This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
File:                     f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json)
Hash identifier:          xYb4OIEhNKq1fIKf1I3NVUXF6LYaN8TX8mDPMWvnjcc=
Subject key identifier:   C9:B7:CD:F0:E8:F0:6F:16:1D:DB:34:54:8F:3F:43:5C:D3:02:88:31
Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
Certificate issuer:       /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
Certificate serial:       0659
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
Manifest number:          064C
Signing time:             Sat 06 Dec 2025 21:33:39 +0000
Manifest this update:     Sat 06 Dec 2025 21:33:39 +0000
Manifest next update:     Sat 13 Dec 2025 21:33:39 +0000
Files and hashes:         1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: ePmvzcyJcLEvq/rumVnXqA7MnugZnW0aQGhGwZJe8KI=)
                          2: 515B1CD254EB11F0B04DBD37C4F9AE02.roa (hash: yctT4YUUP20tQCvJN7CWg3MrC6O8Tuq96ZLx+s4UkRo=)
                          3: 95B7B784C1E611EF91316938C4F9AE02.roa (hash: ufcIsYDdxZ7JHQere7GH/LJcOYs+a2XI1MSL+ZvwbhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl
                          rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DA3F, serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
        Validity
            Not Before: Dec  6 21:33:39 2025 GMT
            Not After : Dec 13 21:33:39 2025 GMT
        Subject: CN=6934a133-421c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:4e:b0:6e:ac:e2:55:61:c8:38:7c:0a:ea:
                    37:75:e2:64:03:50:e3:5d:a2:65:5f:81:1a:5a:18:
                    39:c8:55:c4:93:03:86:b0:14:a8:38:a7:86:c0:6b:
                    7d:7c:7c:ab:95:71:ef:78:28:85:ee:37:b8:7f:a1:
                    fc:d3:e3:d8:33:97:c1:6c:bb:c2:70:d3:37:9f:0b:
                    44:d6:25:4b:23:1a:99:06:06:ca:8e:94:84:cf:f3:
                    77:21:c1:a1:24:f4:6f:5d:9d:52:d1:8c:4b:2d:a0:
                    58:ea:fc:da:37:fa:59:50:38:1a:ba:05:8d:27:39:
                    b3:33:5c:0d:6d:f3:d0:68:63:e7:09:8d:ff:ea:f6:
                    9a:29:07:d0:b0:eb:aa:01:02:80:a6:59:a7:a0:68:
                    e1:7e:95:c8:fb:6f:41:0c:52:6d:dc:a0:70:e3:54:
                    a1:fd:0e:f3:f1:d5:cd:90:a5:d0:f8:bc:cd:5c:b1:
                    7c:4b:40:59:3b:5c:0e:66:e5:34:49:fc:fa:83:31:
                    ff:59:d2:14:d2:78:22:55:5b:01:e6:12:af:db:60:
                    a9:54:17:f2:4e:81:26:4c:21:5c:d5:cc:19:0c:e1:
                    af:3c:ea:cf:d4:46:71:85:84:62:e5:e2:42:b1:33:
                    72:37:49:e8:b2:4e:b6:71:78:44:66:75:75:6e:f8:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B7:CD:F0:E8:F0:6F:16:1D:DB:34:54:8F:3F:43:5C:D3:02:88:31
            X509v3 Authority Key Identifier:
                keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ce:42:e1:cb:4c:1b:ac:8e:11:9a:c2:9b:d4:42:81:7d:8f:
         29:d5:09:b6:7e:8c:d4:be:a4:59:92:2e:22:b5:32:86:d1:6b:
         21:5b:71:87:24:b8:5f:8c:01:94:26:cd:ff:0a:db:65:06:64:
         48:01:60:a5:0e:8a:97:97:44:80:fd:79:cb:7f:53:22:2a:15:
         df:40:3e:d0:a9:60:50:61:c4:33:9a:96:25:a5:bd:c9:bf:7b:
         63:57:35:ae:41:81:d7:1a:0a:7f:f4:db:d7:5a:62:1e:13:ca:
         41:5f:7f:a9:8a:a7:c4:76:9b:d5:2d:2f:84:e9:12:05:29:80:
         a8:3f:d2:69:a1:35:07:21:eb:bb:f5:0e:9a:5a:6f:87:12:bf:
         c9:be:35:af:a6:05:99:33:26:bf:1e:41:d3:5d:e0:f8:3d:dd:
         14:27:3c:7c:7e:6d:44:46:59:66:89:46:52:c4:35:ad:ae:59:
         f3:76:c5:c8:aa:92:f5:bb:3c:a5:4a:eb:be:4c:b4:9a:8d:d6:
         f2:fa:b1:e0:1b:e3:d1:cc:7c:87:8b:b9:64:64:30:51:7e:7a:
         1c:8c:24:02:3a:e3:bb:33:5a:a7:15:2c:71:b8:8f:30:96:41:
         58:c5:03:79:22:70:a1:7a:80:e0:c4:d1:f8:e8:1d:c3:4d:df:
         9f:23:05:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:21:34 2025 by rpki-client