:a5:ea:8f:f0:
         3d:59:9c:69:3e:3a:e6:f2:f1:b8:e3:28:21:c5:f1:db:8a:52:
         f7:0c:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 13:57:25 2025 by rpki-client