This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
File:                     pyf1mySxFKJR_fd_U7-g7GkeJaU.mft (raw, json)
Hash identifier:          GUYv4auPwgDOatPiRZ88nZbvALvfddcekja2cqdxFVA=
Subject key identifier:   CD:00:52:13:56:3D:9B:8A:8F:26:60:7E:12:EC:45:02:EA:3E:87:BE
Authority key identifier: A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5
Certificate issuer:       /CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
Certificate serial:       1504
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
Manifest number:          14F1
Signing time:             Sat 06 Dec 2025 16:24:18 +0000
Manifest this update:     Sat 06 Dec 2025 16:24:17 +0000
Manifest next update:     Sat 13 Dec 2025 16:24:17 +0000
Files and hashes:         1: pyf1mySxFKJR_fd_U7-g7GkeJaU.crl (hash: AlM7XObydhwphgzuD1NHqHympFUTt0rrkvoofivXUpA=)
                          2: 530FB34C664D11E89967A549C4F9AE02.roa (hash: trf33MfZmwst14ncdp+0lftlqiI1atOh67rv0E0k0p4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl
                          rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5380 (0x1504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918232F, serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
        Validity
            Not Before: Dec  6 16:24:17 2025 GMT
            Not After : Dec 13 16:24:17 2025 GMT
        Subject: CN=693458b2-b0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:d6:82:64:79:5f:e3:63:3a:d2:a6:9d:22:
                    3f:1c:16:f3:71:39:16:95:92:d3:6c:4d:98:8a:08:
                    23:b2:56:9c:e8:b3:0f:fa:e5:87:95:cf:4b:82:37:
                    bb:8d:f5:8b:36:8c:dd:cd:c5:12:bc:26:b2:c2:65:
                    d0:6c:44:49:65:e6:3c:bf:29:71:bf:55:63:a1:6e:
                    38:4f:e0:fc:43:c5:2a:10:e3:1e:5d:6e:7c:a6:82:
                    2e:37:0d:b3:4f:1a:52:d4:ca:ab:d6:75:1a:e7:01:
                    1c:09:73:5f:d2:e4:ea:23:9f:ff:11:a2:98:f5:1b:
                    ef:4a:ce:34:b5:9d:64:5a:e1:28:ff:cc:7d:0a:ca:
                    a9:fa:e9:d7:3a:98:cd:a5:f4:4d:83:f1:ec:1e:9f:
                    ab:61:e4:ac:d2:03:2c:dd:d8:b7:3e:27:9d:14:52:
                    0c:2a:77:d9:93:4c:42:92:eb:5a:9d:5e:9c:9a:c7:
                    b5:33:be:9b:37:3b:dc:97:1b:dd:b0:40:77:b3:21:
                    85:ec:5a:24:c2:48:e8:55:6c:cb:98:65:dd:7c:db:
                    fb:dc:6a:9d:94:8b:06:49:be:de:29:e2:df:fa:13:
                    c7:db:ef:0e:06:30:1b:fb:0f:00:e7:44:a4:0d:0e:
                    a1:06:b3:96:56:78:1e:32:12:2c:fe:7e:a3:b8:f3:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:00:52:13:56:3D:9B:8A:8F:26:60:7E:12:EC:45:02:EA:3E:87:BE
            X509v3 Authority Key Identifier:
                keyid:A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f0:5d:84:13:99:10:35:4e:be:8a:97:06:ec:b3:cc:2d:27:
         06:cb:eb:44:b7:01:e3:83:16:bc:af:c9:40:83:f4:8e:c0:a6:
         aa:e0:43:6c:68:98:fa:3b:2a:19:9d:a8:95:62:33:77:29:60:
         b9:3d:4f:7f:a4:34:bc:cf:fe:45:cd:fa:8e:4c:2d:90:91:28:
         38:74:9a:bf:de:47:aa:d2:c4:50:61:79:2c:f1:0a:9b:1c:ef:
         f6:45:bc:fc:79:8c:47:11:47:32:aa:ec:3c:35:19:38:6f:76:
         5a:b3:42:3f:f4:df:fc:87:ef:88:44:68:af:03:e1:ac:6d:74:
         10:20:8b:90:52:8b:ea:47:05:3e:89:61:aa:e6:02:de:0e:c4:
         29:68:e6:59:83:21:03:4d:c1:41:c2:35:38:48:e2:51:9c:f9:
         fb:10:53:1e:24:31:83:ac:3e:e7:7e:a8:e2:c3:28:df:85:cb:
         4d:1b:fb:10:5d:20:4e:3c:fa:27:18:be:44:db:db:3c:84:e4:
         f4:c2:e2:5e:11:15:95:40:7e:e3:83:79:d6:62:95:4e:79:e7:
         1e:4a:93:69:a6:db:fa:01:61:74:69:b1:5c:2f:1f:9a:ab:8f:
         b8:9e:3f:73:c0:29:25:1e:c4:d8:2b:4e:40:e1:17:e7:1e:1a:
         f4:5d:ad:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 02:44:52 2025 by rpki-client