This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
File:                     pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json)
Hash identifier:          5/IF4Ogl1XXW3qESPqh1L+/SbS3z6aosjxJlgE/zPzQ=
Subject key identifier:   1B:15:B9:FE:2F:FC:77:A8:CE:A0:8C:37:B4:C1:73:34:20:5B:58:3C
Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A
Certificate issuer:       /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
Certificate serial:       0442
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
Manifest number:          043A
Signing time:             Thu 04 Dec 2025 22:47:05 +0000
Manifest this update:     Thu 04 Dec 2025 22:47:04 +0000
Manifest next update:     Thu 11 Dec 2025 22:47:04 +0000
Files and hashes:         1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: lYEIjUtLhCYuoFnahEJ0mNxeNMFno4r0DE2XDWxDfRw=)
                          2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: 2pNsdUTXJ21ZMGMJibEjsxpDH0Z9Fw35noblZo6xKpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl
                          rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1090 (0x442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
        Validity
            Not Before: Dec  4 22:47:04 2025 GMT
            Not After : Dec 11 22:47:04 2025 GMT
        Subject: CN=69320f68-1d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:68:cf:53:b2:7c:78:99:14:1c:87:cf:36:94:
                    d4:4a:49:ab:e0:cd:fd:5d:8c:09:0f:d5:f5:4d:45:
                    1c:a6:8e:a5:21:26:64:42:ad:1d:26:59:1a:b7:9a:
                    b9:c9:5b:15:5b:aa:66:ac:08:be:fb:67:51:5e:54:
                    55:16:41:36:f8:94:97:f4:39:e4:ab:4d:08:60:a3:
                    9d:d2:79:0e:44:04:bb:c4:ea:42:e5:69:48:48:d0:
                    c2:bc:44:a3:19:d1:a0:59:04:bf:8e:74:7d:03:d5:
                    92:72:e8:80:71:78:36:22:d3:df:ee:4e:2e:9a:c6:
                    6a:e0:10:4d:fa:57:84:cd:f7:88:8e:a6:e0:79:72:
                    5b:aa:6f:f1:a4:08:57:d6:fa:4f:6b:a7:13:99:ae:
                    38:9a:99:63:38:f1:4b:82:3b:a0:41:f5:d0:ce:54:
                    0d:34:a8:40:57:36:43:50:6e:81:29:16:6b:3e:b5:
                    81:a3:14:c5:c9:01:d2:38:2f:db:a9:56:cc:3f:ee:
                    b0:86:60:06:87:ef:39:55:c9:46:b3:5a:ee:ed:8f:
                    bb:66:21:18:8c:99:84:df:04:7e:0d:7b:cd:60:8d:
                    bc:8d:7b:6c:9f:75:00:3d:dd:34:55:3f:75:8e:2b:
                    68:b5:e5:de:df:60:22:09:8a:e5:1b:9e:74:61:86:
                    65:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:15:B9:FE:2F:FC:77:A8:CE:A0:8C:37:B4:C1:73:34:20:5B:58:3C
            X509v3 Authority Key Identifier:
                keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:51:bf:fe:60:79:c8:8b:6c:d4:ef:aa:de:e4:aa:5e:8d:87:
         33:9b:08:04:34:07:60:cc:36:7a:00:1c:1c:f2:49:ee:92:49:
         7a:c6:f3:5f:89:04:e4:b0:7b:93:2b:36:7a:d7:f6:d1:18:eb:
         e9:a8:09:f7:20:f0:9e:9f:5d:f6:90:17:d2:88:9b:90:38:61:
         a4:65:1a:12:ba:2d:42:91:57:9a:69:8e:8f:90:bb:b7:f2:84:
         9f:5c:4a:25:a0:3c:b2:ce:d2:bb:5e:a6:4d:c9:f3:2c:78:5d:
         0f:04:30:d7:7e:24:32:ec:1b:f6:e1:b5:37:05:6d:8b:aa:0b:
         1a:ac:7b:91:98:08:0f:4e:0a:60:e7:5f:46:8b:db:47:33:df:
         8e:14:25:77:00:8c:d9:66:55:22:26:54:c9:96:a5:db:97:44:
         6d:b5:40:e4:1c:f9:4b:06:9e:44:a4:1c:6b:f0:3b:35:3d:32:
         df:52:52:f1:52:fd:a2:d8:5a:26:f3:e3:80:8f:9a:46:ac:2d:
         1e:d3:56:3e:d9:78:20:64:2f:d4:46:02:ff:cc:99:62:d2:2d:
         99:e0:ae:25:01:53:0e:6c:9f:26:24:3b:6f:d0:3f:89:82:a1:
         98:be:5b:44:32:f0:ee:d4:22:08:b9:c9:60:8c:ff:d2:71:94:
         50:54:6c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:19:50 2025 by rpki-client