This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
File:                     yRauWpUgtfZ2fnnJFa-hv25JGJk.mft (raw, json)
Hash identifier:          jHch9ODMRIjPheq4wwAGHATAxjBH5DoLA6Iou1XK2eo=
Subject key identifier:   BA:6C:EE:D2:5A:C9:F0:AF:94:5B:D1:70:D1:19:E1:47:53:8C:28:6B
Authority key identifier: C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99
Certificate issuer:       /CN=A9188CC3/serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
Manifest number:          AD
Signing time:             Fri 19 Dec 2025 05:16:59 +0000
Manifest this update:     Fri 19 Dec 2025 05:16:59 +0000
Manifest next update:     Fri 26 Dec 2025 05:16:59 +0000
Files and hashes:         1: yRauWpUgtfZ2fnnJFa-hv25JGJk.crl (hash: wvMUnYrSvPgWubV/W7dqKv8jjfi50Rba55oMVojH3ak=)
                          2: DAB3F33EDE0B11EF8FDDD043C4F9AE02.roa (hash: G1v5+8h/MYXTe3+eWlg2+RhrSnONlMU1fq7WMc3wQgk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl
                          rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188CC3, serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899
        Validity
            Not Before: Dec 19 05:16:59 2025 GMT
            Not After : Dec 26 05:16:59 2025 GMT
        Subject: CN=6944dfcb-1074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:65:ca:df:85:2a:e4:48:aa:13:a7:b9:f5:
                    30:da:5c:2c:91:80:3b:76:f2:e9:b4:72:1b:7b:f8:
                    df:d6:b2:58:e1:0e:84:9a:08:42:ec:85:30:43:b0:
                    5a:78:a3:5d:47:0b:29:17:ef:ee:0c:49:61:8d:43:
                    57:6c:23:cd:73:aa:ec:6d:b3:c9:57:d8:86:f3:f6:
                    33:2c:8b:e2:42:fd:10:a6:f0:2d:1c:96:da:9a:1f:
                    59:69:13:6f:02:27:cf:4b:9e:b6:4b:4b:33:f6:39:
                    6b:c9:de:e8:a2:5a:96:96:bf:b2:07:c7:2e:08:3a:
                    21:a2:27:3e:b9:d8:02:4b:e2:66:5f:01:d4:46:95:
                    71:11:a3:e2:ae:da:90:d6:84:a2:6e:d4:d0:e8:92:
                    6e:60:0b:76:e7:19:45:ff:1e:2f:c4:1a:b5:e2:21:
                    8c:5b:84:80:a5:24:27:92:58:b8:21:c4:06:0a:31:
                    e2:80:db:30:4a:e7:4e:22:3c:9e:1a:ba:16:36:78:
                    aa:9d:ff:cc:8b:67:ea:9a:94:a9:72:5d:4a:5f:3a:
                    2d:d0:9d:07:6f:e5:31:0e:aa:2f:21:f7:a5:a8:b7:
                    08:d8:cb:69:7d:24:da:d5:f1:5d:2e:7d:67:e2:58:
                    af:11:c2:9d:62:34:84:df:27:1e:47:6b:ef:31:b1:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6C:EE:D2:5A:C9:F0:AF:94:5B:D1:70:D1:19:E1:47:53:8C:28:6B
            X509v3 Authority Key Identifier:
                keyid:C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:43:70:fd:ce:23:19:47:80:6f:66:09:ff:9e:c5:6a:d6:61:
         f1:51:2b:56:59:ee:91:78:7e:96:e8:55:ab:3d:a6:1a:4b:71:
         22:d1:83:9a:12:df:47:8e:c6:7d:1e:3d:a1:58:4a:2c:a8:4c:
         c9:cb:aa:1e:69:73:df:d4:67:94:b5:9d:e7:05:38:d7:a2:50:
         f2:c7:15:8c:b4:6d:46:b6:e8:da:be:1b:dc:e5:11:41:af:94:
         04:d8:f3:3e:45:57:35:90:d5:49:9e:17:6b:cf:91:56:96:64:
         05:c0:b7:8d:41:17:87:09:ae:ac:12:f7:6a:af:b6:76:44:25:
         04:f9:d3:f1:06:be:39:e3:07:5d:63:48:32:a5:44:6c:29:9c:
         8c:b3:84:75:df:22:c6:71:9f:70:27:a4:83:9b:1e:46:78:cb:
         42:d7:4f:a2:28:32:d5:e2:b5:ac:7f:51:b8:93:fd:89:43:ad:
         e5:20:9e:05:d9:ac:40:d3:50:af:47:97:31:23:18:09:bd:7e:
         49:b3:cd:a0:34:81:64:e3:e1:70:99:69:69:fd:83:fe:17:ab:
         ab:44:4f:01:a3:a2:32:cd:47:29:80:de:bc:6d:ae:f5:d2:e6:
         fb:93:ce:31:af:0b:09:86:3a:78:a8:d7:53:a8:4a:74:e6:82:
         a4:df:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:11 2025 by rpki-client