This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
File:                     yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json)
Hash identifier:          XiKbLjytZyjQG8fAGkHYycpxgEbERMBAal5y4YpiM3A=
Subject key identifier:   82:8E:E5:5C:3B:F9:D2:D0:70:32:4B:EA:7B:21:EA:0E:39:D4:B8:62
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
Manifest number:          01CB
Signing time:             Fri 19 Dec 2025 02:08:27 +0000
Manifest this update:     Fri 19 Dec 2025 02:08:26 +0000
Manifest next update:     Fri 26 Dec 2025 02:08:26 +0000
Files and hashes:         1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: 4tqBbZ63fL6TihD73b+JDoN+G3SiqmzyC2w3HveOeDM=)
                          2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: CaEKHRoKKS0xih9+MI5NnGo2p0uXvy+Gde+CICjV6ME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
                          rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: Dec 19 02:08:26 2025 GMT
            Not After : Dec 26 02:08:26 2025 GMT
        Subject: CN=6944b39a-4cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:08:6b:ca:2f:3f:ff:5d:95:79:8a:e5:13:
                    64:f5:73:e6:f9:12:b0:94:f1:73:52:48:71:ad:eb:
                    5b:cd:c3:90:14:b8:84:44:8a:b5:1b:5a:91:97:09:
                    14:3a:88:e6:1a:f0:55:81:15:36:55:4d:aa:f4:8d:
                    c4:33:5c:01:c0:cd:7e:1a:8b:41:d6:ef:51:3b:37:
                    6b:74:5c:31:51:ab:14:9a:3b:24:f6:27:48:ae:fe:
                    ad:71:e3:62:d7:1c:7f:7b:31:ae:2f:85:be:13:fe:
                    67:eb:93:de:4e:c4:eb:b9:c4:2e:27:25:e6:48:18:
                    44:8d:7d:00:ef:ad:e7:d1:f5:84:32:e1:27:9b:91:
                    eb:85:d1:cc:0d:00:9e:be:6b:9e:75:d2:19:91:8d:
                    db:ae:a3:dd:b5:da:9a:a4:89:da:d3:0c:53:6b:c8:
                    77:39:3e:1b:00:ce:55:7c:2b:f1:b7:81:22:da:8e:
                    43:47:1f:e5:49:4f:d3:54:33:67:f7:74:d9:91:ae:
                    ec:37:d1:15:b4:e8:c3:1b:5f:08:7a:72:d5:c1:19:
                    34:21:c5:ea:c4:a7:30:f3:e1:88:e7:b2:6b:14:5c:
                    c9:67:dc:9e:0c:49:9c:00:9b:6b:07:9e:f6:c8:2f:
                    1f:cc:dc:8b:7c:03:22:05:3e:26:4a:cd:c0:0c:95:
                    4f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8E:E5:5C:3B:F9:D2:D0:70:32:4B:EA:7B:21:EA:0E:39:D4:B8:62
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f3:99:20:7f:14:7f:66:cb:64:04:a3:6d:d6:53:4f:cf:02:
         87:cb:14:cb:cf:5c:d5:19:81:44:94:a3:c6:8e:c1:67:35:98:
         6f:51:cc:01:78:44:5f:d5:76:e6:05:79:fe:7c:5b:67:99:37:
         85:a4:72:c9:67:42:cd:5d:1b:3d:b5:d8:02:6c:80:07:39:9a:
         24:6f:6e:41:f9:02:ff:fd:0e:52:c5:fa:9c:09:a5:6b:fd:5a:
         5f:14:f7:fe:08:17:24:2d:29:f5:d2:f2:19:f3:e1:a4:49:01:
         38:1c:8f:de:84:32:7c:71:04:df:fc:9d:52:b8:2b:b8:0a:bf:
         db:06:5d:e4:21:c9:1f:34:59:de:09:44:5e:4c:1e:25:b2:a2:
         ad:03:4d:dc:02:49:d7:88:63:97:10:02:52:14:a2:4e:18:ba:
         db:85:de:05:da:be:c4:c0:db:1d:7e:6f:57:45:2b:ab:aa:79:
         93:72:f2:35:a2:c3:90:4c:f6:08:a1:3a:9b:bf:30:19:46:5c:
         58:52:0b:ae:8b:24:90:c4:68:60:8d:bf:b8:2c:93:fe:53:8e:
         31:e4:b7:80:4c:02:c6:a0:99:13:9c:9e:10:53:6f:b4:b8:f2:
         a3:7c:8a:52:e0:dc:23:29:aa:94:f6:13:c0:1c:ea:d9:7a:73:
         46:68:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:03 2025 by rpki-client