This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft
File:                     yvg06LwFd8t93bA-7UaRLns0ccw.mft (raw, json)
Hash identifier:          CsPG6qujO4ucBcxAR0oOachTflmns70IvvJ0vEXtlb8=
Subject key identifier:   3A:5D:5C:C7:73:FD:7E:D8:42:66:DD:AC:B2:31:96:22:F2:C0:26:7C
Authority key identifier: CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC
Certificate issuer:       /CN=A9158D5B/serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft
Manifest number:          010E
Signing time:             Mon 29 Dec 2025 04:03:33 +0000
Manifest this update:     Mon 29 Dec 2025 04:03:32 +0000
Manifest next update:     Mon 05 Jan 2026 04:03:32 +0000
Files and hashes:         1: yvg06LwFd8t93bA-7UaRLns0ccw.crl (hash: iQvecKgnJ29ATdc556RhSi7cgFZJ0yyh6MbJ6m85SpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl
                          rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 04:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158D5B, serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC
        Validity
            Not Before: Dec 29 04:03:32 2025 GMT
            Not After : Jan  5 04:03:32 2026 GMT
        Subject: CN=6951fd94-5fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:af:a6:1b:78:00:2c:4f:9e:69:a2:2b:a2:2b:
                    1b:30:48:0a:1b:72:24:b7:cb:d4:6b:84:c9:a8:10:
                    75:87:45:e2:f5:4d:b7:b8:16:b8:41:e1:f3:7a:f5:
                    0f:6b:6f:df:2c:6d:16:37:2b:14:96:47:09:7e:9f:
                    e4:37:7e:79:50:1a:81:85:7e:21:cc:83:d5:fc:5e:
                    30:ce:60:d9:41:3e:35:77:35:72:23:dd:dc:97:2a:
                    c6:c8:81:fd:96:ee:15:af:e0:28:30:f9:12:e3:b5:
                    3a:4c:4f:af:cd:83:2b:da:b9:2c:d1:9f:ac:15:46:
                    d7:06:73:fd:94:55:ff:f8:c9:ce:2e:52:7b:2c:0d:
                    10:7b:5c:2d:64:7f:aa:ec:38:15:4c:e7:6b:9b:6d:
                    d1:cb:28:e2:fd:1b:db:be:e8:3a:a8:e7:94:cd:8e:
                    b6:5e:37:b4:7c:63:cd:93:5b:ab:06:e6:a2:7b:de:
                    79:3d:25:c2:83:50:02:e4:76:21:f9:e3:60:9a:60:
                    f0:a7:02:fc:ed:6c:8d:15:4c:4f:3b:c5:0c:cd:8b:
                    79:c2:fa:69:61:80:e9:b6:08:7c:71:73:6d:f0:52:
                    a3:b4:2c:76:4e:1a:ac:c3:c9:c8:d6:0e:15:8a:d0:
                    ba:54:33:9d:1a:cf:c4:8b:f4:26:f2:ee:67:a2:05:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5D:5C:C7:73:FD:7E:D8:42:66:DD:AC:B2:31:96:22:F2:C0:26:7C
            X509v3 Authority Key Identifier:
                keyid:CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b2:c8:c3:1a:0c:44:06:42:47:8b:dc:06:15:a9:1b:9c:40:
         86:78:e5:c4:05:eb:ad:1d:46:7c:2f:bd:ae:cb:36:7c:7f:75:
         e3:ab:a8:46:66:85:ee:18:0f:1d:2e:e2:2d:4e:3a:e9:ac:c3:
         54:d3:d3:7d:af:f4:fe:be:d9:cc:55:cb:cb:05:44:8c:a2:16:
         a5:86:14:53:6c:a7:a7:9b:23:69:c3:69:b2:92:07:a8:1b:2a:
         2b:fe:c8:ff:58:28:3c:98:9e:a7:ef:78:21:69:9c:0e:a8:07:
         42:4c:be:15:e2:5b:92:01:7e:cd:9b:75:a7:87:9a:d3:ad:eb:
         0e:22:9e:8c:9f:72:48:b5:01:a1:90:24:3e:60:2a:4d:5b:9e:
         88:27:39:6e:65:78:ee:f2:d1:57:1e:77:84:c7:76:e8:cb:4a:
         4d:5a:50:5b:80:3f:cc:4c:0e:52:13:0b:59:f7:2b:12:b0:50:
         29:d0:3d:5a:26:e1:d3:54:99:9c:76:9a:f5:85:00:4c:99:98:
         e9:f6:37:f3:27:92:b9:06:5e:06:d7:c1:8b:d5:ba:b8:be:19:
         54:28:8e:d7:62:45:7c:24:5e:2c:3b:e1:6d:d9:23:81:8f:3c:
         c8:9a:7b:70:46:18:6a:6e:7e:a7:85:49:94:4d:60:98:42:10:
         26:18:1b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 06:17:02 2025 by rpki-client