This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
File:                     Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json)
Hash identifier:          temdVYtHGm+rXC4mG0q8AsJ/9BvRx5kLflsen5v2/o0=
Subject key identifier:   79:88:A7:E6:70:EE:EB:E6:06:85:9E:D3:98:A3:97:D0:4E:F3:EB:09
Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
Certificate issuer:       /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
Manifest number:          04A7
Signing time:             Thu 18 Dec 2025 23:38:44 +0000
Manifest this update:     Thu 18 Dec 2025 23:38:43 +0000
Manifest next update:     Thu 25 Dec 2025 23:38:43 +0000
Files and hashes:         1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: s5l7o7aKYGZQ5YPFYODXoOma4Q764ySp6Zt8fRyxxVM=)
                          2: F83346DA410211F097F43F85C4F9AE02.roa (hash: EnqZyVfj3TKzoAvrOL6tNqUILt/NgCo/Yq0hgyekdPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
                          rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
        Validity
            Not Before: Dec 18 23:38:43 2025 GMT
            Not After : Dec 25 23:38:43 2025 GMT
        Subject: CN=69449083-9b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:07:87:26:9f:0a:e4:18:79:a0:5a:c2:b1:
                    33:97:05:61:b4:37:57:63:95:fb:19:19:45:bc:bf:
                    4f:5d:d6:2b:82:3c:29:c2:39:fa:a2:c3:e6:21:0f:
                    a7:9f:9f:e9:e7:79:be:bf:c9:e0:6b:5f:84:df:fe:
                    97:58:97:17:4d:dd:86:d6:2b:aa:be:16:81:a3:06:
                    7d:7b:ff:0e:a0:f7:d6:58:ee:d3:e9:d2:79:b6:4e:
                    a8:6e:2c:a6:c6:66:cb:8d:c2:5c:8f:a1:94:5d:36:
                    5a:db:e4:8a:3b:a6:d2:97:00:89:29:4f:7e:ca:2e:
                    b3:dc:b6:55:13:e2:25:ab:4a:d1:b6:69:00:91:1a:
                    53:52:24:e1:69:49:65:f8:94:a0:b9:0f:07:2d:a4:
                    3b:f1:4d:28:2c:05:ea:e3:0d:cf:00:dc:75:20:7b:
                    79:34:82:8b:b2:a6:b2:29:da:af:1a:0e:c5:e4:af:
                    aa:40:32:1b:29:d9:84:ac:ec:b5:c2:4a:b2:5a:57:
                    90:12:a3:e9:43:1e:57:d4:2c:6d:7e:7d:9e:71:60:
                    7b:ed:a3:d8:73:62:18:ae:eb:ea:87:06:56:ba:20:
                    87:99:5a:cc:a4:45:37:5d:e0:7d:e9:6b:bc:86:6a:
                    cf:59:3c:38:bf:7f:d3:4f:cd:97:b7:43:4a:c6:96:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:88:A7:E6:70:EE:EB:E6:06:85:9E:D3:98:A3:97:D0:4E:F3:EB:09
            X509v3 Authority Key Identifier:
                keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:04:22:cd:01:6b:ac:3c:d3:59:dd:63:6a:da:95:73:fb:96:
         12:72:b4:4c:d7:fe:2f:2d:5d:87:fa:0a:10:99:e5:dc:74:64:
         83:0f:78:f1:2e:74:9c:a5:b8:b5:c8:f9:f6:bb:88:6b:d9:28:
         56:7c:f0:e7:d1:6c:e6:e6:13:1e:b3:0f:df:e8:8e:47:55:9b:
         35:98:65:ac:bb:a8:81:7a:d0:1a:be:ec:df:fa:6b:6e:70:b1:
         5a:1a:9e:bc:b9:b5:16:82:3d:6b:93:c2:2f:1b:5a:c9:ea:d4:
         29:89:bc:60:17:80:9c:50:95:0b:a4:8c:c8:e9:46:5c:e2:e1:
         14:ed:7c:50:80:31:a4:b2:8b:2d:4c:3f:c2:41:09:a3:6f:91:
         7d:db:70:05:7f:94:bf:b2:9f:4f:d0:d6:c9:c6:d7:d2:10:b6:
         a5:7c:dd:12:c7:86:67:9c:cc:da:ba:56:93:1d:7a:a1:cd:49:
         83:76:5d:e6:7f:eb:be:70:fd:c8:60:53:96:92:97:99:72:56:
         01:ca:1f:fa:3a:46:4f:03:5e:45:05:d0:f1:91:c9:a1:c1:6e:
         23:ba:24:61:90:30:c2:a5:7b:4e:9b:67:44:90:d8:04:f4:51:
         ec:23:1f:89:25:1c:bd:13:a0:e2:b5:c0:37:df:08:b1:54:eb:
         db:01:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:49 2025 by rpki-client