This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File:                     Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier:          KfuIab3D+MYksSsvNNryej4IDdyLEYgRE6Df3k9Q8ho=
Subject key identifier:   CA:7D:75:A2:3A:1C:44:11:5F:08:A6:0E:DF:71:9E:EE:57:F0:3D:D4
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer:       /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial:       036A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number:          0364
Signing time:             Mon 29 Dec 2025 00:00:38 +0000
Manifest this update:     Mon 29 Dec 2025 00:00:37 +0000
Manifest next update:     Mon 05 Jan 2026 00:00:37 +0000
Files and hashes:         1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: a0cvTXWQzx5mPznCiiDfqpe4snTxlXM4EBzHA3Va4Jg=)
                          2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: +p5cj7LwT5hXMy0c3PlvgwDnOhrwUIuzknInRNhRtuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
                          rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 00:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874 (0x36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
        Validity
            Not Before: Dec 29 00:00:37 2025 GMT
            Not After : Jan  5 00:00:37 2026 GMT
        Subject: CN=6951c4a6-09a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2b:24:8f:e8:da:65:7c:b2:67:2e:52:16:7d:
                    a1:f4:58:45:63:c5:bf:2c:d1:ad:84:f0:e1:cd:aa:
                    2e:f2:06:1e:8d:4b:59:51:c7:7a:e1:99:76:0f:17:
                    c7:4a:37:b5:d7:a6:a8:dc:cc:ef:1b:81:33:56:7a:
                    58:7b:e4:f6:f8:00:2e:f4:14:3c:ed:a0:ae:aa:b1:
                    d0:6c:d1:88:f7:a6:a5:e1:be:74:a8:2a:bd:cf:03:
                    09:02:11:e7:5e:dd:73:e6:eb:52:de:16:d2:49:6e:
                    90:f3:f7:97:8f:ea:de:03:a3:6f:c3:b4:99:27:61:
                    c1:68:9d:db:38:17:ab:55:6c:c2:57:01:64:7f:be:
                    09:11:4b:39:08:71:04:68:45:09:20:98:ec:92:d7:
                    bd:15:d2:a9:b3:bf:22:91:6d:f2:da:e9:cf:bb:84:
                    a3:77:fb:27:5b:ed:3d:ee:00:62:d6:c5:03:3a:01:
                    d8:2e:90:c9:1a:80:68:2e:d9:63:4c:86:40:73:45:
                    72:ab:9d:f7:b7:6e:61:41:69:46:f9:c1:82:a0:0e:
                    54:cb:b5:f9:86:58:44:e5:06:60:d9:2b:14:5b:d8:
                    b8:a7:8e:14:35:79:60:61:56:46:5a:d8:df:72:89:
                    f5:30:8a:ee:d3:3f:06:71:df:e7:11:cd:3a:56:26:
                    fa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7D:75:A2:3A:1C:44:11:5F:08:A6:0E:DF:71:9E:EE:57:F0:3D:D4
            X509v3 Authority Key Identifier:
                keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:3c:a5:41:87:6b:63:aa:56:12:2c:95:9f:39:1e:fa:75:05:
         a8:07:52:33:15:45:72:35:97:9d:fd:e4:c5:22:cd:29:9d:9c:
         c7:9c:d4:93:78:31:f6:47:70:91:ef:ff:95:cf:cd:f5:1a:9c:
         c9:f8:10:8e:df:bb:14:f0:ba:26:c2:a2:9a:61:84:05:a6:ab:
         3a:44:99:38:b0:7a:d0:41:6e:79:e9:88:9b:17:09:7a:67:75:
         83:ab:61:a5:01:c9:b9:9d:aa:f4:95:6f:dc:72:60:bd:4f:28:
         11:fb:86:c5:e5:6b:ab:60:4a:1b:20:1a:da:5a:d9:fb:a3:51:
         32:1e:0e:e5:1b:b8:d1:26:65:32:05:2a:4a:11:5b:36:3a:57:
         1e:0c:34:5f:f7:cb:58:7e:bd:46:d2:dd:d2:2f:cb:35:6b:18:
         c1:30:83:b4:c8:78:1a:38:18:99:c6:02:48:74:4a:d0:d8:5b:
         a6:3c:6a:31:c8:40:a2:97:f2:a2:57:15:21:bd:1a:9a:8d:4c:
         7f:7e:0a:b4:fe:d2:05:88:74:f5:f3:a1:fe:0e:8e:05:77:86:
         60:b3:0a:5d:35:8f:67:b4:b0:0e:f3:b3:ea:18:61:25:58:aa:
         1c:20:3e:a2:a6:16:f2:ba:3f:1c:a0:83:02:ac:01:93:6e:df:
         86:a1:e0:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFBNTQxMTAvBgNVBAUTKDNFNjdEQkY3ODIyMDI4OTNGMUZCNUFGN0Q2RkMwOUQw
MDE4RkRGMDYwHhcNMjUxMjI5MDAwMDM3WhcNMjYwMTA1MDAwMDM3WjAYMRYwFAYD
VQQDDA02OTUxYzRhNi0wOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjiskj+jaZXyyZy5SFn2h9FhFY8W/LNGthPDhzaou8gYejUtZUcd64Zl2DxfH
Sje116ao3MzvG4EzVnpYe+T2+AAu9BQ87aCuqrHQbNGI96al4b50qCq9zwMJAhHn
Xt1z5utS3hbSSW6Q8/eXj+reA6Nvw7SZJ2HBaJ3bOBerVWzCVwFkf74JEUs5CHEE
aEUJIJjskte9FdKps78ikW3y2unPu4Sjd/snW+097gBi1sUDOgHYLpDJGoBoLtlj
TIZAc0Vyq533t25hQWlG+cGCoA5Uy7X5hlhE5QZg2SsUW9i4p44UNXlgYVZGWtjf
con1MIru0z8Gcd/nEc06Vib63wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMp9daI6
HEQRXwimDt9xnu5X8D3UMB8GA1UdIwQYMBaAFD5n2/eCICiT8fta99b8CdABj98G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE1NC9EODhDRDlENkRD
MzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tKUHgtMXIzMXZ3SjBBR1Az
d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BtZmI5NElnS0pQeC0xcjMxdndKMEFHUDN3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUE1NC9EODhDRDlENkRDMzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tK
UHgtMXIzMXZ3SjBBR1Azd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9PKVBh2tjqlYSLJWfOR76dQWoB1IzFUVyNZed/eTFIs0pnZzHnNST
eDH2R3CR7/+Vz831GpzJ+BCO37sU8LomwqKaYYQFpqs6RJk4sHrQQW556YibFwl6
Z3WDq2GlAcm5nar0lW/ccmC9TygR+4bF5WurYEobIBraWtn7o1EyHg7lG7jRJmUy
BSpKEVs2OlceDDRf98tYfr1G0t3SL8s1axjBMIO0yHgaOBiZxgJIdErQ2FumPGox
yECil/KiVxUhvRqajUx/fgq0/tIFiHT186H+Do4Fd4ZgswpdNY9ntLAO87PqGGEl
WKocID6iphbyuj8coIMCrAGTbt+GoeBj
-----END CERTIFICATE-----
Generated at Mon Dec 29 14:39:51 2025 by rpki-client