This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
File:                     yMJcY971ZwDWV_xDmUpVH-QMzcc.mft (raw, json)
Hash identifier:          5W28/MXmBDEEQCF82YEILwrj1EiW4hkmXSmidfx+Id4=
Subject key identifier:   18:19:86:9B:11:B9:B3:C6:2C:32:18:E4:0A:0A:C4:E7:56:AE:FB:F8
Authority key identifier: C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7
Certificate issuer:       /CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
Manifest number:          0714
Signing time:             Thu 18 Dec 2025 23:19:49 +0000
Manifest this update:     Thu 18 Dec 2025 23:19:49 +0000
Manifest next update:     Thu 25 Dec 2025 23:19:49 +0000
Files and hashes:         1: yMJcY971ZwDWV_xDmUpVH-QMzcc.crl (hash: wVbXNN2ITDiwfInRfJaINSjwESX3cB8M/zMtul2n7mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363, serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
        Validity
            Not Before: Dec 18 23:19:49 2025 GMT
            Not After : Dec 25 23:19:49 2025 GMT
        Subject: CN=69448c15-e028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:36:06:fc:79:58:6b:cc:36:49:08:5d:ad:
                    58:3e:7c:f9:e3:1c:71:7f:bb:19:00:d4:6a:19:98:
                    34:1a:ad:37:bc:9e:4b:e6:d8:f0:5c:47:2b:59:78:
                    7a:7d:1c:c0:fd:4d:6d:d7:34:fb:dc:03:41:49:e4:
                    55:5d:36:21:2e:f3:80:b1:d3:65:cf:fd:dd:6d:6c:
                    5b:90:48:b0:13:4b:7f:00:93:cd:86:3c:cc:94:c8:
                    51:b9:0d:30:d8:c4:3a:96:4d:d0:15:15:0e:c1:b3:
                    48:38:5c:bb:3e:e5:f0:6d:7d:05:f6:92:b6:33:fb:
                    a2:26:c0:f1:56:15:13:71:33:a2:b7:b1:76:8c:68:
                    cc:2d:ba:fe:af:cf:28:2e:02:56:db:84:78:94:f2:
                    db:d3:76:18:60:be:56:f1:98:8d:eb:79:93:07:83:
                    bc:5b:38:0f:89:1e:e7:a5:d7:d3:a7:24:26:e5:f0:
                    a0:d5:f0:0e:b6:54:4f:b5:0e:6c:41:1a:c6:a1:0c:
                    15:1c:d7:27:3a:31:ae:e1:fe:3c:6d:26:48:51:bd:
                    ab:4c:ce:35:0d:e1:b4:d4:f9:92:5f:67:5a:ca:36:
                    83:d8:91:2e:59:05:93:2b:a3:ef:c0:7e:ae:15:b8:
                    9f:49:75:e1:37:02:5b:18:bf:7e:c5:9c:b2:5c:97:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:19:86:9B:11:B9:B3:C6:2C:32:18:E4:0A:0A:C4:E7:56:AE:FB:F8
            X509v3 Authority Key Identifier:
                keyid:C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:bc:32:f6:dd:fd:6b:9a:fb:96:ba:94:e1:e7:8a:b4:9e:f8:
         3a:15:2f:41:84:52:70:06:05:1e:32:c7:c3:d2:58:06:67:e7:
         88:47:72:5e:13:da:0a:23:1d:88:78:85:fb:32:0e:df:c7:e4:
         da:50:5b:ab:be:05:6f:cc:2c:bf:3c:78:68:11:ec:6b:fc:13:
         e8:ed:4e:4f:6f:a6:04:99:26:cc:0d:5e:32:43:82:53:ab:e8:
         59:dd:5b:72:6b:8d:f0:44:e1:ed:41:89:36:2e:ca:28:ce:98:
         51:34:6a:1f:61:30:2d:c4:1f:2c:31:c5:76:48:fd:e4:2a:4d:
         ad:63:c2:d9:d1:4a:5a:25:f8:14:f2:d2:a8:b8:e0:b4:b7:b3:
         05:5f:a4:ac:b6:52:84:68:d5:36:ae:60:ba:54:cd:1c:08:62:
         43:07:39:9b:25:a5:6b:20:45:d5:e8:68:14:38:7e:c8:89:da:
         43:a2:f7:f7:4b:5d:5f:80:48:21:60:90:1e:fc:8f:c4:fe:34:
         74:34:a0:bf:20:9e:22:b9:b7:ba:bd:8d:fa:14:23:db:96:94:
         ec:1e:d5:95:24:dd:f7:9d:33:5b:03:17:0d:b2:cf:77:20:f9:
         77:13:ea:3a:f2:ed:b1:6b:d2:f6:d3:08:a8:ce:a7:5c:3d:3a:
         fe:5a:35:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:57 2025 by rpki-client