This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
File:                     PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json)
Hash identifier:          G/g62g6z1KMrOSXxRMgYPtJ+8vX8Yp5j15M2r9cjZUU=
Subject key identifier:   22:98:CA:F3:55:5B:FB:1D:14:5C:95:A5:3E:C6:BE:12:3E:FA:97:61
Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
Certificate issuer:       /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
Manifest number:          FB
Signing time:             Fri 05 Dec 2025 03:11:55 +0000
Manifest this update:     Fri 05 Dec 2025 03:11:55 +0000
Manifest next update:     Fri 12 Dec 2025 03:11:55 +0000
Files and hashes:         1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: W0BY3ReTlHAWyteVljsP1OwEAzsiVhF0KOOaH8g+2Ns=)
                          2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: Hdt3DT88wjtxw1TUKGFWHT6pNsnIEUfha62M8xw528A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl
                          rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
        Validity
            Not Before: Dec  5 03:11:55 2025 GMT
            Not After : Dec 12 03:11:55 2025 GMT
        Subject: CN=69324d7b-b168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:07:61:b7:8d:5c:e2:e6:ae:15:f8:92:b3:
                    db:66:f5:0b:7a:1e:b2:19:6a:aa:62:ac:3b:cd:19:
                    5b:b1:85:36:f1:06:e5:cf:9c:6f:5b:20:f8:fe:46:
                    25:df:31:44:9a:03:19:7a:df:2f:65:32:4d:14:56:
                    20:c6:c4:ad:5e:4b:bd:b0:c7:94:b6:9d:56:1d:5d:
                    e7:d6:eb:61:07:e3:2f:c7:9a:66:e7:eb:e6:c7:89:
                    7e:37:33:aa:ef:b8:29:80:39:80:ae:35:fc:0a:32:
                    9f:fd:a1:9d:a7:ec:00:8d:e9:03:32:49:05:29:2d:
                    7d:ba:2f:65:66:1e:69:3d:ab:67:43:42:e2:c2:92:
                    ae:71:2f:06:51:08:d7:82:cb:a5:7b:16:66:78:08:
                    3a:d0:97:34:1c:89:f5:4b:e3:f4:f3:7d:f6:ea:09:
                    6a:62:52:e3:32:34:70:2b:ed:e4:21:82:cb:1b:42:
                    5c:3b:10:f5:e0:ba:d6:74:16:59:1a:f1:9d:0c:f3:
                    42:b7:3e:29:2b:71:16:ad:a0:08:a8:97:9a:5b:c6:
                    a0:04:6a:cb:50:89:30:44:a7:35:32:6a:62:59:8b:
                    fb:01:44:06:1f:c7:f5:c1:8a:3d:f9:b0:1b:97:e1:
                    42:d2:5b:f0:46:59:f4:6e:f3:78:3d:4c:f7:ba:4e:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:98:CA:F3:55:5B:FB:1D:14:5C:95:A5:3E:C6:BE:12:3E:FA:97:61
            X509v3 Authority Key Identifier:
                keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ce:58:03:ac:d1:f6:b4:79:72:6a:f0:0e:35:14:4e:fa:51:
         7b:ef:37:31:1d:5c:10:59:81:f1:bb:44:90:8b:5b:8e:76:ae:
         fe:ac:f9:a6:a5:c7:42:a2:ef:36:7d:e8:6a:44:f4:37:3a:29:
         1a:81:1f:18:4c:42:6e:31:d1:15:13:9c:a7:85:6a:0d:2a:36:
         90:3b:a7:d1:c5:c3:a2:33:1e:c9:6b:af:e1:79:2e:da:0d:2f:
         fb:13:4e:95:f6:7c:5f:5d:e3:b3:47:11:b6:1d:15:80:46:d4:
         f6:e7:8d:bd:d7:16:65:3e:08:0c:6e:cd:7b:cf:9c:b6:3c:e4:
         cd:b6:82:bb:f9:d1:70:e3:1f:9c:b1:3b:2d:02:21:b8:65:15:
         cc:fe:33:dc:b3:ac:1d:31:3f:46:7f:ba:84:0b:9f:e5:52:0c:
         36:ca:85:ff:58:2f:2f:3e:59:91:e3:08:8a:0e:04:c9:01:32:
         a3:60:0f:a0:b4:4d:15:6d:de:7c:33:73:4c:73:b3:e0:a9:a7:
         2a:1f:28:d4:bc:0f:78:52:ae:5b:e1:46:1a:70:7b:c7:33:5d:
         79:a1:71:cf:79:b7:61:09:c9:8c:20:30:e3:ae:61:8f:92:cd:
         cf:d7:33:87:4f:bb:86:91:35:d1:27:af:49:98:91:54:66:20:
         ac:69:05:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:56 2025 by rpki-client