This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
File:                     PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json)
Hash identifier:          CUP/dUR0YjqVAbh0r/6ObxcAnTOeB1694gw7PnFt0+U=
Subject key identifier:   34:70:F3:07:67:4A:4B:EC:4C:77:3B:0C:62:51:27:92:59:AF:06:5B
Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F
Certificate issuer:       /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
Manifest number:          01B0
Signing time:             Fri 05 Dec 2025 01:29:48 +0000
Manifest this update:     Fri 05 Dec 2025 01:29:48 +0000
Manifest next update:     Fri 12 Dec 2025 01:29:48 +0000
Files and hashes:         1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: Z9zZ+0wxxD2sJwmHGgSAwpYmbbKkaXpuLpuM5UahD48=)
                          2: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: zLJmvWY7239Phf4yPfDTSksmKOjgZNQc6mllvDN5PGA=)
                          3: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: lp3xmOm8VpMKZjMN4wnKudx9lNNJk9A7QEoVNpNZM/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl
                          rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
        Validity
            Not Before: Dec  5 01:29:48 2025 GMT
            Not After : Dec 12 01:29:48 2025 GMT
        Subject: CN=6932358c-47ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:1e:2c:65:3e:80:6c:b2:34:4b:6d:39:b1:
                    18:86:a3:2e:b2:c8:ad:ff:eb:1d:23:9c:55:3f:14:
                    b2:e3:99:be:dd:f5:6b:97:2a:bf:7b:5f:a6:c5:9e:
                    67:a7:25:97:a1:19:aa:02:29:93:c2:05:91:35:b8:
                    dd:1d:7c:76:ea:f0:03:dc:d2:1d:b0:99:e7:8b:90:
                    0f:79:37:ec:e2:fd:64:8a:02:a6:e8:4b:50:c0:c9:
                    9a:03:90:fb:d0:31:7e:12:f6:8b:8e:12:eb:28:78:
                    28:d4:15:f3:da:92:85:18:83:9a:f2:68:3d:c1:69:
                    93:84:29:91:2c:38:2a:d6:9e:32:40:36:fe:d1:90:
                    d7:6a:ba:3c:57:f4:2d:4a:09:1c:2b:0b:c4:de:75:
                    d5:df:47:08:14:48:04:fa:75:b2:3c:c2:c7:ee:bc:
                    ad:ab:cf:e4:dd:ba:2e:01:62:73:42:6e:8b:23:6f:
                    c7:57:13:70:a1:d2:aa:b2:e4:9f:59:c7:2f:3c:d2:
                    52:9d:98:4d:4b:f5:d9:0a:93:f4:cd:b6:f1:af:c8:
                    0a:bc:58:d5:50:65:81:84:c6:69:75:36:9c:de:52:
                    40:48:c3:d9:42:33:f1:03:90:c8:a4:53:16:d5:12:
                    d8:f2:83:14:52:30:ba:b2:98:67:be:b7:63:8d:4e:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:70:F3:07:67:4A:4B:EC:4C:77:3B:0C:62:51:27:92:59:AF:06:5B
            X509v3 Authority Key Identifier:
                keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:60:d8:15:f1:5f:80:fa:f1:83:25:94:76:1d:77:98:b9:ab:
         05:e9:cb:f3:ae:5c:40:e5:15:bd:42:a1:e8:db:64:a9:eb:e3:
         a0:65:ad:22:00:bb:d3:1a:5b:cb:bc:9a:86:87:59:93:e0:a8:
         94:46:f6:80:be:3f:4a:d5:fa:3d:b1:cc:5e:38:4b:15:4f:cb:
         22:ba:af:2a:aa:fe:b2:a8:a9:17:7a:b9:1f:3a:8e:cc:f5:bf:
         ab:23:20:d9:72:1c:6c:47:59:68:2e:f4:18:6e:a8:49:29:32:
         4e:82:0b:d9:3c:13:ce:eb:93:3b:8f:be:6a:db:5b:4f:e5:7e:
         65:c7:54:94:bb:88:69:e1:b8:80:45:25:eb:ac:b6:10:80:29:
         bf:3c:bf:d3:84:81:35:80:9e:25:85:f3:43:23:08:2e:54:a8:
         06:df:b9:ae:8e:a4:e4:11:1f:64:61:41:0b:23:e4:91:0f:ba:
         45:8d:46:66:da:1b:5a:ab:24:42:15:e6:ab:6e:ba:5f:a2:1f:
         6f:ed:ed:26:94:fb:8c:90:02:7e:fa:09:c3:c6:58:88:10:48:
         30:52:0a:8f:72:bf:e1:9d:28:f2:a5:d8:b5:b6:ce:f3:52:e6:
         86:be:08:e3:1f:ff:7e:7a:8d:d8:bd:99:ed:f0:04:9a:e5:de:
         35:c6:44:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:26:04 2025 by rpki-client