This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
File:                     YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json)
Hash identifier:          UO1FYK/+oVZYvBXhVd5Z0EkJ8RML7KQfE+ttz+VnuW4=
Subject key identifier:   FA:B7:01:B5:E5:26:75:14:A7:31:B3:F8:08:4D:68:DF:66:5F:9F:21
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Certificate issuer:       /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial:       03C4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
Manifest number:          03BE
Signing time:             Sun 28 Dec 2025 21:23:17 +0000
Manifest this update:     Sun 28 Dec 2025 21:23:16 +0000
Manifest next update:     Sun 04 Jan 2026 21:23:16 +0000
Files and hashes:         1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: jxe2yLAWwBpN7GhjO/hH2dRpndyViT0DQ5MlRGfloAg=)
                          2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: CbD0ENt2Pao5fOcZWp69VcMqe2Tlg3J0XG1C2H6cud0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 21:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
        Validity
            Not Before: Dec 28 21:23:16 2025 GMT
            Not After : Jan  4 21:23:16 2026 GMT
        Subject: CN=69519fc5-e06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:06:d8:ec:bf:f4:64:34:ae:55:3c:b6:09:
                    32:ea:16:9a:71:8a:4e:68:3f:6a:71:7e:f2:c9:03:
                    f5:51:20:dd:d0:3e:34:38:8d:20:df:1d:f9:e6:ee:
                    85:a5:e2:33:ce:40:92:27:88:9b:a9:d8:83:f9:67:
                    b3:0d:77:a6:f4:ce:20:f2:b9:9c:6c:6b:f3:84:24:
                    b1:1d:26:59:33:32:7f:c9:b6:53:92:21:bf:c4:6a:
                    f6:96:d7:db:d7:59:e5:ad:28:51:7b:ef:14:47:26:
                    19:c9:22:ad:f7:31:4c:94:99:f9:a0:fa:f3:57:85:
                    1d:d4:39:17:83:8e:fe:8b:aa:53:f7:db:de:e4:3b:
                    b0:28:75:06:d5:cd:21:20:18:b2:1b:71:55:bb:04:
                    fb:2c:54:36:5a:2e:75:7d:d5:79:69:dd:dd:0a:67:
                    1f:f7:39:cf:5c:5f:84:a9:8b:6a:e7:95:66:02:2e:
                    87:6c:0c:1e:73:52:4a:47:45:52:9f:7a:3d:54:1f:
                    40:6d:2e:2b:f7:7e:cb:24:c3:67:23:7c:01:2f:63:
                    91:9d:b5:95:5f:4a:c7:17:98:9f:61:90:bf:ab:34:
                    ad:5e:b0:c8:24:ce:fb:fa:cd:e1:a5:45:28:46:ab:
                    83:71:04:19:a7:f6:29:c6:5b:c7:2b:40:80:f9:53:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B7:01:B5:E5:26:75:14:A7:31:B3:F8:08:4D:68:DF:66:5F:9F:21
            X509v3 Authority Key Identifier:
                keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fa:be:b0:a4:1c:00:3d:41:ba:1a:e3:8c:f9:41:98:92:cc:
         84:32:33:70:92:62:0a:ad:06:e9:0b:71:55:6f:e6:6b:5b:cd:
         20:97:6f:2d:90:eb:9e:a8:d7:ab:54:32:19:bc:54:70:15:07:
         3b:e4:6b:f2:6d:47:9b:9b:cd:e0:65:66:c5:c3:9f:ae:20:88:
         68:33:ab:17:f7:2d:89:86:68:82:82:02:54:dd:5c:79:28:0c:
         55:ab:51:15:a0:b8:69:7d:22:6e:94:2f:b5:1c:3d:3b:8c:c1:
         ea:ea:54:7e:a3:17:95:ba:ce:4e:68:03:64:29:37:9d:b6:e8:
         29:82:9e:f0:80:66:6c:70:30:57:ba:cf:f0:f3:87:e7:9c:28:
         84:95:79:27:7e:fd:14:0b:7e:03:48:fb:51:8e:9d:98:cd:99:
         40:24:09:bf:eb:f5:b4:32:91:bf:2f:82:71:d6:84:43:d0:50:
         35:08:bd:83:df:fe:85:1b:21:c8:0b:18:4f:97:df:3a:8c:de:
         74:ee:ce:f2:4b:bb:3b:69:11:34:2d:99:35:c6:a7:91:b9:d6:
         a2:30:c5:5a:77:d8:58:21:12:8e:4d:e9:ef:a2:7e:b1:32:c9:
         72:77:4c:c8:69:18:01:de:83:b6:21:bb:da:a3:b2:b5:f9:a7:
         e4:4b:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:05:38 2025 by rpki-client