This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
File:                     b_pdsVnUCjoXLbx09cMrVVF5ea8.mft (raw, json)
Hash identifier:          ge3Ly95Tc/BLcOOLuj5DrsB6AKrl8SbuFDru54qjfXw=
Subject key identifier:   59:71:8A:B9:AA:32:FF:8F:B4:2A:EB:92:0C:B8:20:6D:23:7A:C7:D4
Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
Certificate issuer:       /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Certificate serial:       08D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
Manifest number:          08B4
Signing time:             Sat 06 Dec 2025 19:41:22 +0000
Manifest this update:     Sat 06 Dec 2025 19:41:21 +0000
Manifest next update:     Sat 13 Dec 2025 19:41:21 +0000
Files and hashes:         1: b_pdsVnUCjoXLbx09cMrVVF5ea8.crl (hash: cWZS9p90Z+9irMkBKAaE2kfpwf7faOhnqijcShWQDK0=)
                          2: FFB3EF94F53C11EEA5B4623BC4F9AE02.roa (hash: qCV1CGEKKAAFyjh2aY/pv/O3Ul0oy0qB9pbyOTWaQu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl
                          rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257 (0x8d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C627, serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
        Validity
            Not Before: Dec  6 19:41:21 2025 GMT
            Not After : Dec 13 19:41:21 2025 GMT
        Subject: CN=693486e1-5685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:7f:6a:cb:c9:4e:1f:9c:1f:70:83:39:13:
                    35:aa:90:6e:7d:ee:17:34:91:a7:a2:9f:17:0b:7e:
                    ab:c4:28:52:2b:3d:fb:f3:6d:08:ad:2f:f8:11:1e:
                    f6:e1:e3:46:3c:6c:ea:ad:e5:b6:79:2e:4e:61:f7:
                    bd:5d:0f:17:a1:03:e3:fc:e3:48:eb:74:91:d7:13:
                    74:db:c9:04:61:8d:80:29:3c:22:b6:df:67:7a:c0:
                    a5:7c:98:16:b5:00:f7:1e:4f:63:16:42:80:a7:68:
                    bc:44:ea:17:db:96:c4:2a:c0:66:53:50:1b:06:1b:
                    88:d2:b5:e8:1a:9a:8d:17:3b:47:98:8c:1f:7b:c5:
                    e9:c2:b1:0d:41:5a:7a:ff:93:04:ca:03:54:98:6b:
                    f1:4c:8b:b6:57:be:aa:69:87:02:ba:72:ae:6f:1c:
                    39:c8:60:f8:a9:cf:8e:67:c8:8d:dc:6e:f8:82:af:
                    1f:e9:88:7b:09:52:3d:fe:7a:f2:f9:03:aa:d1:b1:
                    28:aa:7a:53:cc:af:c5:06:cf:aa:83:1c:c4:99:4e:
                    d3:2c:53:71:1b:04:e5:74:58:c3:84:82:72:5f:1f:
                    73:55:4b:b5:36:bc:86:a1:85:cc:f3:67:23:d4:92:
                    55:07:b7:c2:e7:f1:8b:06:a9:6f:57:c0:07:85:58:
                    32:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:71:8A:B9:AA:32:FF:8F:B4:2A:EB:92:0C:B8:20:6D:23:7A:C7:D4
            X509v3 Authority Key Identifier:
                keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7c:8b:19:00:ff:7b:24:85:70:19:85:b2:89:c2:ca:7d:79:
         76:de:48:a5:44:71:91:25:d9:7a:fa:be:e0:31:92:ef:d9:41:
         06:09:59:c4:49:fe:56:9f:91:2b:9e:30:d5:3a:5e:5e:9e:ff:
         a4:7f:ce:e2:3b:e6:3b:64:11:df:f6:b7:84:78:a5:e4:61:ae:
         87:6a:4b:e0:c4:56:63:46:cd:71:7e:a4:5c:76:df:f4:84:ad:
         ce:4c:ca:e3:91:cd:ce:57:77:88:d6:fd:2f:f8:41:61:54:e9:
         56:4d:8c:f0:23:d6:e8:42:0b:0e:2f:8c:e2:d1:3d:e9:9e:e2:
         fb:ff:88:95:24:86:9c:49:38:9f:c1:99:51:da:09:34:8d:e5:
         9f:c4:03:94:92:58:a2:b6:fd:b3:f5:4d:c9:8d:fe:95:56:3c:
         b5:f7:d4:62:67:b7:a2:1d:15:de:6e:8b:14:18:01:6f:85:9e:
         4c:e4:6f:0a:45:52:6c:a4:ea:c3:1e:7a:a6:92:fc:b8:f7:ea:
         17:13:45:bf:d3:22:e6:4f:10:c6:c1:1a:ed:c9:07:e4:cb:20:
         d7:a8:ef:80:29:ac:d6:68:9a:8d:3a:c4:1e:44:99:38:93:36:
         99:36:e7:5e:26:e0:43:7c:3c:bb:41:41:5a:0a:a8:fe:eb:f6:
         1c:de:b9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:46:02 2025 by rpki-client