This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
File:                     PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json)
Hash identifier:          okTf5Ub6uEpEaPCfJLcM4xDjF6nkPqCvJWsp8nv5tYU=
Subject key identifier:   3B:3B:33:CB:E5:CE:6F:D5:74:73:75:4C:57:1D:C2:43:C0:A2:F1:1E
Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
Certificate issuer:       /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Certificate serial:       0769
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
Manifest number:          075B
Signing time:             Sat 20 Dec 2025 21:18:55 +0000
Manifest this update:     Sat 20 Dec 2025 21:18:55 +0000
Manifest next update:     Sat 27 Dec 2025 21:18:55 +0000
Files and hashes:         1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: Ih9J+E8vXO+wVaTUjshDJMxV5GjW75BkLnZ9rTygK6g=)
                          2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: vSPmpKbfAxsmZ0szKr9FGYmBJXvGVcm1UTVCTBD8Wvs=)
                          3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: 7WFjzq6wY4AqtVQkC7Y+QhCycdrnvexpYLkjW/0ExP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
                          rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1897 (0x769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
        Validity
            Not Before: Dec 20 21:18:55 2025 GMT
            Not After : Dec 27 21:18:55 2025 GMT
        Subject: CN=694712bf-8322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:8a:c7:fb:da:e3:1c:b5:aa:6a:ba:f1:19:
                    33:75:fa:bb:c0:e1:65:3c:ac:83:09:c0:3c:c8:00:
                    83:57:6a:44:0f:8c:35:28:e6:2d:c3:7c:e4:7c:2c:
                    aa:c7:58:21:9c:04:5d:a4:1f:48:a1:26:2e:92:cf:
                    a0:1a:a1:68:c0:5b:78:f1:61:bf:63:f1:6c:d0:ed:
                    92:47:90:71:a2:19:0e:1a:6b:16:cc:3c:f8:69:26:
                    88:bc:f4:c8:24:e3:5c:0d:77:12:40:a7:fe:4b:a0:
                    6a:c7:ce:35:2b:60:90:7f:54:bd:f4:04:61:20:38:
                    63:9b:58:95:70:db:a8:b4:79:eb:82:0a:98:16:b0:
                    9d:e2:33:0e:f1:94:96:86:89:3c:ef:e0:e3:d9:b0:
                    80:18:fe:f4:e7:6b:d4:4a:8c:97:ed:23:63:97:4f:
                    c0:98:90:79:ba:40:4b:04:75:2f:4e:43:50:7c:65:
                    61:3a:e4:49:1e:9b:79:10:2c:92:ca:3d:80:24:ee:
                    94:9e:d6:4e:dc:6a:66:e2:65:0f:2b:2f:3d:6d:a0:
                    b0:86:ca:4a:a3:92:a2:79:5c:5f:83:6c:02:71:33:
                    ac:93:11:6e:08:a0:f2:f7:86:6e:31:cf:9f:f2:1d:
                    d7:55:c9:81:14:7b:a4:cd:7a:9f:98:71:d8:2e:d4:
                    9b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3B:33:CB:E5:CE:6F:D5:74:73:75:4C:57:1D:C2:43:C0:A2:F1:1E
            X509v3 Authority Key Identifier:
                keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e5:52:f1:3e:29:8b:68:d2:fe:62:da:9f:fa:b4:e6:01:fe:
         dc:e5:ec:59:66:da:66:7b:1a:ed:46:3f:51:e6:83:4a:6f:1e:
         65:0b:10:ed:69:22:e1:fe:ac:94:f6:b3:2b:1e:a4:a9:c6:a1:
         6a:27:83:86:b4:37:87:c7:aa:d4:21:cd:b1:21:75:62:46:6a:
         93:d7:6e:c4:1b:34:3f:c0:d3:a5:de:2e:2b:5a:eb:96:95:c2:
         53:91:29:75:24:93:b8:5b:94:62:46:b3:d7:b3:a0:75:a7:54:
         8e:f4:86:eb:66:80:14:34:69:55:fe:e9:2e:f5:66:d9:df:81:
         02:30:0d:7d:bf:d0:e5:3f:0a:56:b0:94:7b:d3:aa:1e:d7:de:
         ba:c7:d6:d8:69:6c:ec:db:11:b1:bc:63:7c:f8:1e:2d:e1:31:
         b1:88:b3:f2:6e:dc:19:ef:9f:bf:00:8b:43:b8:f6:90:66:79:
         e8:94:e6:6b:46:4c:54:ae:e5:54:52:47:d5:6b:a2:25:45:ee:
         2c:28:32:a3:6c:75:2f:c2:0e:fb:26:80:e4:30:ff:e3:4a:2b:
         c1:ff:44:0d:81:75:00:bb:5b:38:6e:cf:4d:a7:10:0b:f0:8e:
         b4:93:ae:9d:b1:81:53:5c:74:25:c0:9e:8e:19:14:1a:dc:70:
         21:83:4e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:10:38 2025 by rpki-client