This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
File:                     Pj3GKtNpQScHmphxdsIYwJs-yf0.mft (raw, json)
Hash identifier:          W0/Un9tpwS8D72Ljrof+d5SigwbNUJpx715BGTmM5s4=
Subject key identifier:   A6:39:E1:CA:DD:AB:1B:83:A8:D7:D2:38:AA:10:2A:FD:42:50:A0:0D
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       2C6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
Manifest number:          2C4B
Signing time:             Thu 18 Dec 2025 15:28:47 +0000
Manifest this update:     Thu 18 Dec 2025 15:28:47 +0000
Manifest next update:     Thu 25 Dec 2025 15:28:47 +0000
Files and hashes:         1: Pj3GKtNpQScHmphxdsIYwJs-yf0.crl (hash: ciS+3XC4MfjkVGy7zid/WQkO4k9JGEs+bC6EOsA2Jp0=)
                          2: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (hash: wKTcwQ/I5JRFgJ3BEd5QarAu/YHgWoWcx44Njrdtc4g=)
                          3: 5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (hash: T0b8C7d4bWsc3EyPhNVtAAt07MQZYtmIX9CE+cnW0sk=)
                          4: A37B20206FE111E9B3465D70C4F9AE02.roa (hash: JeRljMwzQH3/92nSWVH5RymJInEM50zHuR37MlUO73U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
                          rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11373 (0x2c6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: Dec 18 15:28:47 2025 GMT
            Not After : Dec 25 15:28:47 2025 GMT
        Subject: CN=69441daf-c4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:f2:26:07:48:32:a4:19:ee:e7:27:2d:cb:
                    f4:bf:71:78:b3:05:8c:c8:b7:fd:45:c4:e3:2d:2a:
                    27:df:58:c4:0a:bd:c1:90:9f:fe:19:34:3f:c9:1c:
                    ca:cf:31:db:d2:df:5f:b1:e0:66:a5:1d:e4:5b:d9:
                    d7:3c:aa:36:ed:12:dd:93:b4:02:fd:e1:fa:91:ce:
                    c0:ca:ea:4d:00:8d:42:cf:70:b4:46:9b:24:2d:a6:
                    61:8c:7b:d6:20:b6:c8:98:23:6e:55:e7:2b:b8:36:
                    9c:c4:4c:ac:36:61:2f:52:c5:14:9f:c3:80:f5:d7:
                    bc:de:49:a5:19:e8:5d:bb:69:f5:e4:08:5f:4e:9d:
                    c6:19:a9:90:57:0e:47:68:b8:ba:0e:1c:a3:e0:db:
                    90:3a:f7:9c:27:4b:93:3b:4f:12:d9:8f:27:9a:cd:
                    07:38:e6:8c:49:12:c1:77:00:f4:33:97:ed:7b:7d:
                    d2:db:39:67:bc:34:52:90:a8:80:b5:14:e0:ce:bc:
                    db:d3:42:28:db:88:52:2e:3f:c3:f3:88:2b:1e:9a:
                    f5:1a:b8:3c:ee:65:05:26:24:c5:ff:12:c2:41:5f:
                    cb:81:ee:a7:c4:7d:21:14:de:ed:a5:f5:67:c9:e7:
                    ae:67:f3:12:53:60:4d:ea:b1:bc:30:17:ee:fc:61:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:39:E1:CA:DD:AB:1B:83:A8:D7:D2:38:AA:10:2A:FD:42:50:A0:0D
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9c:0d:38:17:da:17:2c:f7:1c:69:a1:7b:a7:e0:10:c3:27:
         3f:5f:8f:a1:31:50:b0:e3:58:5a:9e:ba:1c:3b:0a:be:86:6c:
         c6:25:3e:1c:dd:7a:d4:7a:f7:31:42:f4:6a:ab:96:73:7f:34:
         6a:5b:81:dc:be:99:c8:9e:30:18:fd:97:c4:66:98:f3:66:1f:
         0d:ee:00:7f:30:54:bc:d9:08:fe:52:83:d8:b5:b7:2e:b8:e7:
         2c:a9:4c:00:5a:dd:2c:0f:fc:6f:28:c4:5b:80:78:e4:3f:0a:
         22:15:6d:56:0c:bd:51:07:73:f7:93:52:05:a4:a9:a4:0d:0f:
         0e:92:3b:79:35:f2:1c:17:62:b4:92:20:fb:96:aa:f5:f4:a2:
         ac:a0:21:83:64:ae:cd:e7:90:23:06:15:a9:9b:86:cc:b2:66:
         9a:5b:1d:fa:e7:ee:37:c7:ba:76:a2:16:9a:9d:83:96:93:36:
         8f:1b:76:cd:84:fd:4c:5f:16:4c:61:93:9d:57:36:85:bb:11:
         ba:c8:54:04:cf:c6:d3:34:ce:30:09:78:e3:63:04:42:92:83:
         1d:2d:41:b2:1b:17:06:68:26:31:24:af:5d:85:76:ec:fa:5f:
         75:4b:bd:61:72:7b:c5:b3:55:58:e4:ad:24:45:e7:a3:8d:a4:
         15:a7:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:48:30 2025 by rpki-client