This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
File:                     pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft (raw, json)
Hash identifier:          w+dwOPg3Iq1QkJn3ZGARKgFZVFMf0tpmaEdckOe3ONc=
Subject key identifier:   6B:01:11:2D:CA:A0:1A:E2:E5:97:E6:9C:74:83:5C:78:89:12:D5:2E
Authority key identifier: A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
Certificate issuer:       /CN=A919AD11/serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
Manifest number:          0113
Signing time:             Sun 21 Dec 2025 04:03:39 +0000
Manifest this update:     Sun 21 Dec 2025 04:03:39 +0000
Manifest next update:     Sun 28 Dec 2025 04:03:39 +0000
Files and hashes:         1: pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl (hash: ZpvKCzY37XaXWneIF+48CS3WMZQiwI4mhIHip7AROEU=)
                          2: FB29FEA06C1F11EFA8C5694EC4F9AE02.roa (hash: lcZB3z1c/RDD2H75d40NX0zmlgKhDSF1Om3/hMjJ4tA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl
                          rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD11, serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
        Validity
            Not Before: Dec 21 04:03:39 2025 GMT
            Not After : Dec 28 04:03:39 2025 GMT
        Subject: CN=6947719b-ff4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:df:1a:4a:25:d0:f6:58:d5:a8:6c:6d:f2:
                    cf:5b:4c:8f:ae:4d:95:f9:2c:19:a4:79:b4:97:71:
                    3e:ac:be:ca:bd:2f:2c:00:25:c5:44:e9:cd:9c:51:
                    fc:59:c4:76:2e:c0:98:7b:0e:a3:12:25:10:ca:1d:
                    04:f4:1a:00:33:c6:c2:ec:ee:dc:4d:c4:36:c6:95:
                    67:7e:4b:cf:81:dd:ad:c6:69:bf:b2:b6:ca:14:cc:
                    c0:58:88:c0:59:b7:86:c4:31:10:f5:46:6d:b6:67:
                    dd:b7:35:9c:b1:13:31:df:1f:1d:a1:65:15:57:76:
                    67:54:7b:10:40:4b:b7:85:c6:88:50:5a:46:c8:1b:
                    31:ac:05:bb:96:f1:6c:4d:89:d3:cd:f2:83:37:bb:
                    2e:7f:78:12:98:53:5f:39:ca:7d:9a:73:d8:54:ec:
                    d7:23:1a:9e:ea:72:78:6b:e0:b6:30:98:fb:f7:2c:
                    17:6e:ef:37:77:09:e0:4f:d8:e7:67:86:dc:88:47:
                    43:ff:49:11:6c:d3:95:96:f5:1e:c0:db:17:b6:16:
                    78:47:dd:82:31:38:b2:56:77:4c:d1:f1:4b:07:02:
                    23:6a:5e:5c:50:a5:79:e5:ce:32:f1:7e:fc:e3:25:
                    7a:56:b1:59:48:16:e5:7a:d8:5e:b1:f6:c8:2d:2a:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:01:11:2D:CA:A0:1A:E2:E5:97:E6:9C:74:83:5C:78:89:12:D5:2E
            X509v3 Authority Key Identifier:
                keyid:A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:c4:9c:49:20:13:7e:ad:a3:8c:e5:3e:47:37:ec:1a:be:
         bc:5f:bd:a9:d4:72:55:36:f2:5d:79:15:50:0f:b1:3b:de:76:
         73:f0:02:96:96:3c:62:15:86:d8:df:fa:37:db:a2:a6:45:fb:
         9a:d7:4c:08:8b:73:66:54:27:da:f6:b8:c5:d9:09:3e:3f:88:
         de:d2:5e:6f:ad:8f:dc:73:b5:62:9b:0f:80:7b:6b:d8:e7:e5:
         10:d0:37:1f:b2:ce:57:fd:f8:ae:ae:67:ba:a0:3d:58:2e:fa:
         a3:66:55:e6:89:00:75:b8:82:d5:b4:f3:16:1b:17:71:d8:7c:
         6c:e1:0e:b1:8e:99:2d:c9:8e:20:2c:f0:91:eb:cb:d6:c8:34:
         13:b9:41:32:e7:e6:7e:c5:6a:68:13:9a:dd:13:53:d1:64:27:
         2e:09:ca:3f:fd:60:99:10:5c:68:a2:52:66:7f:44:b4:78:47:
         f4:a9:4d:cd:28:96:9d:a3:41:a4:5f:a2:08:49:25:af:ab:c8:
         dc:3f:67:ef:7f:73:0d:91:f5:8e:36:68:60:d5:78:4a:7a:af:
         93:fc:0d:2c:68:47:58:d8:3b:8a:53:28:97:d2:46:1a:64:57:
         16:5b:28:f4:b0:ee:68:77:b1:f9:9f:45:94:35:ff:73:8c:43:
         79:fb:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:05:29 2025 by rpki-client