This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
File:                     y7Nb36Nai-snCaTbsy49IWLsH6g.mft (raw, json)
Hash identifier:          K3oXenDJmS8tWl1aQU93leBtqlruV2GlK7oJnHh3ECY=
Subject key identifier:   2A:57:D2:80:81:21:C0:A5:94:F6:A2:B5:78:12:CD:BA:99:17:33:49
Authority key identifier: CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8
Certificate issuer:       /CN=A919130F/serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
Manifest number:          75
Signing time:             Fri 19 Dec 2025 05:50:09 +0000
Manifest this update:     Fri 19 Dec 2025 05:50:09 +0000
Manifest next update:     Fri 26 Dec 2025 05:50:09 +0000
Files and hashes:         1: y7Nb36Nai-snCaTbsy49IWLsH6g.crl (hash: uOJLAMvmDraXEs2UJWk9jaOyEgNK/GP9oma9b+Oyh7w=)
                          2: 26B1D24C2A4211F08783A40EC4F9AE02.roa (hash: SDRI2ES0jWjnto/2GRG1yqaHYEDkagPUNjmUepTZiAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl
                          rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919130F, serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8
        Validity
            Not Before: Dec 19 05:50:09 2025 GMT
            Not After : Dec 26 05:50:09 2025 GMT
        Subject: CN=6944e791-d1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:e5:c9:9a:ba:ba:83:95:91:0a:0f:7d:ff:
                    2d:2f:f9:dd:e1:c6:2e:b3:c7:a3:ea:91:f9:1d:0d:
                    d0:03:c6:d5:31:73:5a:a4:ab:b0:c0:b9:6a:8b:8e:
                    fd:6b:d1:8e:09:bb:ef:4c:a7:c7:b5:83:32:7e:5c:
                    b7:46:ca:ef:35:e8:43:51:54:ec:ce:f7:65:54:fc:
                    77:41:e7:f3:f9:b0:30:0d:e1:84:84:ff:06:f0:e0:
                    6e:5d:01:40:10:2d:03:d9:31:03:62:08:37:5b:e0:
                    3f:e2:38:6a:cf:66:d6:0b:a7:bf:de:50:8b:d6:52:
                    b3:03:77:ef:92:35:20:0a:51:29:3d:d8:57:70:8f:
                    f1:97:a3:a2:81:8b:76:9c:02:67:4f:0e:73:a8:d3:
                    2c:29:dd:89:82:26:d5:6a:05:75:10:22:53:95:92:
                    7f:28:1b:f5:f5:7d:d9:89:a3:e1:6b:81:b4:80:d6:
                    fc:a5:0d:8c:f2:60:a2:6e:01:e6:fe:58:95:df:92:
                    20:bc:50:4f:be:bb:d2:1a:ed:b8:5b:47:89:d3:69:
                    a0:11:11:e4:00:ad:21:82:f5:4b:51:ca:5a:5e:f3:
                    44:92:1a:c1:76:c8:1c:03:d1:4b:38:90:16:ca:3b:
                    0a:ea:62:7e:0c:81:5b:81:17:ac:a0:11:4b:5f:67:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:57:D2:80:81:21:C0:A5:94:F6:A2:B5:78:12:CD:BA:99:17:33:49
            X509v3 Authority Key Identifier:
                keyid:CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:33:cd:2f:8f:13:32:44:91:5a:b5:48:ca:c6:79:e6:48:5a:
         15:e1:97:dd:e5:4e:1e:dd:53:62:b8:99:77:ae:38:7e:af:e5:
         ce:04:25:0e:7a:b0:be:68:cb:58:52:6b:fe:64:2a:93:ee:f7:
         1f:58:a5:de:d2:2b:25:e0:d7:ba:90:ef:14:bf:e1:1c:ec:28:
         80:fd:4f:d3:6b:85:26:ef:3e:ab:45:22:98:90:0e:bc:30:86:
         67:03:bc:31:d9:0a:05:55:93:4c:68:9e:3c:01:76:9d:46:3a:
         de:d3:76:6f:67:25:cd:20:9c:04:7d:f1:07:82:ab:99:22:a5:
         b7:97:13:94:3e:7a:97:7e:cb:f7:13:a3:1d:9f:ce:28:1d:08:
         f0:f1:00:76:9c:6c:72:4f:a2:6a:ed:9b:1c:41:4f:c6:6a:53:
         e2:7d:6a:81:38:81:76:c0:7e:72:6b:df:34:c2:08:f4:b8:58:
         8d:87:3b:94:b1:b6:de:f1:01:6a:4f:38:dc:f8:a1:87:50:4c:
         72:16:99:b4:3f:b2:6e:73:2e:89:70:e1:4e:df:88:2d:2b:36:
         1a:4a:8a:e6:73:a1:c7:b6:c8:12:1b:99:3e:e0:bd:b5:c5:d2:
         83:8f:eb:69:35:33:b2:05:58:d3:0d:6e:f1:3f:11:96:5f:55:
         fc:17:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:59 2025 by rpki-client