This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
File:                     PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json)
Hash identifier:          I6vCvC4lhJ+2D8jI6HIazRpUf1H5VHhqsV7i4qDgYjI=
Subject key identifier:   09:24:E9:AB:15:0C:EC:EA:D2:9B:85:75:B5:FF:E2:F8:88:9A:91:CB
Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B
Certificate issuer:       /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
Manifest number:          0113
Signing time:             Fri 19 Dec 2025 03:58:46 +0000
Manifest this update:     Fri 19 Dec 2025 03:58:46 +0000
Manifest next update:     Fri 26 Dec 2025 03:58:46 +0000
Files and hashes:         1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: F7eZJlY+XTdVS86oBqZKJltloWgzvx5L0EV0uep1gAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
        Validity
            Not Before: Dec 19 03:58:46 2025 GMT
            Not After : Dec 26 03:58:46 2025 GMT
        Subject: CN=6944cd76-608b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:28:22:32:37:aa:a5:b1:e1:2a:98:36:4f:f0:
                    8f:04:32:c7:a4:06:bb:97:40:19:b6:7a:df:6d:a3:
                    be:51:3f:25:e8:16:38:5a:ac:fb:27:81:de:98:a8:
                    2e:a8:17:f1:a1:3d:61:42:6b:1d:92:71:f8:73:48:
                    91:9a:43:fb:4e:3b:16:9b:df:3b:7d:fe:84:b0:21:
                    95:da:e3:7e:ac:87:5f:c8:89:de:91:a9:85:e4:a2:
                    57:62:55:67:02:71:16:3f:a0:e2:f1:fe:74:da:88:
                    86:d9:8c:6e:3b:3e:b9:f3:36:ba:af:b2:0b:1c:6b:
                    d9:87:9b:17:70:17:fe:6a:26:d1:c5:d3:07:3b:47:
                    e9:a5:c4:e8:2d:2e:91:05:4f:ce:c7:97:a0:a7:b7:
                    16:41:b6:9f:c2:81:83:5f:8b:b6:ea:d2:3e:22:06:
                    70:1f:eb:d8:1c:8d:77:09:fe:f4:6d:32:d6:f8:e8:
                    85:20:fd:d2:d4:18:1d:44:5e:01:b2:24:e8:7e:cd:
                    8e:95:e1:e7:33:87:bd:f8:b4:86:7b:61:2a:63:cc:
                    c2:84:4d:fd:ca:4f:14:43:52:9e:99:be:46:ff:88:
                    4f:27:4a:a1:4a:cd:55:71:33:22:a1:04:c7:c3:6c:
                    6f:04:5d:7d:0d:21:fa:db:d4:e0:33:4f:c2:7e:bb:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:24:E9:AB:15:0C:EC:EA:D2:9B:85:75:B5:FF:E2:F8:88:9A:91:CB
            X509v3 Authority Key Identifier:
                keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:25:61:fe:ec:a0:b6:83:c0:fa:26:72:04:df:56:c9:59:a1:
         ff:23:f1:58:d5:2a:bd:52:7c:07:ba:1a:53:d7:a7:70:9b:07:
         d6:93:5b:0c:ef:91:b4:c2:a1:9f:eb:43:26:5a:0d:d9:7d:5a:
         07:cc:51:53:30:79:eb:cd:ed:92:7e:bc:76:ea:ca:15:8c:3f:
         3e:d2:75:9b:1c:7c:d2:83:75:f2:46:66:6f:40:58:b8:a2:da:
         cf:de:41:16:4a:29:f4:6e:da:f0:57:81:d9:05:73:62:f6:ca:
         10:64:7b:b8:2b:47:f4:c7:89:86:9a:88:1b:f8:0d:3a:9e:49:
         88:2f:f7:8f:d6:29:dd:c0:c7:48:33:66:77:f2:70:c0:58:16:
         2a:ec:5a:e5:78:de:28:5f:18:43:8a:87:e4:a8:2f:a6:93:fd:
         c8:23:1e:8a:33:11:54:73:7b:5e:44:ba:77:1c:d2:6f:18:e6:
         ce:6d:5f:4f:6e:29:3a:04:9a:f0:ff:e7:10:62:6e:06:c2:44:
         da:5f:86:df:29:06:54:14:42:50:6b:d1:38:6c:c4:95:be:21:
         0c:45:ef:a7:63:30:0d:7b:c1:c4:48:ca:4d:8c:8b:45:c3:26:
         0f:b5:82:2e:6a:2f:50:6c:9f:a0:36:de:66:56:8e:a5:c9:84:
         54:ae:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:23 2025 by rpki-client