This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
File:                     y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json)
Hash identifier:          2WEaH+syM6NplmYOjikIfF4WQN1y1I03lX12u9m8SdU=
Subject key identifier:   87:93:8E:3B:15:29:F6:17:36:40:4F:9A:4D:F9:89:00:8F:D4:04:13
Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
Certificate issuer:       /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Certificate serial:       0B92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
Manifest number:          0D56
Signing time:             Thu 18 Dec 2025 18:43:00 +0000
Manifest this update:     Thu 18 Dec 2025 18:42:59 +0000
Manifest next update:     Thu 25 Dec 2025 18:42:59 +0000
Files and hashes:         1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: ebbhbZ/drR7pX5vNbdu4sMzQboxuDlV+4XfKuijR8MQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
                          rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2962 (0xb92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150733, serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
        Validity
            Not Before: Dec 18 18:42:59 2025 GMT
            Not After : Dec 25 18:42:59 2025 GMT
        Subject: CN=69444b33-ffc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:40:4c:9e:1a:d6:4e:6b:82:48:3b:c9:4e:
                    7a:52:96:d5:0e:49:6d:2d:24:38:5d:5e:d8:eb:76:
                    bc:a6:e6:a8:af:7b:3b:fd:20:6a:34:39:96:5a:93:
                    0b:73:14:7c:77:6a:14:cf:e1:68:c0:e1:5d:8e:b4:
                    47:5e:92:0d:07:6e:2c:ef:5b:34:9d:a2:83:b2:3f:
                    60:24:97:f5:e5:81:76:fe:1f:b4:80:a3:96:6a:cb:
                    c8:21:84:a5:f7:5c:67:80:e1:7b:88:cd:ab:dd:10:
                    d3:5c:b8:72:11:e6:f9:be:5f:4d:00:cc:fb:bf:f6:
                    2e:43:35:1e:19:39:a4:23:8e:a5:a0:23:cf:ac:d6:
                    9f:df:12:14:7f:67:62:bd:94:8a:dc:84:90:e0:38:
                    ae:3f:9f:84:2c:41:1c:18:54:a0:5b:f7:d6:58:dc:
                    bf:47:6a:ad:be:17:f4:af:dd:13:ee:47:5b:c7:63:
                    78:af:c0:0c:29:98:99:d2:81:5c:33:50:7d:f4:58:
                    3b:8f:c8:11:97:08:e3:9c:f5:14:c3:fc:9e:f0:09:
                    00:cc:94:29:10:60:af:e4:3d:b2:c0:12:03:ba:20:
                    78:32:42:e1:57:d0:14:d9:c5:34:f5:af:78:ee:ec:
                    f5:7c:c6:00:c6:f3:de:00:fc:50:32:8d:14:5c:50:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:93:8E:3B:15:29:F6:17:36:40:4F:9A:4D:F9:89:00:8F:D4:04:13
            X509v3 Authority Key Identifier:
                keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:26:98:1e:24:e8:b1:0b:aa:9f:24:23:f5:61:e9:07:28:b3:
         4c:40:42:95:e0:7f:aa:1c:eb:9c:3f:f5:df:9d:ba:57:34:06:
         ab:f0:b4:32:fc:0c:6f:70:b7:8a:14:6d:9e:62:d9:34:88:39:
         49:27:ea:2f:fe:1e:20:d5:34:68:ac:a9:d6:c5:cd:9b:33:6c:
         32:82:ce:60:b5:03:40:7b:2c:c1:7c:a6:02:7e:62:18:d9:ee:
         25:2c:12:31:8d:66:e5:d0:9a:2f:6a:12:03:5c:e7:73:62:17:
         da:cc:05:77:25:ad:83:aa:5e:c1:3c:4b:2f:1d:0f:f5:bf:3d:
         4a:d9:75:1c:92:39:f7:0b:5a:69:81:9b:bd:92:2f:8d:45:14:
         e9:44:6d:75:c3:bb:a5:64:a6:fa:8d:5f:dd:92:7c:fa:d3:c4:
         b8:67:8d:31:38:4c:df:40:d5:e8:c5:3b:1c:11:60:66:30:28:
         59:e7:4c:b4:ad:38:ae:ab:93:22:4c:06:48:47:15:6c:33:7c:
         9b:fd:10:2e:dd:9c:ba:7f:0d:23:21:24:92:63:b9:58:37:34:
         99:67:93:63:25:bd:1c:ea:ab:4b:2f:72:79:05:3d:2c:22:0c:
         55:1c:0b:99:8e:7f:31:a4:bc:0d:bd:24:a0:02:82:61:6d:59:
         61:0b:6b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:54 2025 by rpki-client