This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
File:                     SL_YCBmvF_vAh15iBvAoIqewTpg.mft (raw, json)
Hash identifier:          2huhl8YqdZVyYWxVWOJAV2WhX7qXkx2Gim5K+XBhWpw=
Subject key identifier:   53:FA:C6:F3:AF:A0:47:62:08:DB:CB:D0:32:CF:F1:FB:B2:23:33:CA
Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
Certificate issuer:       /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
Manifest number:          0471
Signing time:             Fri 19 Dec 2025 01:32:23 +0000
Manifest this update:     Fri 19 Dec 2025 01:32:23 +0000
Manifest next update:     Fri 26 Dec 2025 01:32:23 +0000
Files and hashes:         1: SL_YCBmvF_vAh15iBvAoIqewTpg.crl (hash: 15bDf9xMDF7+XV0niCLQu5oRbxir4wiCemDc2hWBQJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D, serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
        Validity
            Not Before: Dec 19 01:32:23 2025 GMT
            Not After : Dec 26 01:32:23 2025 GMT
        Subject: CN=6944ab27-fd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:3c:29:44:3d:c5:c0:7d:80:74:d7:6f:ef:
                    0c:c9:39:13:c5:9e:fa:47:b3:c6:52:1d:d2:72:68:
                    8c:4d:26:bd:8b:d6:02:c3:fb:4f:4e:c8:ab:3f:70:
                    5f:f2:80:41:2d:25:ef:a7:25:5d:0f:39:e0:d7:2d:
                    e8:39:a1:6a:c0:1a:4e:e5:22:52:c2:f7:af:32:52:
                    de:20:42:fe:79:b8:9b:b3:80:5f:e8:db:5b:24:a5:
                    8d:10:8b:99:da:f3:8c:75:03:64:f8:06:77:00:1c:
                    ba:d3:eb:93:98:ef:fc:3d:f2:8c:44:a1:27:89:06:
                    70:42:cb:e2:db:a8:46:a9:06:31:7f:06:93:16:58:
                    8f:ba:84:3e:4d:25:f6:f5:af:68:be:25:5a:c0:15:
                    ba:a1:ff:be:02:ff:58:df:f6:53:c0:73:2e:84:5f:
                    40:cf:61:66:bc:f8:cc:38:06:67:71:b8:55:1c:0b:
                    27:b0:8b:c1:0e:05:1f:76:47:78:c9:89:ef:d0:3c:
                    47:f2:82:e4:67:83:95:3a:4c:8a:25:4d:99:37:de:
                    0e:a3:15:fe:95:f5:0a:2d:2a:c6:b1:e2:40:a3:99:
                    a5:fd:73:fd:97:5b:9f:9c:55:bb:c6:6f:04:73:4e:
                    ff:91:05:9a:60:5f:6e:c6:47:c9:48:70:3e:bc:92:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FA:C6:F3:AF:A0:47:62:08:DB:CB:D0:32:CF:F1:FB:B2:23:33:CA
            X509v3 Authority Key Identifier:
                keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:db:93:2e:37:76:e8:56:da:9f:57:52:9a:1a:46:a0:2b:81:
         83:13:cf:35:69:52:4b:73:22:4a:97:3d:f4:0f:3e:67:db:86:
         57:ed:44:4c:35:d0:23:98:a8:91:6f:25:b6:f4:d6:cf:a6:da:
         d9:25:98:2a:6f:fd:4c:49:97:5d:08:25:f8:e6:95:1a:a3:de:
         92:7c:24:88:c6:ea:a1:00:3c:94:31:b7:cc:f0:2d:bf:b4:49:
         49:91:f0:96:3e:8e:28:ab:b9:ca:a9:db:12:6e:41:93:8c:55:
         57:f9:f7:29:1b:73:ed:e7:a5:24:86:6f:5c:23:e6:ce:be:a6:
         2f:a3:60:1f:b2:90:f4:cc:8b:0c:6b:bc:68:e3:45:10:a7:71:
         21:68:25:38:b8:27:f6:4c:4f:ea:d4:27:a1:68:79:4a:e1:18:
         09:7d:97:53:e6:c4:5c:8c:c0:4f:60:ef:a9:e6:92:a4:ee:f4:
         ca:29:5e:d1:1a:4f:1a:46:f0:64:89:d4:77:d4:b4:4e:dc:70:
         44:fb:79:31:59:f8:83:10:23:76:55:0d:1d:9b:d9:6a:d5:c3:
         11:b4:60:df:0f:fe:da:08:8e:c4:b6:6a:13:28:d5:fb:2e:3a:
         60:f6:16:05:bb:7c:92:81:25:ff:7f:a4:d0:50:d0:02:de:13:
         6c:c8:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:50 2025 by rpki-client