This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
File:                     PQaSnY1eH2juI-yj-UjP96LklbM.mft (raw, json)
Hash identifier:          W6zw90Csa5HqivqroHIOvurSfjE9nsQL3W1IhrZF1C4=
Subject key identifier:   EE:77:C7:35:9D:7E:3E:32:0F:FF:C5:38:18:B2:F8:82:03:6D:43:8A
Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
Certificate issuer:       /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
Manifest number:          0B65
Signing time:             Sat 20 Dec 2025 18:47:46 +0000
Manifest this update:     Sat 20 Dec 2025 18:47:46 +0000
Manifest next update:     Sat 27 Dec 2025 18:47:46 +0000
Files and hashes:         1: PQaSnY1eH2juI-yj-UjP96LklbM.crl (hash: OBmmv++J7aKgydMnaX/AppX4XW0VHhyqzrOk48wOFLc=)
                          2: 41D7A1D4AB0511F0AD64C814C4F9AE02.roa (hash: rmQtPBzLnmMnKWqEbpn/ZFyPKybx/x0dYiK1HD1kfdo=)
                          3: 4140D222AB0511F0AD64C814C4F9AE02.roa (hash: OQA1xcKI/hiAbUi76rdd20yEjY2R6araSSWLUXcKQG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 18:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
        Validity
            Not Before: Dec 20 18:47:46 2025 GMT
            Not After : Dec 27 18:47:46 2025 GMT
        Subject: CN=6946ef52-7aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:c6:85:04:66:1b:03:d3:0f:d0:5d:01:94:
                    39:d0:8c:17:1b:a5:50:d2:4c:68:21:33:40:dc:e1:
                    1b:23:67:0b:19:d1:69:09:f2:9d:6a:d0:4f:42:a9:
                    01:34:79:fd:f9:af:f8:da:ac:9b:28:c7:65:5a:a7:
                    d7:54:46:c1:57:31:01:b7:5b:0d:5b:25:25:68:88:
                    0d:88:64:ef:71:08:6c:8d:27:b1:6e:aa:a2:21:24:
                    51:32:1d:b4:ad:69:d7:ca:4c:29:65:01:e9:b4:20:
                    b7:87:ee:54:42:13:ff:12:14:aa:25:54:3b:a7:d0:
                    e9:b9:1b:c4:67:d2:40:c6:ce:9b:cc:e0:7c:74:0c:
                    a5:72:29:e9:49:57:92:95:7f:33:0b:a8:f4:bf:06:
                    3a:d6:2e:70:86:2a:f9:43:61:be:1d:12:66:41:d9:
                    1d:39:70:b0:fb:57:7c:7a:f1:01:e1:ed:66:d0:2f:
                    c8:e4:02:1f:5d:a2:1c:2a:b8:89:a9:7e:37:24:be:
                    ad:1f:4d:4d:1e:ee:82:c4:6d:94:ef:26:8c:44:ad:
                    be:e6:ec:e0:ce:0e:87:78:56:16:bd:48:0f:1f:cc:
                    63:52:ce:58:d2:b7:f6:d8:12:39:dd:ca:6c:af:b6:
                    d0:55:2d:ef:71:22:a7:3b:a1:e0:52:bf:d5:77:a1:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:77:C7:35:9D:7E:3E:32:0F:FF:C5:38:18:B2:F8:82:03:6D:43:8A
            X509v3 Authority Key Identifier:
                keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:33:f6:85:ec:9f:f3:a7:b7:39:e2:e9:65:fe:26:b8:b9:f7:
         e2:65:7e:07:47:4d:cb:a8:22:34:55:2f:ee:8a:42:58:2e:5b:
         77:6f:af:67:b8:10:d0:6c:bf:fe:bb:16:c8:6c:fa:6d:55:41:
         ba:a6:9d:ea:32:c3:07:8a:d6:3f:72:bd:39:0c:39:f2:1e:cb:
         f4:93:09:52:eb:03:f3:8b:06:69:1c:48:93:d7:a2:de:53:16:
         6a:4c:80:32:f8:d4:48:63:0c:d2:6e:d0:4f:4f:c7:90:77:de:
         ce:17:fb:82:0d:5e:2a:13:31:45:35:62:8b:4e:44:6c:d7:18:
         ca:1f:4d:04:34:29:00:0f:b1:91:84:18:52:a8:5f:e6:32:78:
         bd:23:61:2e:1a:5f:3c:b8:7d:c4:45:fa:f9:4c:b2:70:17:7e:
         3e:82:da:ca:14:c7:9e:ad:d3:94:75:e0:c8:ae:aa:26:52:0d:
         04:69:ce:74:59:dd:8e:cc:3b:63:b1:e6:c2:3a:59:72:29:8c:
         77:23:63:be:72:b7:be:b0:f2:0d:ed:4e:89:7e:9f:f0:f9:32:
         26:c9:9a:27:44:a5:2d:ea:ee:d1:45:e2:22:b9:dc:8f:3a:e8:
         98:f3:c5:49:21:2b:b1:4c:1e:46:d5:36:26:2a:b7:19:86:47:
         47:52:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:56:52 2025 by rpki-client