This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
File:                     y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json)
Hash identifier:          KXCfsG3X+ndn0PyQbCMsXLDJSU0eWsG6P1f9eCAZsBw=
Subject key identifier:   9E:EF:98:72:CE:3B:63:A2:48:84:FC:E9:13:A9:D7:22:72:E5:FC:A4
Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47
Certificate issuer:       /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
Certificate serial:       045E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
Manifest number:          0457
Signing time:             Thu 18 Dec 2025 23:32:39 +0000
Manifest this update:     Thu 18 Dec 2025 23:32:39 +0000
Manifest next update:     Thu 25 Dec 2025 23:32:39 +0000
Files and hashes:         1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: 6P6UaZI7krgjE4mA0V/t0WMQJxf7jppIMsTZ2yflEVw=)
                          2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: y07yi3J6Aa7eEJGzw1k5V3IUk9jp0TMK1pgfx7x0M/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl
                          rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118 (0x45e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
        Validity
            Not Before: Dec 18 23:32:39 2025 GMT
            Not After : Dec 25 23:32:39 2025 GMT
        Subject: CN=69448f17-08ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:4c:ff:79:8b:1c:44:e4:ae:bf:16:30:b6:
                    8e:c4:46:31:c8:89:57:88:d9:58:b6:5e:98:36:6a:
                    4b:f4:34:20:47:3c:53:e0:e5:1e:db:6e:a9:c3:9a:
                    2b:95:d9:83:7c:d7:1c:ab:cc:f9:31:34:f3:22:28:
                    c4:3f:4a:f1:59:47:c7:53:a8:eb:ab:ed:8e:ff:b9:
                    f5:04:9b:c4:ff:c8:a0:ad:6b:22:47:40:c7:ac:5b:
                    6d:d4:ed:66:da:c9:bd:5e:98:a2:94:18:6a:9c:aa:
                    19:6e:9b:dd:09:2a:dc:fd:f8:2e:8f:00:b6:f1:d0:
                    89:19:8c:7d:bd:05:7c:8c:58:49:47:3f:c7:84:7d:
                    04:d2:13:8c:c1:49:cd:4c:92:23:07:97:3b:cb:5d:
                    3e:63:80:6b:4f:2b:67:06:64:b5:68:4f:7a:77:e3:
                    1d:93:5a:ab:5b:b2:57:07:b2:36:7e:82:96:a0:96:
                    92:97:96:12:3c:db:b8:19:02:f6:16:7a:e5:7a:f6:
                    44:34:59:52:bf:e9:af:67:db:9b:30:9f:20:63:58:
                    17:78:ce:dc:2a:df:05:e6:0b:34:55:08:ef:a5:39:
                    36:a0:26:de:c6:e5:6f:0a:10:d7:ef:f4:77:71:5f:
                    35:cd:5e:8e:9a:c0:ca:8a:1b:1a:14:2d:7b:38:34:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EF:98:72:CE:3B:63:A2:48:84:FC:E9:13:A9:D7:22:72:E5:FC:A4
            X509v3 Authority Key Identifier:
                keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a7:65:cf:e5:e5:9c:fd:36:98:94:80:e2:56:c2:12:d1:4d:
         dd:ff:70:e8:d5:d8:52:63:b1:47:91:25:c0:cd:5e:b6:c8:1b:
         84:d7:cc:93:10:fb:f9:25:94:a8:58:d3:8e:e8:79:29:99:5f:
         d5:b4:ab:7a:8c:0b:72:00:7a:f2:e5:d6:67:a3:29:5f:01:07:
         3d:20:3d:6b:5b:3a:bc:5f:ee:03:e5:52:b8:7f:94:45:36:43:
         ad:a8:90:e1:9c:a7:70:da:9c:18:0f:68:f5:e5:ef:e0:a7:9f:
         82:8b:e3:4f:b1:31:02:3c:a7:fe:bc:e4:4a:9f:0e:a2:3b:eb:
         29:49:b5:1b:30:27:34:0f:ac:f3:7f:7f:f0:5b:a9:aa:b7:0b:
         62:f0:20:15:8e:33:e3:62:a2:93:3b:ce:0d:1c:e0:07:bc:9a:
         ba:7c:aa:b5:20:d4:95:ea:77:16:f8:e0:d8:6e:c4:36:e0:ea:
         3e:0a:17:dd:c5:cf:29:5e:d3:f7:ec:5d:55:60:6f:5a:94:ed:
         a0:e0:17:68:e8:bd:3e:0c:01:98:51:90:c7:b6:41:19:d1:54:
         92:c1:0f:ee:1c:d1:25:60:df:ec:6d:89:6e:c4:32:ad:9e:0e:
         bc:a8:9c:b0:3f:4b:d0:06:c8:5d:31:5b:f9:a6:b7:fb:a9:48:
         bd:b1:75:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:51 2025 by rpki-client