This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
File:                     yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json)
Hash identifier:          TQDevJZn6kVj3a+M0kbMf88k89IyJTljhxVSFni5NPE=
Subject key identifier:   1E:56:FA:62:A1:7F:4C:60:9C:6A:20:33:8B:89:FD:D9:02:FF:79:0E
Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
Certificate issuer:       /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
Manifest number:          7D
Signing time:             Fri 19 Dec 2025 05:46:45 +0000
Manifest this update:     Fri 19 Dec 2025 05:46:45 +0000
Manifest next update:     Fri 26 Dec 2025 05:46:45 +0000
Files and hashes:         1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: DHoVLnaSlDTjbc2semYbF/ZAsslT8SzscBQgoan+XQs=)
                          2: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: hVkpqBz8Nr9HJbp7PiFoLwVsufH9j8FcqYll8CUZa9c=)
                          3: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: qPzJ/oeyp8XIlVlZetvJbilZBw8geUbM+mpNnzYDNLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
                          rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
        Validity
            Not Before: Dec 19 05:46:45 2025 GMT
            Not After : Dec 26 05:46:45 2025 GMT
        Subject: CN=6944e6c5-0f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:d7:e0:ac:21:3b:03:4e:05:dd:23:7d:d6:
                    44:f8:68:dc:fd:9d:76:d2:2c:9b:0c:db:de:9a:d0:
                    91:04:7f:59:a0:2f:16:36:c0:72:69:1e:da:a2:cc:
                    85:42:92:55:d7:ff:fd:70:13:6f:0f:98:8f:8c:39:
                    4c:af:90:45:6a:bd:e7:7c:3b:1b:d2:67:b9:4d:15:
                    8c:a8:4d:38:b0:df:58:1e:86:28:13:0a:07:b4:0d:
                    d7:92:df:36:b2:99:68:0b:a5:e4:04:b1:ba:a2:38:
                    4e:1c:a3:94:9a:75:3e:e2:c1:84:9a:bf:e8:06:3d:
                    b1:a0:a8:76:b8:86:9a:f9:c9:1b:3e:eb:53:68:e8:
                    65:90:ac:ee:c8:ec:b3:e1:7e:1d:df:c2:b3:c2:b4:
                    c5:08:72:f4:28:34:48:0d:ce:f9:b2:67:3d:c7:b5:
                    d4:8d:42:65:68:52:66:79:8c:e5:51:6c:ae:37:2d:
                    fa:4a:da:68:9a:28:d1:a6:6c:be:19:44:98:a7:f6:
                    c8:c3:6a:2b:fe:d9:a5:e2:33:89:73:05:dd:b1:9e:
                    ea:53:a6:9f:4d:86:0b:f8:b1:07:75:f4:17:48:3f:
                    9b:9e:81:cf:77:73:94:77:38:c5:c9:82:78:8e:a4:
                    f0:34:72:08:79:c4:e1:33:a4:07:2a:fe:d7:29:7d:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:56:FA:62:A1:7F:4C:60:9C:6A:20:33:8B:89:FD:D9:02:FF:79:0E
            X509v3 Authority Key Identifier:
                keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:39:22:f3:19:84:ec:aa:0e:11:66:3c:25:1b:79:91:26:
         ed:40:81:c1:91:43:2f:90:19:6f:00:be:e8:27:1d:c1:36:f5:
         6b:66:ec:30:1e:c1:cb:3b:f4:43:db:bf:35:46:fd:8f:72:21:
         51:dc:4c:65:7e:8d:b1:73:86:89:73:5a:d3:47:8a:fb:2f:03:
         6c:c3:19:60:33:6a:83:f2:65:61:14:20:71:bd:03:53:cf:3f:
         6f:fd:f0:bc:20:73:e9:14:86:bd:3b:54:20:05:b6:eb:40:54:
         5d:b3:5d:cf:4e:43:75:f7:76:f6:42:9e:02:86:2f:0f:1d:a4:
         a3:ee:9e:4f:01:3c:6b:24:a9:ca:02:83:29:a8:11:21:94:16:
         4c:8f:f4:8c:4c:5f:69:ae:e0:58:b4:cb:13:e6:92:0a:45:04:
         01:25:d5:9a:0b:3c:1e:20:15:f0:32:9e:3c:a2:fb:bf:58:1d:
         ec:88:29:24:5d:e7:c2:f9:64:9c:43:d0:f0:9b:03:4e:bc:44:
         97:b2:02:e0:c6:9d:f1:02:ef:ce:81:1b:18:2b:da:91:ad:0a:
         dc:ba:c3:47:d4:b8:88:ac:69:c1:65:71:1f:43:6a:2f:a9:ec:
         2f:9d:28:fb:c2:7e:f9:51:2a:64:58:52:f8:81:c0:79:08:36:
         f5:05:49:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:26:23 2025 by rpki-client