This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          S1knAJum6XRIl2hfuij0xy9OAYK3WM4cOCeLmHfqnAw=
Subject key identifier:   5D:54:19:46:56:E6:D3:70:B7:7C:E1:58:B5:97:5F:D6:41:95:C9:97
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       32C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          31A1
Signing time:             Sat 20 Dec 2025 15:20:42 +0000
Manifest this update:     Sat 20 Dec 2025 15:20:41 +0000
Manifest next update:     Sat 27 Dec 2025 15:20:41 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: cWWCUJ/GzK7h9gytolvoiT+XSJUSej81biYPQeqBR1A=)
                          2: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: Wyi5/LddF842JO/Qup+T+TtnSVCZWmXJ6KXLaRipY9A=)
                          3: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: THe1NI3B1xx7kSh8zVoF92Sy5zfPL4BkUSLTuhQWgWA=)
                          4: 6A721236977E11EBB7908378C4F9AE02.roa (hash: /e6KrWMRhzwLnS1sGFyJnoQWuznldP9kkNXk2FwS2m8=)
                          5: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: 2SMCn/npWqcmfZg6nAHuysuldQhi1wmuZFYT9k6JumE=)
                          6: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: YpHnGald+tUXWOHiLdrxtwMGKIMtsU2LryOXgoLOgKw=)
                          7: 6DCD9050DCB011F09F01EF94466F56BC.roa (hash: 7DK+tVxrbc+F4WWee1kH7dGPoKIU0F+nqV3+jMxDG5g=)
                          8: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: 85Xzc4sUFq6DeQmrj7B+GSXoAlkSVZuZhM/htcARgis=)
                          9: 3E745A08803611ECB2187650C4F9AE02.roa (hash: jeZ1quXhohHcENScdWfxhX0SEjFUrsOnsK/TOw/jZjs=)
                          10: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: BHyc8gJj1zrzdD7tccu9ah8CwFB8JYItzsH3eX+N0N0=)
                          11: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: 6qeUbqQDZAs4XxUg3gjiDgNNwxCSJtTUmRGvfOUM8Jg=)
                          12: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: mvXnOqucNgAYFkGlwRCZn28/IzHeZDABYgBedIIjNdo=)
                          13: BE430FFA699011EE96387F19C4F9AE02.roa (hash: eghTnl4+9Hou7Dvhi8Y2Dc5HYMDvdB3RFP+Hf9xhTd4=)
                          14: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: Ahn6ZDXaFlyG3ps/K1qhqsraiLwDj6j+LNP8Jh18fxI=)
                          15: 4BBB7E087DAD11F0BE453F16C4F9AE02.roa (hash: bQtQzG5HOF5W0kxxFz3Tgqz+zL8QOAnaR9s4h9qiI0o=)
                          16: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: Za7CTLhf4UasBzGSp7I8a3g4a+j+NWEqF/KL56/2vS8=)
                          17: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: lEnvEsVQKg7+MGcOwWT2W3WslnVR/yrmJySbJOft9Z8=)
                          18: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: aNflNpZRFbV1iEzwZkerSjooL3ZbHNTo9sqEEuW0z5E=)
                          19: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: dgpVoO6weS/ndsZQWujNDS9YR9/GTcgU2Ntn/TREgTo=)
                          20: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: EeYrA0oUiX5ob1GCl360Jl12TI+VaTOiyuJgYZMlYyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 15:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12996 (0x32c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Dec 20 15:20:41 2025 GMT
            Not After : Dec 27 15:20:41 2025 GMT
        Subject: CN=6946beca-cc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:2c:31:a2:1c:06:d7:9e:b0:ae:32:74:fc:
                    7b:23:88:48:ab:66:18:41:55:27:a2:58:82:dd:59:
                    fe:e0:82:5a:16:b4:20:4a:a4:85:f8:b5:0b:4f:55:
                    86:c7:13:49:ec:f0:fa:e3:51:94:c8:78:91:49:60:
                    05:b0:a7:41:0a:49:2b:01:bf:85:6c:86:3e:38:08:
                    dd:64:a1:29:1a:65:e0:69:fd:cd:cc:3b:72:22:ef:
                    1d:1d:05:e0:85:59:d0:6d:c7:b2:f6:1f:43:20:46:
                    02:00:ae:a6:b6:12:43:70:1b:af:ba:24:63:5e:06:
                    b7:8a:70:84:54:68:ab:20:7d:1b:4a:12:40:aa:ba:
                    24:5f:32:0e:0f:59:ff:f0:75:39:8f:da:45:a8:3e:
                    ef:7f:99:5e:fe:df:50:26:b9:67:fb:b6:12:79:67:
                    fc:ea:35:55:ce:0f:5a:bc:91:85:d2:e2:38:9b:de:
                    d0:fb:62:7d:1b:37:2d:42:16:6f:7a:ad:39:ca:e1:
                    88:d7:f0:e3:40:8f:10:d8:1b:8e:13:d8:a7:55:55:
                    a0:2d:a5:98:7a:00:3b:a5:0b:1a:67:04:f7:7c:01:
                    06:5c:db:2a:e9:19:a0:57:31:49:4b:23:e3:96:c3:
                    c1:8c:64:d3:d4:38:50:94:78:0b:ef:b3:d7:02:12:
                    73:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:54:19:46:56:E6:D3:70:B7:7C:E1:58:B5:97:5F:D6:41:95:C9:97
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d5:c7:0d:d3:1c:20:ca:e7:e7:91:e2:28:65:62:12:3e:83:
         ce:69:20:d5:f9:55:37:f1:fd:e4:a2:a3:97:0b:ae:b5:cb:f4:
         7a:0a:65:10:9a:76:00:4c:e9:d6:fa:10:d2:62:07:a4:29:3d:
         f8:9e:67:87:77:68:13:75:51:db:b2:55:0c:4f:9c:54:34:ed:
         2b:04:6e:1a:f6:8e:b5:48:ff:c1:27:8e:57:75:b9:53:65:80:
         06:1e:dc:a6:5c:9c:fa:e9:ff:4c:e7:58:2b:6e:9b:57:a7:eb:
         2f:85:fa:35:be:8c:90:d9:75:aa:96:79:13:fa:2f:6f:9b:c6:
         cd:d6:45:37:77:a1:e0:61:63:a4:62:f8:bb:82:66:fa:20:7b:
         d4:d1:68:ff:59:ae:ad:81:67:61:a8:69:bc:64:bc:e4:cd:4c:
         f1:11:cc:ad:1c:2e:0c:2c:c4:bd:d7:bb:28:7d:71:61:25:a6:
         5b:53:53:c1:cb:05:aa:25:61:7a:fa:a4:b8:fb:ea:66:d9:f3:
         4a:76:ce:2f:6a:9a:e3:37:b5:63:17:8f:05:e2:67:8f:c8:d8:
         05:2d:14:d1:2d:e4:a8:9a:a2:38:8c:9a:c0:a2:e3:0d:e0:78:
         11:cf:46:50:2c:65:0d:b6:ef:ec:6b:1a:1a:d6:f0:f8:bc:89:
         a6:b7:50:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:45:03 2025 by rpki-client