This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File:                     y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier:          PFwVznJicp+5rVJXO04hjkVBWgA3FQ1FdrvrVMRyMBI=
Subject key identifier:   00:61:A9:EE:FE:6F:EF:F0:39:25:55:41:FA:7F:57:A8:BC:2D:AF:1E
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer:       /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial:       08F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number:          08E1
Signing time:             Thu 18 Dec 2025 19:56:26 +0000
Manifest this update:     Thu 18 Dec 2025 19:56:26 +0000
Manifest next update:     Thu 25 Dec 2025 19:56:26 +0000
Files and hashes:         1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: ZP/fiLgL2WalqmL99EeXXhwFn+O+Fact/vrltp2Koug=)
                          2: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: e+13EZAvpj9mc2IILMERDnSK9NszhBMUbUBC2BNslfY=)
                          3: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: HnUSTDgiOASq4KYnjuG0nd8h+Pt87RrArwZX9gcI9gM=)
                          4: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: NHcEruSqBuMj/IPzd/3S47VAhmXWgMgQYut3Slp0jA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
                          rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293 (0x8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
        Validity
            Not Before: Dec 18 19:56:26 2025 GMT
            Not After : Dec 25 19:56:26 2025 GMT
        Subject: CN=69445c6a-c08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5d:05:bc:f6:1a:07:ab:24:06:4c:a6:6d:3c:
                    d7:43:fd:04:d5:f6:99:a8:e5:10:20:90:41:42:3a:
                    24:b4:63:b7:48:63:2f:76:52:83:a0:5d:fd:58:a5:
                    e3:5a:23:ef:a2:c4:a7:8d:e5:d7:dc:37:ad:ff:e1:
                    87:c7:3e:fc:9a:2a:05:9b:25:c6:7c:b2:34:7c:ba:
                    ab:84:94:3a:86:b3:0d:eb:ca:d4:37:53:14:87:bc:
                    08:3b:35:ed:3b:94:6a:fe:8b:f9:cf:dc:54:f9:a0:
                    45:35:c2:32:d7:6c:f7:32:db:49:cf:53:07:eb:ee:
                    81:53:7e:6e:4e:5a:ea:62:01:83:61:fb:c4:6b:2d:
                    27:a5:cf:d3:e5:b6:7e:c4:c8:13:c6:a1:c9:d6:86:
                    1f:1c:fd:87:f8:db:2c:72:ff:a1:ea:6b:ea:4b:b4:
                    c1:86:9c:c6:78:c7:8d:a8:6a:a8:ee:f7:ce:97:bd:
                    27:69:ef:b1:52:09:33:09:f0:68:2c:6e:e3:58:58:
                    9b:3c:73:bb:5c:77:83:2f:db:1f:e8:da:43:c3:70:
                    3f:98:43:57:7a:10:09:c5:6a:f0:9c:84:85:5a:dc:
                    f5:40:10:e8:53:a2:96:df:ad:3d:b2:1d:e0:59:dc:
                    9b:1d:f4:91:c2:84:d2:7a:37:f3:7c:71:fc:0e:d6:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:61:A9:EE:FE:6F:EF:F0:39:25:55:41:FA:7F:57:A8:BC:2D:AF:1E
            X509v3 Authority Key Identifier:
                keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:67:46:e5:ba:e9:41:88:fb:c9:29:66:9c:ad:dc:5e:04:5c:
         59:d4:16:eb:53:cf:86:89:d2:df:ce:e0:20:ce:ff:29:88:5b:
         1c:ee:f3:52:ad:fc:10:3b:94:30:a7:65:ba:5c:ee:05:bf:f4:
         63:19:70:54:4f:a1:dd:5c:1a:14:d9:4e:8a:89:61:04:d6:6e:
         ac:6d:36:c3:8d:fe:d1:ce:29:b2:fc:c9:7f:52:4d:50:03:b5:
         07:a3:a2:9e:3f:3a:e6:09:de:bd:e7:66:8f:c0:af:00:63:af:
         8f:b2:d7:59:d4:36:42:5a:21:91:e1:d2:f4:6e:a8:e7:fb:46:
         e3:db:6d:59:fb:1a:17:a5:b4:6f:9c:f2:0c:4d:31:be:62:56:
         b9:e0:b6:6d:2d:be:e5:5f:1c:44:04:46:c8:7b:4d:90:78:ea:
         15:52:69:90:3b:d2:b7:0f:ed:f9:5e:a9:dc:b4:b8:0e:9e:29:
         f1:82:91:b6:06:dc:3f:9d:b9:ee:4b:e0:2a:7d:24:2a:de:9d:
         3a:ea:5b:63:e1:4e:22:cc:5c:cc:d3:f2:fe:ce:99:26:56:8c:
         1e:61:7e:14:9c:0d:e3:b2:aa:9d:fb:b9:3b:5d:ae:ac:75:49:
         f5:6d:17:f2:0a:41:fd:ec:aa:25:bc:5c:c5:aa:f9:50:27:5f:
         f4:a2:67:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:48 2025 by rpki-client