This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
File:                     PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json)
Hash identifier:          If4zESXGDZm3LImZZpIQFuZlZ/SAhvPGnw+jZCGniYA=
Subject key identifier:   FC:11:7E:B3:24:24:35:0D:17:59:86:93:B0:F7:46:BE:BB:E9:17:01
Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
Certificate issuer:       /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Certificate serial:       075D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
Manifest number:          0751
Signing time:             Thu 04 Dec 2025 20:37:23 +0000
Manifest this update:     Thu 04 Dec 2025 20:37:22 +0000
Manifest next update:     Thu 11 Dec 2025 20:37:22 +0000
Files and hashes:         1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: edjn+BF9bzHUCXbubMZ5gNDmqVNDgE/jdQ28670bYrw=)
                          2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: bE6+fF3Z2aJLcDObD8suz2TxAd7cotS0UZ/nrStzxDQ=)
                          3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: EjFNRenEr22lcCVrIFxeoH925N5NhrGgL+Mz7mHjB8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
                          rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1885 (0x75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
        Validity
            Not Before: Dec  4 20:37:22 2025 GMT
            Not After : Dec 11 20:37:22 2025 GMT
        Subject: CN=6931f103-182c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:34:9c:05:0f:4e:7d:67:a2:ae:a6:07:0c:
                    17:c7:ea:72:40:7c:76:5f:81:6c:f8:f8:60:48:5d:
                    b3:dc:7d:7d:f3:82:75:9c:8b:49:e1:8b:22:20:f4:
                    41:3d:c9:63:bc:e5:5e:8d:f2:74:84:5b:c5:d1:45:
                    b9:b0:1e:45:ba:71:11:60:8a:7c:51:bc:87:6f:19:
                    9b:fd:fd:ff:63:50:4f:34:9e:68:3a:7e:21:12:3e:
                    d1:65:e8:48:ab:18:31:04:e3:37:ff:6b:4f:b8:fd:
                    8e:28:7f:a2:87:74:91:a9:2f:c2:22:43:3e:b6:56:
                    70:3c:c0:de:52:9f:bb:cd:ef:24:44:be:da:39:7b:
                    0c:d0:88:6d:8c:bf:9c:68:7a:89:18:e2:20:44:d2:
                    51:26:b1:e1:03:98:fb:0d:bc:68:dc:43:ec:f9:2e:
                    29:b7:7b:53:04:97:b7:86:3b:b7:29:e5:6a:0f:4b:
                    5e:62:61:1e:3b:68:2c:b0:c1:30:e4:3c:27:6f:d3:
                    3e:99:38:07:ad:e5:cf:58:5d:b0:ff:ad:fb:7b:b7:
                    a1:55:7e:50:39:1f:80:e0:68:dc:98:70:56:57:c2:
                    b0:3c:e2:62:f3:4f:ab:5b:9a:84:da:94:ab:98:8a:
                    00:d4:c5:bf:10:58:36:98:4a:e0:6a:ad:91:3a:5f:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:11:7E:B3:24:24:35:0D:17:59:86:93:B0:F7:46:BE:BB:E9:17:01
            X509v3 Authority Key Identifier:
                keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:61:17:4e:28:2a:d3:a0:95:24:cd:f3:b1:03:21:5c:a6:
         c2:a1:fe:62:bd:35:dd:8b:c9:9e:80:53:de:6e:bc:80:b6:67:
         ae:e4:84:4d:60:ef:aa:e8:fe:e7:b2:0b:8f:21:57:2c:b5:a0:
         3b:39:d7:36:b6:f0:ad:e7:13:1a:9f:c2:c7:11:32:8d:69:a1:
         7d:22:ac:c3:c3:6a:5a:1e:d2:45:8f:b1:f0:73:00:89:c7:d9:
         ad:3b:9e:9d:f2:9b:45:10:3d:3f:f2:19:e7:ac:ec:4a:f2:68:
         1f:c9:8f:a7:b7:92:ae:92:79:d8:c2:67:19:f4:a4:4c:e7:4b:
         b3:d6:46:1c:3e:f4:9b:59:a0:d9:e7:68:59:74:b1:cb:6c:0b:
         a8:89:b6:17:28:ef:5c:bd:20:d9:9b:0e:b9:dd:96:ce:1b:85:
         55:4a:32:01:7c:7b:ae:cf:4b:05:ef:04:2d:fc:1a:f6:aa:69:
         55:39:25:95:80:7a:23:b7:02:57:6d:66:6a:bb:2a:03:81:6f:
         41:b6:b7:cc:63:d4:0d:7f:d1:98:65:94:5e:3b:8c:52:a3:c5:
         64:7f:bb:ac:c4:13:85:34:81:93:eb:f8:d6:80:d1:d7:8a:de:
         23:58:d1:de:ca:7d:3a:35:25:09:92:02:f4:e4:e4:97:18:9c:
         a7:67:3c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:10:03 2025 by rpki-client