This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
File:                     PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json)
Hash identifier:          d7Y9801qTKq7syC/YO6v9XlhD2vkRFJlfwtVqiylJNk=
Subject key identifier:   46:C6:44:8B:B3:38:A1:92:70:2D:9C:F3:7C:AC:6B:6E:4D:2D:5C:D4
Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
Certificate issuer:       /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Certificate serial:       031C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
Manifest number:          0316
Signing time:             Mon 29 Dec 2025 00:12:18 +0000
Manifest this update:     Mon 29 Dec 2025 00:12:17 +0000
Manifest next update:     Mon 05 Jan 2026 00:12:17 +0000
Files and hashes:         1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: rZmeN/fiHqL+fwX3/smOuWWtOuzjwTCGNngkmlhsDaY=)
                          2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: lRZm7R1XzhUUnYkMhnYwCmY95i90cE75koEdjvOdBVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
                          rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 00:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796 (0x31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
        Validity
            Not Before: Dec 29 00:12:17 2025 GMT
            Not After : Jan  5 00:12:17 2026 GMT
        Subject: CN=6951c761-da8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:f1:93:f3:85:85:dc:e9:92:f6:cd:35:18:
                    e2:bb:db:9b:ad:84:11:28:7c:43:37:a9:b5:86:c4:
                    37:ea:3e:66:2c:eb:52:69:32:cb:cd:b3:a8:4e:6c:
                    b4:71:1c:20:75:4e:44:a1:b3:f6:87:c5:2c:6c:49:
                    9b:43:4f:c4:46:fc:be:60:8b:54:55:02:c8:2f:82:
                    a1:06:0d:22:0d:d0:43:22:c5:df:38:39:42:c5:f9:
                    66:f5:d0:c0:46:0b:09:a5:6f:00:38:fc:99:c3:c1:
                    6c:47:b6:c7:19:85:d3:10:58:85:4e:fc:77:8e:43:
                    6c:39:da:7d:8f:f0:1e:39:db:7d:0c:aa:0b:8e:67:
                    67:64:37:a3:b2:4d:81:32:ca:d3:7a:80:32:ec:06:
                    fb:c7:96:07:c1:68:e6:43:8e:17:07:0c:d8:1f:0c:
                    e9:5e:96:c5:42:0e:f4:dd:67:91:fb:27:60:73:43:
                    bf:91:3a:50:1d:d2:86:41:4a:66:82:18:eb:52:64:
                    bd:70:48:c5:de:90:30:34:dc:1b:e4:2d:c1:5a:00:
                    9c:08:73:2d:23:9f:c2:3c:12:42:b6:e8:fc:4a:a9:
                    41:95:c8:8d:36:d7:35:92:cf:c0:55:30:e8:18:74:
                    46:b0:a5:f0:e9:be:9a:3c:1c:e4:1f:e6:30:38:50:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C6:44:8B:B3:38:A1:92:70:2D:9C:F3:7C:AC:6B:6E:4D:2D:5C:D4
            X509v3 Authority Key Identifier:
                keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2a:07:3e:a8:5f:bf:04:4c:49:e8:e2:15:f8:4b:5d:8f:ab:
         9b:1b:2d:56:67:ec:db:8f:43:e1:05:d8:45:c0:29:cc:e9:6d:
         bc:23:2f:59:07:3e:a5:a8:ea:09:26:4c:98:66:58:a5:84:e9:
         f9:a3:4a:91:b1:d8:c9:9f:1b:4d:ff:38:08:52:e7:22:6f:72:
         8e:76:28:a9:49:4e:de:0d:01:0b:09:bf:bf:d2:1c:6d:54:84:
         d3:67:dc:7f:91:01:10:fc:1b:fe:d4:39:8f:d1:c0:83:56:86:
         6d:89:33:9f:b2:f2:fa:29:8b:1d:69:80:a3:0f:54:56:c9:47:
         ff:07:8a:70:32:ca:d3:32:f8:3b:44:19:c1:cc:e4:2b:a2:70:
         76:f2:e1:39:ae:e4:24:ea:60:35:2b:fe:f2:61:db:f8:d4:f9:
         5e:7f:f5:58:4b:de:65:1a:0d:eb:8c:17:19:a2:23:a6:7f:55:
         17:4d:3b:bc:73:b4:d8:94:f8:4d:a8:d1:d0:6f:4b:c8:a0:2b:
         e8:22:90:27:11:6f:f5:da:93:af:51:29:48:37:ce:79:6e:1f:
         a8:4f:1c:98:17:40:2c:6a:ca:34:ac:79:dd:32:52:81:d4:30:
         30:93:c8:39:af:c6:b2:cd:fc:24:57:cb:84:c1:7b:b4:07:b2:
         20:f3:4e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 16:32:50 2025 by rpki-client