This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
File:                     YsDafzAgXhQZA4UrhjIw-eHi-c0.mft (raw, json)
Hash identifier:          z5zwvHjEZFM2Bj7e3xlSCTEMUGr6/tDzOh5hEElNTYA=
Subject key identifier:   1E:AB:24:A5:86:E1:0A:F2:17:69:D0:DE:03:9B:27:BE:20:2B:9D:3B
Authority key identifier: 62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD
Certificate issuer:       /CN=A9175C2B/serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
Manifest number:          01AD
Signing time:             Mon 29 Dec 2025 02:19:46 +0000
Manifest this update:     Mon 29 Dec 2025 02:19:46 +0000
Manifest next update:     Mon 05 Jan 2026 02:19:46 +0000
Files and hashes:         1: YsDafzAgXhQZA4UrhjIw-eHi-c0.crl (hash: He/2UAyzKR0mMgvlp8nRReOv77rrRxDQ8irsVQmpgaY=)
                          2: 0EB2F53A59A711EE9419DA2DC4F9AE02.roa (hash: SEbumSKURIV/eHCI58ieU83y5eYeF9FfOCAWx1SOX3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl
                          rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 02:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175C2B, serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD
        Validity
            Not Before: Dec 29 02:19:46 2025 GMT
            Not After : Jan  5 02:19:46 2026 GMT
        Subject: CN=6951e542-2962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:3b:ae:eb:3c:70:5c:4b:1c:3e:16:ef:b2:
                    9d:9a:18:0f:d5:8a:66:ef:3a:d7:31:bd:f8:ce:8a:
                    dc:75:5c:c4:ce:ed:51:18:55:ab:16:0d:af:f4:9b:
                    27:ef:91:98:f2:88:34:e2:fb:00:33:80:16:67:27:
                    fb:65:ed:b7:3f:2b:e2:fd:d0:96:30:af:de:a8:bf:
                    a7:4b:66:40:16:25:3d:ad:31:bc:6b:49:ed:9b:cc:
                    46:33:e2:3a:f9:ea:49:c2:f1:14:67:a5:cf:70:4b:
                    be:ef:0b:1c:3d:70:f2:e8:7e:d6:f3:b0:cd:fb:f8:
                    6f:f7:90:11:84:d6:57:5d:88:f0:96:9d:4f:32:fd:
                    0b:15:8c:73:3a:16:53:36:74:5c:fe:9b:f7:7f:0c:
                    f3:69:96:54:6b:e0:c6:b6:dc:13:04:a4:30:e3:87:
                    ec:db:46:6a:74:0c:8c:1b:ab:0c:cf:b2:b6:45:d7:
                    68:05:f1:37:5f:34:f9:00:3d:09:23:22:d7:6d:51:
                    17:09:5e:df:77:51:eb:90:65:18:ca:d5:ef:b1:f6:
                    7b:24:1a:96:96:55:00:c7:8d:c4:46:3d:1a:7a:d3:
                    45:20:b0:2c:d0:15:7b:e0:39:a1:cb:b8:cd:7f:69:
                    85:62:22:04:90:c8:14:44:15:07:25:41:c9:72:44:
                    0f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AB:24:A5:86:E1:0A:F2:17:69:D0:DE:03:9B:27:BE:20:2B:9D:3B
