This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
File:                     PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json)
Hash identifier:          DoVHcHsq6iXBdeMLfJKRDm2Qej3OLM1qvFKUWhjTTfc=
Subject key identifier:   82:A4:DA:BA:B4:1C:62:54:70:CA:FE:C1:86:C3:B7:C9:63:BC:39:F5
Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
Certificate issuer:       /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Certificate serial:       081F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
Manifest number:          0817
Signing time:             Thu 18 Dec 2025 20:25:25 +0000
Manifest this update:     Thu 18 Dec 2025 20:25:25 +0000
Manifest next update:     Thu 25 Dec 2025 20:25:25 +0000
Files and hashes:         1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: 12fcmB/auHKysL4UBSUGRDgEEmkJCNcPfA523oKpNcQ=)
                          2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: AHAcb+gAjCz8wkoAWVtMX/VsvUWaSfqcpHAMq6tIbbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
                          rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
        Validity
            Not Before: Dec 18 20:25:25 2025 GMT
            Not After : Dec 25 20:25:25 2025 GMT
        Subject: CN=69446335-ac9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:bb:a3:f4:ea:b6:e7:f2:f6:36:6b:ac:21:
                    86:53:57:6a:89:48:a8:37:62:39:99:4b:54:e6:29:
                    65:c4:c6:5a:ed:8b:6e:1c:3e:e2:13:bf:db:49:b3:
                    5b:80:4b:f8:5f:82:38:14:be:2f:fb:f7:c2:7f:eb:
                    68:b8:fd:d7:03:69:f6:04:8f:67:1c:06:48:d2:96:
                    8b:e1:ea:93:3e:7b:26:e1:f3:71:5f:ea:45:2c:bb:
                    ed:9b:cb:75:19:ff:3d:de:dc:d5:49:24:69:45:32:
                    74:32:84:47:cc:4d:4f:d8:9c:4b:dc:91:4b:17:34:
                    40:d8:95:fb:12:47:c2:8f:e4:70:8f:cd:13:e0:ab:
                    c3:48:67:06:a8:17:4e:d9:de:57:25:1e:f2:a6:63:
                    28:5d:b0:10:71:95:50:c4:53:1d:ce:60:bc:54:af:
                    65:5e:09:70:dd:d7:80:f7:4b:37:ac:3d:ed:cf:32:
                    c3:6d:28:0b:6b:b1:49:0d:c7:8d:b6:21:cd:3a:e0:
                    27:77:fd:21:6e:26:60:a2:0d:40:08:0a:d9:ef:29:
                    fa:73:7d:13:85:ef:3f:f7:aa:2c:d9:bf:11:38:31:
                    89:ad:4c:3d:b3:0f:fb:f0:80:65:08:95:1b:a6:c6:
                    fd:b8:73:27:0f:32:e8:18:41:81:b1:04:cd:4e:20:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A4:DA:BA:B4:1C:62:54:70:CA:FE:C1:86:C3:B7:C9:63:BC:39:F5
            X509v3 Authority Key Identifier:
                keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:96:84:e4:01:3e:ad:29:ca:ae:c6:9c:cb:ee:b0:a5:ad:31:
         9a:4e:e1:ad:a8:06:30:0b:dc:85:e3:7a:a0:82:e1:57:a0:de:
         54:7c:6e:f6:a5:68:7c:75:8b:54:21:5f:1d:a3:b8:18:97:a2:
         b5:6b:c0:d0:05:43:5c:f7:3a:8e:79:82:49:85:ae:34:a0:a9:
         28:35:b3:7d:f1:75:d0:58:11:fb:4c:1b:c8:28:66:8f:d6:76:
         53:43:89:49:81:19:9c:fc:7f:2f:e4:35:85:45:b0:bf:84:bd:
         16:8a:04:5e:b5:7e:2e:71:79:c1:66:47:a6:9c:56:18:ca:de:
         af:28:77:d0:ca:10:a4:1c:91:d2:8d:82:39:e6:15:17:07:98:
         e3:24:f4:91:cd:3c:87:db:e9:45:14:04:69:56:b5:1e:77:5c:
         66:19:ea:cf:bd:21:75:d0:2c:0c:7d:90:64:d2:eb:19:59:f4:
         21:e5:20:8f:d2:64:bf:31:6d:02:6c:65:c2:1b:88:77:16:de:
         1b:80:54:13:32:3a:55:1c:6c:b8:da:b7:f4:5f:49:08:92:66:
         7f:e6:2d:47:ba:67:57:c2:49:c5:ab:b2:99:c9:f7:2a:dc:b5:
         c7:b8:52:88:a2:5d:a4:79:1d:67:1a:2f:db:f8:0e:44:76:d2:
         4d:16:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:10 2025 by rpki-client