This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
File:                     SL_YCBmvF_vAh15iBvAoIqewTpg.mft (raw, json)
Hash identifier:          4MwquFjrZcjY66DVT0g+dqkd044gcXAE564LmEo/m48=
Subject key identifier:   EB:6C:51:E9:2A:99:35:84:E1:25:2F:9A:BD:C6:03:BF:F4:EE:9F:30
Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
Certificate issuer:       /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
Manifest number:          0477
Signing time:             Tue 23 Dec 2025 01:20:07 +0000
Manifest this update:     Tue 23 Dec 2025 01:20:07 +0000
Manifest next update:     Tue 30 Dec 2025 01:20:07 +0000
Files and hashes:         1: SL_YCBmvF_vAh15iBvAoIqewTpg.crl (hash: vyuTul/ScGIcC48NI9vD5kUO+EItmurp1ElWY5oSbvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D, serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
        Validity
            Not Before: Dec 23 01:20:07 2025 GMT
            Not After : Dec 30 01:20:07 2025 GMT
        Subject: CN=6949ee47-fff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:79:ee:a1:85:68:2e:ec:c7:3a:18:0b:60:
                    71:8e:cf:49:84:da:17:52:e8:b3:42:e5:ea:6f:18:
                    d2:27:00:e1:1d:ac:e5:93:12:59:89:ec:cc:cd:e9:
                    0d:bf:99:fc:1b:8d:dd:d6:8a:31:72:f9:b5:cc:77:
                    ca:3c:da:f1:9e:3b:8d:bb:b3:42:7c:58:ce:39:8f:
                    03:a1:b5:48:c1:6a:c8:7f:b9:70:8b:46:19:ce:42:
                    10:14:61:1d:79:70:b0:8d:5d:87:4a:81:ca:c5:17:
                    c0:27:db:a6:6f:03:e9:53:55:33:12:9b:cd:26:25:
                    e9:68:a5:bd:2b:df:38:e2:6d:f4:fc:65:3a:de:a0:
                    73:bb:62:83:08:f4:a3:79:38:85:04:26:8e:29:4c:
                    1c:4c:cb:08:c5:35:07:69:02:c5:96:0e:6a:15:ee:
                    1d:f5:9f:17:d3:3d:61:f1:0a:91:a2:d9:25:f6:21:
                    d5:c0:20:9e:2e:04:9b:bc:78:32:14:45:66:62:53:
                    d8:13:98:17:37:11:e1:ee:70:96:ab:f6:eb:dc:63:
                    8b:5e:17:8c:80:c1:bb:cd:71:22:93:12:75:2b:7b:
                    21:69:76:eb:01:4d:e8:26:e1:26:61:de:1b:b6:ef:
                    13:38:d9:8c:44:37:88:7b:b3:88:b3:a3:d5:db:e1:
                    98:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6C:51:E9:2A:99:35:84:E1:25:2F:9A:BD:C6:03:BF:F4:EE:9F:30
            X509v3 Authority Key Identifier:
                keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c0:8f:c1:ec:8f:76:70:bd:bb:4c:49:b6:1a:29:f6:99:1f:
         6d:d3:7d:4b:10:b7:ea:88:fb:52:d1:e2:49:18:80:66:5c:c2:
         c2:5d:b3:de:bc:6a:1c:66:ec:70:28:54:2d:b6:0d:08:c8:e1:
         ff:fd:7b:7d:6c:a4:fb:e7:11:a4:be:93:20:81:87:f4:41:bc:
         6b:e7:55:9e:4a:91:26:3c:6a:7d:a0:0a:ee:66:74:be:a0:d2:
         17:c7:9c:19:84:22:93:ad:b6:6b:25:a6:1b:1c:5f:ee:30:8f:
         88:6b:53:85:6b:1d:cd:11:d5:55:d8:c6:b9:3a:32:82:82:dc:
         9c:45:1f:87:c8:b9:a4:c4:b3:4b:5c:bd:40:f6:89:89:ae:8b:
         d1:ec:08:80:75:bf:0b:1b:b8:7b:7e:e4:15:e3:ca:94:d8:eb:
         60:d8:c4:2e:23:6f:ee:9b:90:d8:13:76:d7:fd:05:48:bb:e6:
         87:0a:f7:9a:51:aa:7a:77:ce:fc:60:6d:5f:0b:14:90:0c:4a:
         e3:66:fa:a8:6a:94:bd:c6:fa:b1:77:99:2f:84:d9:4e:a7:5e:
         f9:c8:d2:71:1c:ae:0f:c9:bd:07:31:16:bd:4d:25:58:15:16:
         6b:83:ae:91:ae:bc:bf:43:b2:b8:c8:ee:38:54:77:7f:cf:6d:
         a1:df:c2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:04 2025 by rpki-client