This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
File:                     Y-N84NAMINhocKc_1uy8iZwbngs.mft (raw, json)
Hash identifier:          Rm6KLSY02S2lpnuhDZRjA6uktt8j5pzldnzn3EPNSsc=
Subject key identifier:   EA:8D:D8:9D:9F:D9:17:11:7A:3B:87:50:15:FC:40:E8:37:88:C3:46
Authority key identifier: 63:E3:7C:E0:D0:0C:20:D8:68:70:A7:3F:D6:EC:BC:89:9C:1B:9E:0B
Certificate issuer:       /CN=A9121865/serialNumber=63E37CE0D00C20D86870A73FD6ECBC899C1B9E0B
Certificate serial:       072C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
Manifest number:          071B
Signing time:             Thu 18 Dec 2025 21:17:55 +0000
Manifest this update:     Thu 18 Dec 2025 21:17:54 +0000
Manifest next update:     Thu 25 Dec 2025 21:17:54 +0000
Files and hashes:         1: Y-N84NAMINhocKc_1uy8iZwbngs.crl (hash: 7j5Td1bIWR0d9EN4S3ThaqnpAj7ir5BLBi55qOj3DQo=)
                          2: 602D049AC1DE11EB98E1AD43C4F9AE02.roa (hash: dZk3zUjex9j9lLIDyKM9fwjXzN+iyNTIOqWQwjytMeU=)
                          3: A642A4AC650A11EB83E0FE0FC4F9AE02.roa (hash: XgEiz93GwcjbqWb+Hq9DJ44AhbzclnkFT8Xqo44uktw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.crl
                          rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1836 (0x72c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121865, serialNumber=63E37CE0D00C20D86870A73FD6ECBC899C1B9E0B
        Validity
            Not Before: Dec 18 21:17:54 2025 GMT
            Not After : Dec 25 21:17:54 2025 GMT
        Subject: CN=69446f83-911f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:29:11:44:75:e5:c3:70:68:c0:bf:63:e0:
                    32:08:8f:66:63:60:2b:0e:43:26:0f:2c:0c:8f:40:
                    0c:6b:ba:8f:b5:af:e3:6f:a8:01:34:a4:ce:35:81:
                    63:75:61:1a:cf:1b:ae:90:e8:21:4d:4d:4d:19:f8:
                    8c:34:c8:6e:f6:3b:22:fa:85:fc:ec:2f:90:0d:22:
                    c0:ae:67:89:f3:8e:47:bf:5f:9e:ad:d5:80:50:af:
                    64:3a:64:b2:ba:df:08:60:df:6e:9c:a5:5c:fc:63:
                    c3:a4:f9:55:7a:cc:fb:2e:8f:6f:3c:ed:86:d0:09:
                    27:68:49:d4:c1:9e:df:21:2c:0a:95:84:6c:25:e8:
                    f8:b6:4e:c8:f6:42:b5:3a:bf:02:d6:d6:73:52:0d:
                    b8:59:6b:11:5d:b4:40:d3:59:e6:07:72:dd:ac:0d:
                    3f:5c:8f:92:55:a7:4d:81:78:4e:98:1a:20:57:73:
                    42:f7:41:36:a0:19:b7:61:96:3f:51:43:7b:c1:b1:
                    a6:81:d2:56:2c:06:86:a4:c8:84:3e:51:a9:c6:59:
                    50:07:b3:1e:14:44:93:c4:5b:da:61:68:51:2b:3f:
                    d0:c9:f4:24:82:46:af:7f:97:51:f9:9b:ec:6e:57:
                    87:c0:8f:df:d2:c1:d5:9d:9c:28:27:10:12:1b:bb:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8D:D8:9D:9F:D9:17:11:7A:3B:87:50:15:FC:40:E8:37:88:C3:46
            X509v3 Authority Key Identifier:
                keyid:63:E3:7C:E0:D0:0C:20:D8:68:70:A7:3F:D6:EC:BC:89:9C:1B:9E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:80:33:7a:68:9d:63:e9:2e:73:06:ef:b7:b1:5c:7b:a1:6c:
         2e:1b:94:7f:f6:36:6d:51:c6:26:5e:9e:22:01:72:39:8b:5c:
         c1:55:86:d7:d8:5b:79:6e:9f:b0:c9:e0:cd:8f:a2:dc:ef:97:
         ef:4b:7d:08:b0:f1:85:75:58:f7:8d:da:ec:d1:f3:a2:2e:ef:
         2b:ed:bf:24:d2:a8:b5:4b:81:38:16:e6:99:45:c1:62:c3:2a:
         14:65:bd:3b:25:da:c6:4e:ee:e3:8b:c2:5a:44:69:11:69:31:
         ff:b5:df:33:b2:0f:2f:ac:cd:5c:74:2a:b3:27:af:0d:2e:83:
         5c:69:9d:f9:b8:62:72:7f:35:12:7b:23:37:99:b8:38:b0:d3:
         38:c6:3e:c0:9b:2b:75:4f:e6:b4:83:e1:39:1c:48:fb:22:d3:
         bf:3a:ce:9c:9c:35:ba:6b:0b:8e:24:bc:c7:bf:db:cc:ca:ef:
         ba:85:5f:3d:49:0c:e4:00:10:6a:96:7b:46:9e:32:f9:51:12:
         b0:64:b7:bf:05:61:b8:d4:7a:8c:f8:48:1d:45:bb:ea:25:33:
         7f:4f:04:d9:fb:91:5b:b7:47:18:88:50:55:d5:bf:5a:ed:88:
         06:80:fb:f4:35:c0:a8:d2:dd:56:0c:03:22:e7:77:c1:56:ae:
         28:5c:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:54 2025 by rpki-client