This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
File:                     3fyp0DSUWlkkEWE31ih38M5Svxs.mft (raw, json)
Hash identifier:          +lHm4qgcEGMoNBsxPVBN0+AhvGWrDHfdm5e3IL4bKvE=
Subject key identifier:   90:84:E6:01:A5:C0:B6:F6:EA:DB:17:16:53:5F:CC:95:6E:EA:10:25
Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B
Certificate issuer:       /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
Manifest number:          3B
Signing time:             Fri 19 Dec 2025 06:29:38 +0000
Manifest this update:     Fri 19 Dec 2025 06:29:38 +0000
Manifest next update:     Fri 26 Dec 2025 06:29:38 +0000
Files and hashes:         1: 3fyp0DSUWlkkEWE31ih38M5Svxs.crl (hash: Fjizj1h+ea+qqGaWdvLRiydnNLH+1g1bjLC8HFVGIwQ=)
                          2: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (hash: vQDu9wcINkcPzWdSO/DWuCCS5k2RLBjzO/0TA4C/YFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
        Validity
            Not Before: Dec 19 06:29:38 2025 GMT
            Not After : Dec 26 06:29:38 2025 GMT
        Subject: CN=6944f0d2-c4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:fa:88:94:38:52:ef:e1:16:48:8c:34:40:
                    62:64:27:b7:38:02:55:a6:3c:f6:9f:7a:b9:bd:a4:
                    25:8b:8d:a7:7c:5c:98:ed:1f:ed:84:21:e5:50:b2:
                    b2:a5:ce:17:26:43:98:96:5d:7f:a9:ae:ad:1c:35:
                    31:b4:b1:69:26:3c:e7:6b:04:ea:0d:09:a2:be:3b:
                    d7:0c:94:15:62:6d:62:d7:7a:31:6c:ce:70:99:59:
                    5a:c2:f2:ee:37:2c:56:06:ab:4d:46:51:55:70:c8:
                    d2:dd:8b:16:c9:27:f1:0a:34:37:05:1a:72:11:f5:
                    2c:89:20:7a:a2:b5:36:4b:06:33:9c:33:e1:05:8d:
                    b9:ec:c2:e7:ce:37:ac:a0:c5:16:df:04:2c:2b:ea:
                    b0:74:8e:69:d4:3e:48:4c:8c:d3:35:e6:58:48:fe:
                    a5:02:f0:7d:f4:80:08:3b:3c:65:d4:ef:45:d9:ea:
                    58:b5:51:97:3f:e3:90:f6:a2:c5:58:3f:71:e9:24:
                    78:f4:7f:54:47:a4:5a:e4:44:b6:86:c4:64:d3:76:
                    e4:82:93:8d:86:f2:ce:db:32:f6:12:37:99:98:6b:
                    1e:ad:38:4f:bc:52:76:98:a4:5d:86:4e:4b:36:18:
                    0a:a1:5c:6a:09:08:ec:76:d9:68:2a:63:d1:4c:71:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:84:E6:01:A5:C0:B6:F6:EA:DB:17:16:53:5F:CC:95:6E:EA:10:25
            X509v3 Authority Key Identifier:
                keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:53:70:01:6f:8d:a6:a2:30:e4:dd:6e:05:4a:0b:58:ac:3f:
         b4:96:22:ce:3b:54:ad:3a:dc:80:01:23:57:13:6e:5c:c2:5b:
         56:99:04:7f:3f:bc:d8:e4:b5:f7:0b:9b:a6:42:42:82:ec:18:
         a6:e6:3e:c7:87:b3:e5:57:97:4b:0d:1f:e9:d9:65:e8:10:84:
         51:95:c2:25:2c:07:d5:4c:30:ae:42:f9:a0:21:56:aa:e1:f8:
         58:89:3d:81:fe:d9:d5:a4:1d:35:29:17:0f:42:27:f1:fe:b8:
         f8:2e:e6:8b:fa:ce:de:a2:8e:e2:93:14:0c:58:c8:6a:85:ee:
         1b:2c:83:8a:96:4b:31:8a:b1:0f:a3:db:46:70:c8:37:a6:a5:
         35:11:4b:27:32:52:70:3c:93:60:7d:8b:ca:52:9e:71:bc:f4:
         07:0e:b0:0f:b3:d8:fc:16:a6:63:b2:47:34:b9:b2:9b:6b:93:
         08:74:ee:40:81:22:00:3f:ab:b2:18:d1:a4:88:0c:7f:ad:7a:
         4b:30:15:43:3d:f8:32:d8:da:42:ff:38:e6:99:d3:50:2d:0f:
         63:75:0a:52:15:ec:26:dc:7e:41:dc:de:46:45:5a:24:80:ec:
         b7:23:12:29:ac:da:80:82:91:f3:1d:90:0e:be:cd:44:2c:21:
         af:71:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:25:14 2025 by rpki-client