This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
File:                     YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft (raw, json)
Hash identifier:          w7gztEOnPxEyoiPKO2sXb5idydBLA7l/w7tUMNBzJD4=
Subject key identifier:   5F:9D:33:17:2B:A8:5A:A1:3E:88:26:81:BF:0D:92:59:11:03:77:8A
Authority key identifier: 62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C
Certificate issuer:       /CN=A915179D/serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C
Certificate serial:       34EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
Manifest number:          34EB
Signing time:             Thu 18 Dec 2025 14:40:03 +0000
Manifest this update:     Thu 18 Dec 2025 14:40:03 +0000
Manifest next update:     Thu 25 Dec 2025 14:40:03 +0000
Files and hashes:         1: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl (hash: Z/m4jW4Xs4dHMCj6nvyq8s4WzBlSDpXnACztvTp7MKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl
                          rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13547 (0x34eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915179D, serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C
        Validity
            Not Before: Dec 18 14:40:03 2025 GMT
            Not After : Dec 25 14:40:03 2025 GMT
        Subject: CN=69441243-10af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:96:a6:4c:43:25:39:f6:52:0d:f8:99:7d:
                    d5:d9:88:5c:63:07:c9:45:60:33:2a:ab:32:3e:c3:
                    3b:d2:c5:3c:35:9f:8f:98:ee:28:80:0a:e5:54:3f:
                    66:b3:1f:ec:ff:71:75:53:62:88:f2:96:47:fc:4c:
                    ec:4b:da:65:a6:20:6b:33:e1:89:9e:64:b3:3a:62:
                    1f:15:10:08:f5:94:9e:77:f1:96:00:56:42:20:51:
                    e6:9a:16:65:35:24:33:5e:da:df:bd:93:aa:69:8b:
                    41:b8:52:50:c4:b3:f0:50:10:45:3d:3c:ae:0d:f7:
                    02:36:54:70:36:01:78:ac:11:ae:de:d4:02:08:2a:
                    91:0f:5a:d4:97:87:90:91:ed:fa:af:92:d6:22:4f:
                    2e:ea:58:06:4e:c9:6a:14:40:e8:09:84:b8:25:1f:
                    7a:39:8b:ed:c7:1c:dc:c9:61:5e:86:ae:ee:c5:56:
                    26:56:dc:0d:c8:4a:2b:35:86:3a:80:7c:da:12:76:
                    09:4d:81:75:db:ba:9d:58:ba:ea:b6:18:85:6a:b5:
                    59:8c:1d:ca:88:eb:0a:11:ed:ca:f3:8d:39:4f:0d:
                    9f:63:01:7b:59:68:08:51:47:4e:71:41:06:fa:f9:
                    67:a4:9c:b1:0f:7e:13:ec:33:11:8a:50:92:8d:83:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9D:33:17:2B:A8:5A:A1:3E:88:26:81:BF:0D:92:59:11:03:77:8A
            X509v3 Authority Key Identifier:
                keyid:62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:07:92:82:d1:a2:61:df:b6:d3:0a:8d:3b:32:63:f8:4b:16:
         32:fb:5b:89:58:46:92:73:eb:5a:80:c3:0b:45:f6:bf:12:81:
         16:94:44:26:38:cf:88:91:c0:cb:b8:bf:28:5c:31:60:01:dd:
         6e:4e:75:f7:29:0f:d3:9e:84:7e:9c:fd:1c:eb:d8:a4:01:a7:
         49:68:06:33:70:d5:57:d1:ff:f0:aa:ef:a0:19:90:27:93:0b:
         9b:cf:91:68:97:99:e8:23:f7:4c:e7:d6:51:41:bf:78:f4:29:
         b3:f5:c1:31:c0:4b:0f:4c:ec:48:c1:ce:5b:77:61:36:aa:70:
         c8:4c:3b:d6:01:e5:b4:b7:41:f3:ed:6c:92:14:44:de:21:15:
         38:e7:d3:7d:32:c4:3e:77:42:39:90:3e:70:1e:0c:89:ec:c7:
         98:7b:52:b2:fd:41:8c:6d:72:dd:5c:d1:d0:58:74:58:ff:7f:
         57:3f:eb:bd:be:58:42:ea:a0:73:02:e0:f3:42:c0:bc:17:66:
         1b:9c:bd:66:31:62:e2:14:7f:ba:d3:99:91:4d:06:45:19:b2:
         97:2e:50:00:df:73:40:65:e4:fb:3e:a2:a7:1e:71:db:a5:a3:
         32:b2:bb:1a:87:d5:f2:22:17:a7:2f:4a:4d:01:9b:33:50:1b:
         d3:50:f4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:25 2025 by rpki-client