This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
File:                     y36OVMh-Ac6Gec_lUPH-myNhCD4.mft (raw, json)
Hash identifier:          WZW45GRVaOtQlbuHViYRAQZpC50XEIwdU8wLsGyyWFE=
Subject key identifier:   97:18:39:28:2F:46:79:DC:51:46:45:A4:9F:30:2F:34:84:11:1A:67
Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E
Certificate issuer:       /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
Manifest number:          017E
Signing time:             Sun 21 Dec 2025 03:01:25 +0000
Manifest this update:     Sun 21 Dec 2025 03:01:25 +0000
Manifest next update:     Sun 28 Dec 2025 03:01:25 +0000
Files and hashes:         1: y36OVMh-Ac6Gec_lUPH-myNhCD4.crl (hash: jSpXCsomvi0sPpmFRgXoE2lMUZ7Z+xw05RaQe7sjef8=)
                          2: 1C977098A54911EEA5726C58C4F9AE02.roa (hash: nXtaThu3TIoFMtdBr1ku1oMROARCmy4V1hsNkYKjwTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl
                          rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 03:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE01, serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E
        Validity
            Not Before: Dec 21 03:01:25 2025 GMT
            Not After : Dec 28 03:01:25 2025 GMT
        Subject: CN=69476305-738f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:b4:3e:2a:a3:c5:ae:f4:bd:e1:8e:c8:9e:
                    f7:e3:4f:38:d0:1b:f5:9e:82:b5:c6:e9:fc:40:18:
                    12:d4:f6:0c:90:4e:84:a2:df:86:5f:bb:21:b3:58:
                    09:7e:a4:86:f3:55:e4:8e:ad:3f:b3:28:2d:60:46:
                    f3:07:4a:98:2a:0a:5c:d7:fc:89:67:a0:6f:30:fa:
                    82:90:40:5e:3f:6f:26:50:e0:29:b9:18:12:0b:90:
                    40:69:7e:cc:ce:11:a7:18:7f:39:62:eb:93:f4:42:
                    4c:79:74:03:2b:dd:9d:99:fe:49:5f:e9:83:4c:09:
                    95:ee:f3:35:80:d3:e3:81:94:06:55:c4:8e:33:ea:
                    04:1a:99:36:2e:df:19:fe:18:c0:ad:d2:c3:a1:d2:
                    51:4f:85:72:90:b7:e3:7d:f6:84:7a:d7:b7:4e:9c:
                    2c:40:93:6b:15:b3:ef:94:9c:95:85:9f:24:22:31:
                    49:80:16:7e:29:49:a7:c3:13:8e:f0:81:44:83:f0:
                    21:70:af:60:08:ed:e7:7e:9b:46:ba:82:8e:7a:a6:
                    4e:86:96:b4:45:c7:84:4f:c9:cc:7b:c9:ae:6e:43:
                    70:8c:39:69:c5:dd:e5:2b:c7:ca:6e:b1:6d:e9:32:
                    ff:d6:38:9f:fb:f2:19:5c:13:20:73:55:28:1c:b2:
                    fe:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:18:39:28:2F:46:79:DC:51:46:45:A4:9F:30:2F:34:84:11:1A:67
            X509v3 Authority Key Identifier:
                keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7e:72:6e:1a:c9:50:51:69:11:3b:4a:40:5f:05:b1:63:50:
         fc:a6:81:7a:22:e1:0a:b5:33:e7:30:c7:b4:d8:c5:11:93:7c:
         6f:ff:fc:0b:69:90:4e:12:92:6b:58:f6:f1:42:e4:26:6f:58:
         a0:ab:13:fe:da:41:6a:45:9c:c2:5c:4f:d8:25:5a:f5:70:c7:
         92:a1:15:f5:48:19:d3:d4:7a:d9:0f:fc:ae:4f:06:74:f8:84:
         ec:7b:66:5a:11:de:b5:ae:c8:6e:2b:15:fd:c0:f2:02:bd:48:
         f1:09:c6:ff:52:11:1b:6d:6c:1b:50:7a:3e:f9:d5:58:86:4e:
         41:42:b2:bd:24:0d:a3:4f:be:e7:d1:07:1e:cf:cb:be:b2:01:
         61:a2:57:2e:f6:d1:5e:62:96:2f:7b:70:a1:98:3e:07:96:3a:
         9e:79:5b:9b:0c:06:f2:c6:03:06:eb:e5:a6:92:5b:ec:f2:e4:
         9b:00:86:fa:3e:92:85:22:ed:24:ad:c6:38:c5:a6:58:b9:a5:
         f7:25:35:1d:7e:6f:b0:f9:bc:5c:30:7a:04:75:63:14:dd:ca:
         09:56:88:c6:f9:74:69:57:8b:1b:31:6c:76:db:85:6a:97:7c:
         c9:66:e7:ff:ec:14:57:03:8f:41:54:a3:52:5f:b8:db:de:fb:
         19:ba:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:30:57 2025 by rpki-client