This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft
File:                     yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft (raw, json)
Hash identifier:          lVBKC5IhwtY8iq0U/55RDeC0A2IYbIbnzIsEJUYmINk=
Subject key identifier:   35:2D:6F:7E:8D:91:48:AD:D8:10:9B:DE:10:41:11:E6:5E:F1:F4:AD
Authority key identifier: CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B
Certificate issuer:       /CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B
Certificate serial:       02EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft
Manifest number:          02E6
Signing time:             Tue 23 Dec 2025 00:19:02 +0000
Manifest this update:     Tue 23 Dec 2025 00:19:02 +0000
Manifest next update:     Tue 30 Dec 2025 00:19:02 +0000
Files and hashes:         1: yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl (hash: +iJrrXxDYpc53YJ4rVX66+A5JxOk+QTro+M3tSSWr/A=)
                          2: 755581D40D7E11EDA9F2CA4AC4F9AE02.roa (hash: L/OoYrYOhuGJMFdRgAmm9owGHD6xvG0PlHjA2AQlTLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl
                          rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162914, serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B
        Validity
            Not Before: Dec 23 00:19:02 2025 GMT
            Not After : Dec 30 00:19:02 2025 GMT
        Subject: CN=6949dff6-a5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:46:6d:75:af:92:fd:70:4c:38:eb:77:34:
                    77:08:5a:4b:ca:14:b8:98:9b:1b:e9:a9:e9:4d:13:
                    5d:0f:90:ad:dd:32:7c:4b:70:87:88:46:7f:cb:3a:
                    a2:1f:4b:3d:40:79:d0:35:9a:d6:dd:1a:70:ef:3b:
                    26:31:ff:7e:d8:97:f1:88:32:dd:cd:09:0c:78:d4:
                    bf:ea:2f:b8:d7:fd:dd:32:23:71:1d:2f:a5:ed:f1:
                    2e:94:ce:36:ec:cc:ca:43:56:5f:67:a7:7e:3c:8a:
                    cd:9e:84:17:d6:f7:24:a4:a8:22:34:aa:d6:05:ba:
                    b2:1e:7d:60:36:e6:b3:c8:eb:b4:d1:b7:30:1c:2b:
                    f8:58:fb:2a:28:d8:3f:a7:bd:f6:31:37:aa:73:75:
                    0c:00:22:24:c8:de:79:be:11:a8:37:cf:10:e5:95:
                    d3:54:d1:1a:50:19:af:e1:fd:0e:0e:94:02:9b:92:
                    b8:b2:ef:0e:d4:b3:b7:ad:d0:f2:69:74:63:8d:f5:
                    ae:b3:8c:46:e6:40:aa:18:26:30:f1:e9:7e:09:57:
                    4a:84:cd:8e:a0:9e:dd:5c:05:32:4b:ec:6f:1a:07:
                    be:88:8b:0f:9b:9b:77:7c:11:89:6e:64:aa:c0:38:
                    1d:f3:5d:85:d7:27:d6:b3:9a:9c:8d:01:2e:5d:66:
                    69:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2D:6F:7E:8D:91:48:AD:D8:10:9B:DE:10:41:11:E6:5E:F1:F4:AD
            X509v3 Authority Key Identifier:
                keyid:CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:27:04:a3:d7:a5:fe:28:2a:fb:be:79:01:c9:5f:44:16:89:
         54:03:7b:57:a7:5c:5c:3a:33:db:89:b0:05:23:2c:6e:3c:ac:
         83:fa:3c:ac:9b:ab:25:14:3d:95:d4:9f:c6:db:d1:cc:ac:16:
         8f:50:0f:95:7d:76:49:a8:fe:3b:cb:50:0c:31:a1:ca:ab:3e:
         3a:5a:4d:b1:7b:22:d6:47:68:6b:f5:f4:00:21:b2:a8:49:f1:
         85:13:4e:ac:c6:50:fe:cf:3c:91:38:35:83:fc:a8:a1:d0:75:
         11:96:35:c7:8f:3c:bb:96:82:bf:d0:aa:6b:fa:60:c3:54:5f:
         9c:40:30:95:06:63:f9:11:cd:76:c4:a1:6a:c1:5a:92:ef:46:
         b6:0b:1c:79:f5:33:ca:52:56:0b:21:27:59:13:06:7f:e9:e5:
         8a:00:5c:5a:74:76:56:35:b5:38:7a:1e:2e:08:83:51:15:ef:
         12:cf:03:29:14:4e:52:c2:f0:33:b1:92:76:98:21:41:d8:98:
         7f:e2:70:a9:85:d9:2d:01:52:0b:e1:34:2f:95:fb:12:f9:ae:
         44:07:4c:3e:44:81:8e:77:24:49:6a:35:5e:59:44:41:0a:93:
         54:06:62:f9:17:73:c8:bb:c5:67:4c:fd:c1:e6:7f:b5:8f:92:
         9e:16:08:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 23:53:24 2025 by rpki-client