This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
File:                     lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft (raw, json)
Hash identifier:          aIXY1C98LIDu77fJ2ikfxA4NMY6mf2vvlQYhIAwyxUs=
Subject key identifier:   1C:F7:4F:C9:1D:A2:81:6E:37:A0:F6:E9:1B:F2:1C:90:C2:6C:78:D2
Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73
Certificate issuer:       /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473
Certificate serial:       0402
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
Manifest number:          03FB
Signing time:             Sat 20 Dec 2025 23:42:54 +0000
Manifest this update:     Sat 20 Dec 2025 23:42:53 +0000
Manifest next update:     Sat 27 Dec 2025 23:42:53 +0000
Files and hashes:         1: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl (hash: PxJ7zCromhD+NNyHzQBQNAM9sSxXb4qg0UkncsEIjt4=)
                          2: 886907F8EE9911EDB02DA367C4F9AE02.roa (hash: Wvz4cNe0OC8IhG60u+77ZZqG7jnCfkJuPUgGit+D/Bg=)
                          3: EAAACB14A46111ECA6D7AC4AC4F9AE02.roa (hash: G0VAwKVz22dJplsZ8JCisNdr5V+Bm42xeQ9XdjBCqhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl
                          rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1026 (0x402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B180, serialNumber=9585475735E2EE103A88357769E176306D197473
        Validity
            Not Before: Dec 20 23:42:53 2025 GMT
            Not After : Dec 27 23:42:53 2025 GMT
        Subject: CN=6947347e-245e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fb:b4:8b:d7:94:ad:72:1c:53:c8:75:1c:91:
                    bc:9c:df:19:eb:88:05:cf:80:7a:c5:c6:55:cb:16:
                    06:21:3e:94:b6:58:99:24:ef:1c:b5:85:e3:b5:2b:
                    56:08:96:91:80:e2:e4:62:f4:d4:ab:9a:9c:87:ee:
                    67:e7:61:48:f6:1d:c6:4e:81:39:d1:45:c2:f3:db:
                    ef:09:cf:73:c4:03:2e:65:07:60:25:6e:7e:70:f7:
                    c9:da:03:39:8a:53:fb:c4:c2:0c:b5:38:0a:73:72:
                    6b:18:4c:05:5d:93:c1:a6:05:9f:5c:d8:09:f6:76:
                    c7:2a:26:80:ad:29:60:11:72:2b:86:52:b4:15:75:
                    bf:62:76:a4:40:70:0b:7d:d7:e9:9b:6e:e1:e3:ed:
                    39:df:96:1c:a2:ab:ea:4b:d4:e7:d8:f0:d0:dd:17:
                    c9:c7:25:6b:cd:04:d7:d2:57:95:63:d3:e9:a4:d3:
                    2b:e3:f5:81:86:c2:01:b5:ce:26:ea:f2:72:07:91:
                    86:12:4b:5c:4f:bd:d3:94:2a:da:4d:81:bd:f4:5e:
                    1a:b0:e9:64:2a:7d:70:a0:bb:19:b4:6e:f7:c8:fd:
                    f2:b6:a7:ad:9d:92:66:67:d3:8b:0b:01:f6:cf:ed:
                    d6:57:a9:56:c0:c6:b2:19:8f:8b:26:43:fa:f0:9c:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F7:4F:C9:1D:A2:81:6E:37:A0:F6:E9:1B:F2:1C:90:C2:6C:78:D2
            X509v3 Authority Key Identifier:
                keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1b:13:51:15:b0:2c:8c:09:ac:47:f5:13:8c:d4:c9:1f:4b:
         5a:11:ec:5d:e2:13:d5:83:cd:78:0b:59:cf:8e:c2:30:46:bd:
         54:8d:04:9e:0f:b1:1a:e4:1f:cb:3f:2b:cc:64:e6:d8:9f:df:
         52:83:44:50:45:82:35:05:84:2d:4a:4a:ad:f7:70:83:fb:2d:
         e7:3a:14:53:50:54:3e:f4:1d:c4:ab:3f:1d:2b:a0:c6:c1:c3:
         35:93:91:a7:52:90:6b:39:93:da:1e:71:34:fe:92:fa:36:20:
         06:50:07:e6:98:bb:ec:f3:41:14:02:63:3c:e3:c5:bf:54:2f:
         c1:35:eb:85:01:41:2c:6e:83:01:e3:2a:14:f1:12:22:89:54:
         9b:7c:ab:f7:7e:c4:4a:a4:c5:64:3a:69:c7:0f:59:41:1c:4b:
         8c:74:f4:3c:d9:52:92:2a:53:bc:b6:51:a5:66:73:29:32:0d:
         30:56:a4:3d:66:c4:96:6e:11:9a:21:fd:cf:59:3c:70:9b:02:
         41:20:94:98:8f:7e:8d:9d:be:98:53:a4:5b:ec:8b:42:dc:21:
         d4:18:b7:3b:8b:79:13:fb:71:05:78:ce:90:9f:bf:71:55:ed:
         77:74:e8:82:c9:0c:77:50:39:64:e3:29:63:ad:47:63:f1:e8:
         fd:13:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:45:55 2025 by rpki-client