This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
File:                     PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json)
Hash identifier:          ZecqgO4FPl53z1DIzQv2smfeRK7eLy519PMk/rLWWrI=
Subject key identifier:   11:A8:2F:51:C0:5C:FB:F4:8D:1C:8A:58:23:E3:6F:FD:83:1E:AA:94
Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B
Certificate issuer:       /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
Manifest number:          010C
Signing time:             Fri 05 Dec 2025 02:59:13 +0000
Manifest this update:     Fri 05 Dec 2025 02:59:13 +0000
Manifest next update:     Fri 12 Dec 2025 02:59:13 +0000
Files and hashes:         1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: A2qa8K8c88vvI5TTRmqjDTjks4xFGakpu5DTGG70bYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
        Validity
            Not Before: Dec  5 02:59:13 2025 GMT
            Not After : Dec 12 02:59:13 2025 GMT
        Subject: CN=69324a81-d31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:7f:4f:c5:02:86:78:c4:10:76:69:d2:2f:
                    37:68:7c:fc:04:95:cd:98:c6:62:02:4c:b2:ee:65:
                    95:e5:52:97:a4:70:e0:dc:30:6d:84:6f:85:af:b5:
                    b1:7c:98:02:18:c8:5f:ec:fd:be:57:a1:1a:9a:01:
                    1e:bf:9f:d3:25:7b:10:96:f2:bd:d9:15:94:ca:8b:
                    40:f0:6c:b5:9e:a9:dd:59:10:22:3d:f9:24:7d:62:
                    ba:d8:63:ea:fe:bf:47:70:e5:46:e6:57:ea:31:66:
                    8a:d3:25:28:de:60:3e:e0:6a:30:2e:3f:46:d6:64:
                    09:07:1c:0d:7d:00:a2:db:5b:7d:5b:8f:2e:dd:d2:
                    c1:0f:f9:b4:8f:bd:63:17:da:6b:5b:90:89:86:a1:
                    78:f3:bc:ec:29:9c:1c:01:a5:4a:13:e2:01:21:55:
                    7c:bc:8f:5c:8a:d4:b7:aa:d8:61:98:a3:2d:a1:c7:
                    46:a7:f9:86:6e:b6:5f:15:0e:86:4a:93:96:01:da:
                    d9:6a:d1:d9:93:59:6b:58:f2:8f:92:92:b4:30:75:
                    fd:f0:7a:9d:f7:c9:dd:d6:d4:12:e8:a2:a1:32:53:
                    21:9d:cc:db:7b:da:6f:3f:a6:1a:c1:96:aa:f7:9b:
                    85:45:2e:19:20:eb:33:eb:d7:b5:4a:9a:f6:ac:8d:
                    a6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A8:2F:51:C0:5C:FB:F4:8D:1C:8A:58:23:E3:6F:FD:83:1E:AA:94
            X509v3 Authority Key Identifier:
                keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:fb:db:21:fc:10:0c:f0:b6:f9:5f:66:18:8a:00:3b:6f:
         65:f2:2a:c7:ef:d4:c0:c5:a1:bb:53:74:c6:9b:29:4c:81:16:
         15:51:80:00:b1:64:b4:ce:08:d9:bf:94:80:30:c6:0a:41:b5:
         a1:07:bb:5c:73:b1:bd:4b:70:22:01:3d:1d:cb:25:9a:49:65:
         c4:02:bc:8e:51:7a:fa:a1:87:76:10:34:64:bd:c6:82:85:6b:
         d1:9f:7f:8f:47:e3:a0:3b:13:bf:46:3f:93:0f:a2:1a:7c:2b:
         5d:6a:4f:b9:e0:6e:63:8e:93:16:b9:2c:b3:09:13:16:44:2a:
         ff:19:af:f6:f5:5d:92:d4:f8:2c:2a:84:cc:8a:70:9a:75:96:
         74:9f:4d:14:de:92:c6:87:e4:9a:32:ad:4e:33:6f:ca:3e:9a:
         13:3f:4a:9f:35:50:fb:c1:87:e6:4d:65:3b:cc:7b:96:76:15:
         49:92:41:25:60:aa:dc:3c:01:72:e2:df:69:21:75:61:18:e3:
         ff:03:18:ad:48:34:1c:25:29:85:40:c4:ca:b7:2e:46:d9:79:
         53:e5:41:6b:8e:ae:67:84:9d:dd:9e:1a:52:6e:9b:78:4d:a6:
         76:01:4c:23:04:6c:d4:12:8e:74:bc:3c:e3:d0:33:55:0b:ae:
         4d:d4:41:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:18:55 2025 by rpki-client