This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
File:                     PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json)
Hash identifier:          UMK2GlcQbJ+C3lpcKtxjQyTn6SPGD5e7n00vlf2/jUc=
Subject key identifier:   43:4A:C8:32:95:B3:57:F2:75:E4:C8:10:DD:E9:2C:49:40:06:C5:C3
Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE
Certificate issuer:       /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
Manifest number:          61
Signing time:             Tue 23 Dec 2025 05:57:04 +0000
Manifest this update:     Tue 23 Dec 2025 05:57:04 +0000
Manifest next update:     Tue 30 Dec 2025 05:57:04 +0000
Files and hashes:         1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: VMTehbXRPe61d2L9/pFuVj46vs9xUrH1yJdHGQBVDNE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl
                          rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
        Validity
            Not Before: Dec 23 05:57:04 2025 GMT
            Not After : Dec 30 05:57:04 2025 GMT
        Subject: CN=694a2f30-0d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:11:f3:d0:b1:4d:38:f9:21:f5:20:f8:40:
                    50:9b:1b:03:5b:c5:08:8f:57:0d:6d:8c:78:79:b4:
                    57:37:bb:40:cb:fe:6b:7b:af:3f:23:6d:d8:a0:c6:
                    d9:36:ad:be:91:44:de:a5:89:bd:57:7b:df:4e:fc:
                    72:4d:5a:ca:43:94:9c:d9:a5:f3:6a:76:f0:22:55:
                    3e:06:4a:e8:a2:52:44:eb:60:85:55:c6:a7:dd:55:
                    ae:5d:fd:06:fd:0e:aa:41:24:a6:20:63:64:ba:c9:
                    ca:c6:a6:f0:90:48:60:bc:de:83:dd:61:7a:1b:81:
                    aa:6c:3a:c9:03:47:5c:90:d3:ac:55:5b:6e:73:60:
                    14:5c:70:bc:60:3c:b0:2f:75:14:b9:3f:a3:d0:50:
                    dc:93:3c:9e:91:40:0b:61:c8:75:5b:2a:b0:b8:30:
                    a9:a9:75:97:b4:98:09:03:7f:46:8d:3c:5f:f5:47:
                    0b:89:d0:ad:88:2d:e9:7d:4f:7c:16:d2:55:09:5c:
                    a4:fe:58:84:9f:15:57:53:36:3e:4c:7e:48:2b:2d:
                    3b:77:eb:d9:b3:cd:2a:b9:22:db:9a:cf:7f:a0:25:
                    fe:b0:0e:f9:67:89:65:7b:6a:32:c6:34:91:0b:c4:
                    a1:b6:18:44:9e:07:90:df:ef:64:9a:1d:5f:35:f7:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4A:C8:32:95:B3:57:F2:75:E4:C8:10:DD:E9:2C:49:40:06:C5:C3
            X509v3 Authority Key Identifier:
                keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:8c:74:89:c2:a3:22:1c:82:4c:e7:6f:af:0a:d7:50:1d:e2:
         e9:3c:2e:e1:18:80:5b:6e:53:09:9b:8a:4a:28:01:ca:bb:4a:
         ca:44:63:c7:f2:51:74:2f:e8:9b:1c:cf:b3:ae:ee:e3:e1:a9:
         be:b6:79:26:5c:79:ee:c0:cb:0d:34:f5:c7:a2:2f:39:14:9c:
         09:b2:07:49:06:92:a9:9c:30:2a:65:f2:81:7f:a0:79:bb:d0:
         9e:dc:dd:a8:86:ed:df:81:f8:cc:77:5a:e5:77:dd:5f:12:5d:
         1e:e5:cd:15:70:55:e5:13:f2:e6:3d:a9:80:03:7e:07:0b:c4:
         f2:bc:9e:bd:59:48:6e:ba:c1:77:e9:a0:78:dc:bf:de:7b:f9:
         11:50:ac:f1:72:df:94:75:7a:63:bd:30:23:47:7d:41:c4:36:
         d1:3d:29:a7:42:de:6c:e4:f7:cb:b0:63:87:e9:c6:b0:76:07:
         9c:02:ef:ca:b8:87:70:2d:4d:b6:e2:b1:9a:11:e3:90:a8:ff:
         e3:b4:85:ed:51:e5:36:8b:d2:ba:40:ee:6b:f8:af:75:86:a4:
         ee:7d:74:98:e1:4b:2f:e5:83:e1:92:2f:1f:06:33:26:ad:e9:
         22:cd:fb:c6:72:ee:7a:b0:a8:89:9e:67:fa:e0:41:72:ba:40:
         7f:76:2e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:11 2025 by rpki-client