            X509v3 Authority Key Identifier:
                keyid:62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5d:34:15:5e:d1:63:fa:5f:c3:4a:75:5b:4e:44:28:3f:42:
         6e:f4:04:47:aa:14:7a:81:ee:a3:20:64:9b:92:27:68:9e:03:
         95:a2:56:55:38:27:a8:3c:e3:7c:98:0b:25:82:7f:33:d0:00:
         48:7f:11:ca:24:5f:88:ab:0b:1e:d0:29:29:a6:d7:f8:f6:1e:
         5a:01:1d:4e:c3:70:7a:53:ac:5f:d9:b7:bc:37:18:4d:db:40:
         8d:44:20:36:a9:4c:a6:b9:7c:11:ce:4b:bb:67:d7:75:e0:31:
         6f:24:10:4f:98:4b:91:ba:6c:eb:88:45:cb:2d:d9:67:22:d7:
         77:f0:b1:d7:8f:c6:af:0e:8a:ff:c9:d1:ec:13:93:3c:82:b8:
         17:10:a6:26:7d:b4:de:54:8d:08:4d:b9:d7:03:fa:fa:cd:ae:
         36:95:1d:42:1a:57:03:a4:6c:d5:0d:28:60:ed:9a:ad:db:8c:
         73:bf:b3:a7:de:45:aa:12:01:2d:b1:3f:40:fd:61:7b:8b:bf:
         ae:67:18:2c:90:a1:d2:1b:71:76:db:42:50:8e:c0:7e:60:d8:
         3f:c4:de:55:d4:5c:58:bc:d6:d9:d2:81:90:2a:56:b8:29:0a:
         00:a4:a6:a3:8d:9c:70:9f:1c:8f:00:c3:41:2f:52:4b:71:e2:
         26:09:c6:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVDMkIxMTAvBgNVBAUTKDYyQzBEQTdGMzAyMDVFMTQxOTAzODUyQjg2MzIzMEY5
RTFFMkY5Q0QwHhcNMjUxMjI5MDIxOTQ2WhcNMjYwMTA1MDIxOTQ2WjAYMRYwFAYD
VQQDDA02OTUxZTU0Mi0yOTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs1k7rus8cFxLHD4W77KdmhgP1Ypm7zrXMb34zorcdVzEzu1RGFWrFg2v9Jsn
75GY8og04vsAM4AWZyf7Ze23Pyvi/dCWMK/eqL+nS2ZAFiU9rTG8a0ntm8xGM+I6
+epJwvEUZ6XPcEu+7wscPXDy6H7W87DN+/hv95ARhNZXXYjwlp1PMv0LFYxzOhZT
NnRc/pv3fwzzaZZUa+DGttwTBKQw44fs20ZqdAyMG6sMz7K2RddoBfE3XzT5AD0J
IyLXbVEXCV7fd1HrkGUYytXvsfZ7JBqWllUAx43ERj0aetNFILAs0BV74Dmhy7jN
f2mFYiIEkMgURBUHJUHJckQPHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6rJKWG
4QryF2nQ3gObJ74gK507MB8GA1UdIwQYMBaAFGLA2n8wIF4UGQOFK4YyMPnh4vnN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUMyQi9FRUJCQzExNjUz
NTMxMUVFQUVBRjBCODBDNEY5QUUwMi9Zc0RhZnpBZ1hoUVpBNFVyaGpJdy1lSGkt
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lzRGFmekFnWGhRWkE0VXJoakl3LWVIaS1jMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUMyQi9FRUJCQzExNjUzNTMxMUVFQUVBRjBCODBDNEY5QUUwMi9Zc0RhZnpBZ1ho
UVpBNFVyaGpJdy1lSGktYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDXTQVXtFj+l/DSnVbTkQoP0Ju9ARHqhR6ge6jIGSbkidongOVolZV
OCeoPON8mAslgn8z0ABIfxHKJF+Iqwse0Ckpptf49h5aAR1Ow3B6U6xf2be8NxhN
20CNRCA2qUymuXwRzku7Z9d14DFvJBBPmEuRumzriEXLLdlnItd38LHXj8avDor/
ydHsE5M8grgXEKYmfbTeVI0ITbnXA/r6za42lR1CGlcDpGzVDShg7Zqt24xzv7On
3kWqEgEtsT9A/WF7i7+uZxgskKHSG3F220JQjsB+YNg/xN5V1FxYvNbZ0oGQKla4
KQoApKajjZxwnxyPAMNBL1JLceImCcaq
-----END CERTIFICATE-----
Generated at Mon Dec 29 05:21:23 2025 by rpki-client