This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft
File:                     yU_6eqS897yayfDTywnSlOVxFiM.mft (raw, json)
Hash identifier:          qM72VQE5qjv6/7sW28lE+i5hxs4+xpsILXbPr5PFZlc=
Subject key identifier:   13:FC:48:F9:D1:2D:51:59:5C:F9:14:A4:9B:2F:DF:3A:9D:AB:89:B2
Authority key identifier: C9:4F:FA:7A:A4:BC:F7:BC:9A:C9:F0:D3:CB:09:D2:94:E5:71:16:23
Certificate issuer:       /CN=A915730C/serialNumber=C94FFA7AA4BCF7BC9AC9F0D3CB09D294E5711623
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft
Manifest number:          66
Signing time:             Fri 19 Dec 2025 06:00:31 +0000
Manifest this update:     Fri 19 Dec 2025 06:00:31 +0000
Manifest next update:     Fri 26 Dec 2025 06:00:31 +0000
Files and hashes:         1: yU_6eqS897yayfDTywnSlOVxFiM.crl (hash: UhyIcrjYFuFTwNdaulo6yze+EgBfwwg6mkldRjaOPZk=)
                          2: 949C3D70497C11F0A5181A5FC4F9AE02.roa (hash: jJYL7x8+30zgOjJC0KXeGcN5Hx3RtHR1U+WuBZx+L40=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.crl
                          rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915730C, serialNumber=C94FFA7AA4BCF7BC9AC9F0D3CB09D294E5711623
        Validity
            Not Before: Dec 19 06:00:31 2025 GMT
            Not After : Dec 26 06:00:31 2025 GMT
        Subject: CN=6944e9ff-4d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e1:d8:59:12:bf:d0:57:a9:72:ac:48:fa:c6:
                    4e:e7:ea:bb:77:b8:31:1a:68:c0:88:12:28:2f:05:
                    ed:d7:c6:76:d0:80:d2:78:0d:5c:09:c2:e8:34:d7:
                    7c:0a:b7:7e:4d:31:52:37:2d:3f:94:78:51:20:f6:
                    cf:cd:8e:3f:17:fb:84:f8:6a:39:c1:00:e8:5e:89:
                    95:9c:6a:f4:64:8f:0d:8b:39:a1:42:37:b5:6b:b8:
                    d2:d3:a7:0c:85:c5:78:65:76:21:67:bc:00:45:5e:
                    6f:10:aa:a4:ae:62:d8:e2:72:13:9a:42:9a:00:93:
                    5d:37:b8:19:18:3b:21:7e:c9:95:a1:43:4b:38:0f:
                    d9:55:17:00:e4:81:e4:42:bb:69:f8:37:38:6c:c3:
                    18:67:bd:fe:fb:3f:29:74:4c:98:97:ad:ce:7b:98:
                    51:ee:c4:d8:c6:41:02:a8:78:ee:d2:e3:0b:cb:94:
                    6b:0a:4d:5a:78:5e:7b:ee:ad:49:07:57:30:d7:98:
                    17:cc:cf:c8:88:3e:20:cb:c9:09:7a:82:40:a0:e7:
                    bd:65:82:2e:3a:f3:8d:f4:27:d4:b2:69:9a:39:d7:
                    07:bd:18:2c:04:d3:10:5e:f1:a4:59:84:a7:40:cf:
                    3f:2b:e4:31:86:ed:01:5b:81:fa:b0:e3:93:72:5b:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FC:48:F9:D1:2D:51:59:5C:F9:14:A4:9B:2F:DF:3A:9D:AB:89:B2
            X509v3 Authority Key Identifier:
                keyid:C9:4F:FA:7A:A4:BC:F7:BC:9A:C9:F0:D3:CB:09:D2:94:E5:71:16:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:66:54:9e:90:db:d8:df:1d:ff:6a:83:21:ba:d4:98:e1:c9:
         44:d9:79:91:3b:3f:6d:b0:3a:13:e6:ec:82:2e:fe:91:05:d7:
         5f:61:0e:27:9f:19:14:d8:a6:6e:5a:1e:a9:0e:f7:ca:99:0c:
         79:99:87:0d:1e:ef:dd:c8:7c:6b:98:97:0c:ef:a3:03:ad:22:
         2a:51:bd:e8:e5:08:62:73:e9:de:53:bd:35:7c:42:78:f6:6a:
         83:b4:16:ec:f4:27:05:98:66:dc:9a:44:f8:f7:aa:af:09:62:
         aa:de:30:f0:a9:cf:f1:dc:69:4f:39:ed:a7:1f:a5:7a:c1:97:
         56:d5:25:d7:34:1e:cd:a8:56:ac:82:4c:99:e6:1c:42:fc:a3:
         1e:d3:64:20:89:87:78:15:09:fb:8c:5c:36:27:d2:21:dc:79:
         a2:fa:19:1b:77:c9:56:58:42:64:ae:df:59:c7:2e:b4:b1:36:
         0a:cf:9e:46:1b:1e:e8:c1:4d:23:de:b3:1f:87:d1:25:37:f5:
         66:c1:5b:5d:65:f4:11:1f:74:de:e6:da:94:3b:86:44:6e:2a:
         56:af:e0:0d:10:1c:51:5d:15:a9:d0:b7:63:80:6e:42:25:ff:
         14:f0:f5:82:9e:64:d6:53:c1:94:e5:77:1c:4f:74:88:92:36:
         fe:33:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:58:52 2025 by rpki-client