This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
File:                     PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json)
Hash identifier:          tCJg+j0SqhrYH7/kcVPwRtL6DQ0zEbOYkd9pgF2MhHU=
Subject key identifier:   A7:B1:BF:5D:79:7C:C7:32:F3:90:09:D4:40:1E:6D:D2:D8:98:D7:BE
Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
Certificate issuer:       /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Certificate serial:       0821
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
Manifest number:          0819
Signing time:             Mon 22 Dec 2025 20:15:19 +0000
Manifest this update:     Mon 22 Dec 2025 20:15:19 +0000
Manifest next update:     Mon 29 Dec 2025 20:15:19 +0000
Files and hashes:         1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: wbXLD+Ye+3Qpkb6HW2tGBxLcVOvce2lvqsHju4eOKOI=)
                          2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: AHAcb+gAjCz8wkoAWVtMX/VsvUWaSfqcpHAMq6tIbbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
                          rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081 (0x821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
        Validity
            Not Before: Dec 22 20:15:19 2025 GMT
            Not After : Dec 29 20:15:19 2025 GMT
        Subject: CN=6949a6d7-0e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:eb:86:8e:be:8c:ed:56:38:23:f1:82:65:
                    23:84:80:3c:07:1b:d1:8e:e0:44:ae:a9:cc:1e:a6:
                    2f:32:c4:c1:84:14:3e:26:fe:66:72:24:af:26:00:
                    cb:6f:ca:54:7f:12:c1:da:5c:39:4e:9a:48:97:37:
                    0c:25:ed:52:c3:42:44:ce:17:f4:50:98:67:dd:83:
                    93:f6:67:a3:dd:02:ad:3a:eb:5a:54:14:59:cc:41:
                    6a:58:ee:8b:99:5f:2e:9c:15:b0:0d:c4:b9:1b:12:
                    42:89:8a:b2:53:2d:ab:b2:c8:95:5f:77:e5:da:42:
                    25:c4:21:e2:db:d3:3d:f1:19:85:ae:3a:db:c0:90:
                    5a:a0:c3:90:2e:c8:0a:ec:cb:e2:d0:e4:75:72:5b:
                    34:65:a8:83:b8:98:e0:5b:3b:18:2f:02:04:2e:50:
                    0c:24:f6:90:a6:dd:7b:4c:b3:99:c3:8d:e0:46:bb:
                    fa:82:c6:76:f9:52:d6:3c:87:24:24:40:c9:87:73:
                    74:25:0b:8e:32:8b:28:9a:55:4d:ee:bb:a4:a2:db:
                    73:50:66:d6:3d:b2:9c:8d:e4:97:b3:78:e0:ed:84:
                    00:9b:05:93:9a:de:05:90:36:89:41:02:61:31:a4:
                    3b:cf:ac:b9:00:3c:dc:8e:1e:fb:71:fe:79:6b:e0:
                    f7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B1:BF:5D:79:7C:C7:32:F3:90:09:D4:40:1E:6D:D2:D8:98:D7:BE
            X509v3 Authority Key Identifier:
                keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0f:9f:63:64:94:1a:57:d4:f3:39:a1:d7:4b:12:5c:64:92:
         25:8a:20:bd:6d:ea:84:e8:8e:43:30:df:f4:7e:16:91:b3:0b:
         25:cf:ce:7f:a6:28:c7:25:d8:b9:46:e4:26:84:2a:00:37:34:
         04:49:3c:01:64:56:a5:87:02:35:93:0a:b1:cc:fa:10:08:09:
         07:2d:44:4c:e3:df:d7:43:cd:6c:9f:c3:69:9e:ef:27:7c:8e:
         7c:3e:ed:bb:57:ef:4a:5c:a0:dd:c6:60:f3:e7:8f:2b:a0:eb:
         cc:e3:b2:31:ab:be:a8:c2:49:75:4d:11:c4:fc:6c:28:56:3d:
         91:56:58:28:82:42:8d:cc:fc:ac:03:98:55:79:df:4c:73:29:
         f3:4d:6e:3d:bf:c0:28:83:4c:a2:30:80:df:af:76:5e:66:2d:
         8a:02:29:1f:a5:33:f9:0c:9a:12:ff:8c:85:5d:37:c4:c4:96:
         59:d5:84:18:41:55:eb:4e:b8:2a:be:0e:b4:79:0a:1a:50:41:
         95:11:f5:e6:54:e0:6a:61:8d:56:4d:d8:9d:c9:d2:4f:7c:1b:
         fe:05:6f:f9:f0:6d:17:b6:d1:90:b4:f0:49:bb:bd:d2:93:98:
         cd:a3:80:57:80:18:9e:92:70:ac:56:49:75:13:bc:a7:9a:44:
         39:51:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:17 2025 by rpki-client