This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
File:                     PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json)
Hash identifier:          RVScs4g439hKqcscMWC40eAjxWI30tgftLi7dN6gBz4=
Subject key identifier:   BB:09:F2:28:4B:8F:65:1A:B0:A6:E1:AA:1E:B4:DC:9F:CA:B3:71:E1
Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
Certificate issuer:       /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Certificate serial:       0206
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
Manifest number:          01FD
Signing time:             Fri 19 Dec 2025 01:46:12 +0000
Manifest this update:     Fri 19 Dec 2025 01:46:11 +0000
Manifest next update:     Fri 26 Dec 2025 01:46:11 +0000
Files and hashes:         1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: 3J7pH4TKyLmlOojtJlvo9D7vlvHc5ZA1Of7tS6KyjCo=)
                          2: E761FB80118C11F0B9B8B26AC4F9AE02.roa (hash: /75uDbvkq2hvW+aFsSWLKYWGONv7oOopY70G/Ex1fRM=)
                          3: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: PhSrarlCbMwPtvT6PCvMaDG4Ioq8bEIWBn8LLBxKEUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
                          rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
        Validity
            Not Before: Dec 19 01:46:11 2025 GMT
            Not After : Dec 26 01:46:11 2025 GMT
        Subject: CN=6944ae64-4bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d9:d4:27:90:59:59:c0:ef:9a:27:3f:97:e3:
                    56:eb:f5:d1:f3:b5:9a:38:7b:1a:4e:91:92:ef:7a:
                    fe:98:8c:df:b9:63:0a:ba:54:aa:6c:56:71:14:16:
                    4b:07:7a:fe:11:f8:86:92:48:6f:50:15:b7:d3:56:
                    c4:41:b3:a2:78:9c:cd:3e:4d:62:81:20:1a:87:97:
                    cf:e1:09:4b:65:55:bd:e5:2f:fd:5e:4d:b6:36:d8:
                    6f:9c:b7:1a:00:5b:27:f4:b9:a3:fa:e8:8e:f6:98:
                    d4:7f:c6:02:cc:96:44:0c:9b:95:18:96:ce:2d:4b:
                    48:a0:2d:d5:ec:3b:44:37:3f:5a:85:bd:c4:58:38:
                    63:99:dd:6b:e4:81:7b:60:e6:58:12:48:40:4a:e1:
                    aa:b4:76:0c:13:a7:45:c5:90:23:85:98:96:67:7f:
                    37:43:cc:ae:28:ba:a4:c0:2c:7a:67:26:0c:10:f4:
                    1e:23:fe:6d:e1:dc:5b:80:ec:b9:e7:e7:4e:88:ee:
                    d0:95:14:4c:b8:e9:e1:aa:8d:e5:2e:73:ca:3c:f7:
                    fd:ef:0f:99:5d:80:54:40:ee:9a:45:77:a6:d9:ee:
                    14:af:85:b6:67:ad:1a:bc:07:82:95:38:ed:8f:39:
                    73:3a:3a:b5:c4:c4:a2:7c:31:a3:b6:67:cd:15:dc:
                    8f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:09:F2:28:4B:8F:65:1A:B0:A6:E1:AA:1E:B4:DC:9F:CA:B3:71:E1
            X509v3 Authority Key Identifier:
                keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b9:33:94:2f:ea:73:61:bf:b0:96:de:0b:2a:02:c5:d5:82:
         ed:3a:3e:a3:83:d9:cd:a3:a3:81:07:c7:1b:3a:02:bf:1b:f7:
         e6:d3:2e:d4:e8:cf:3e:3a:6b:93:cd:e4:82:73:00:22:78:ba:
         de:d1:53:a9:41:18:19:0c:a6:61:1a:3c:e3:6d:23:30:99:71:
         61:1c:84:a7:bc:04:4d:d1:e4:31:47:72:46:7d:16:ee:ce:d1:
         80:85:9b:82:cb:45:24:12:58:cf:01:b2:9f:2d:e8:3d:53:c8:
         02:ca:34:9e:11:c1:ae:ff:54:28:35:c7:8b:53:62:29:9f:6b:
         0b:1d:14:7b:4e:6e:fc:1b:fc:ea:6d:38:59:71:5d:2d:45:19:
         07:cb:55:f7:05:53:c0:ce:67:e4:ce:9d:6b:db:7d:94:fc:eb:
         a1:ba:01:86:26:cd:96:51:c9:08:f7:a1:08:21:8b:eb:a1:ec:
         34:40:bb:a7:83:ac:cd:be:00:96:a0:49:c3:38:5d:01:ed:f3:
         94:49:7d:fa:a3:e9:75:79:9b:b9:25:c7:36:67:9c:9f:f7:88:
         fb:a0:b7:bd:b7:72:85:f7:ff:3e:bb:74:6b:57:a7:88:ce:f4:
         db:27:db:0b:80:68:b4:26:79:14:f4:16:97:57:01:6e:d0:70:
         28:ab:c3:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF
MkZCMzFDMTgwHhcNMjUxMjE5MDE0NjExWhcNMjUxMjI2MDE0NjExWjAYMRYwFAYD
VQQDDA02OTQ0YWU2NC00YmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3NnUJ5BZWcDvmic/l+NW6/XR87WaOHsaTpGS73r+mIzfuWMKulSqbFZxFBZL
B3r+EfiGkkhvUBW301bEQbOieJzNPk1igSAah5fP4QlLZVW95S/9Xk22NthvnLca
AFsn9Lmj+uiO9pjUf8YCzJZEDJuVGJbOLUtIoC3V7DtENz9ahb3EWDhjmd1r5IF7
YOZYEkhASuGqtHYME6dFxZAjhZiWZ383Q8yuKLqkwCx6ZyYMEPQeI/5t4dxbgOy5
5+dOiO7QlRRMuOnhqo3lLnPKPPf97w+ZXYBUQO6aRXem2e4Ur4W2Z60avAeClTjt
jzlzOjq1xMSifDGjtmfNFdyP/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsJ8ihL
j2UasKbhqh603J/Ks3HhMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1
MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy
WWhCU3M2cUZKRlRpLXpIQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjuTOUL+pzYb+wlt4LKgLF1YLtOj6jg9nNo6OBB8cbOgK/G/fm0y7U
6M8+OmuTzeSCcwAieLre0VOpQRgZDKZhGjzjbSMwmXFhHISnvARN0eQxR3JGfRbu
ztGAhZuCy0UkEljPAbKfLeg9U8gCyjSeEcGu/1QoNceLU2Ipn2sLHRR7Tm78G/zq
bThZcV0tRRkHy1X3BVPAzmfkzp1r232U/OuhugGGJs2WUckI96EIIYvroew0QLun
g6zNvgCWoEnDOF0B7fOUSX36o+l1eZu5Jcc2Z5yf94j7oLe9t3KF9/8+u3RrV6eI
zvTbJ9sLgGi0JnkU9BaXVwFu0HAoq8NP
-----END CERTIFICATE-----
Generated at Fri Dec 19 04:41:34 2025 by rpki-client