This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
File:                     PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json)
Hash identifier:          I9dvCO2S1tPfu//5NiN+gNPr7I0lxKFriK8JIWByo/s=
Subject key identifier:   08:51:32:AF:39:52:92:03:13:96:D0:09:57:DE:B2:1D:63:1F:D8:F0
Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
Certificate issuer:       /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Certificate serial:       0319
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
Manifest number:          0313
Signing time:             Tue 23 Dec 2025 00:08:35 +0000
Manifest this update:     Tue 23 Dec 2025 00:08:35 +0000
Manifest next update:     Tue 30 Dec 2025 00:08:35 +0000
Files and hashes:         1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: pIu1EHxNyDQJWyz0sKqjpxzz9sy3ORTrQbEiy8VfQag=)
                          2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: lRZm7R1XzhUUnYkMhnYwCmY95i90cE75koEdjvOdBVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
                          rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
        Validity
            Not Before: Dec 23 00:08:35 2025 GMT
            Not After : Dec 30 00:08:35 2025 GMT
        Subject: CN=6949dd83-a5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:d8:6c:02:54:75:0a:05:6c:03:e8:9e:b7:
                    ac:ae:27:d6:5c:c4:c6:e2:f2:ad:85:e7:26:d7:b1:
                    08:be:43:12:04:f3:5d:e2:d9:12:9c:64:15:3d:62:
                    8e:ba:ad:f4:09:e5:18:de:78:5c:f3:a9:50:bd:77:
                    e6:2b:6d:0e:4c:76:94:c5:65:54:bc:6b:44:27:76:
                    af:6a:18:fa:bd:56:c5:fc:87:e8:7b:df:17:28:83:
                    41:af:f6:12:28:e7:c2:ae:e9:51:b2:c7:42:53:3a:
                    f1:d0:be:b5:fa:bb:cf:26:85:32:fa:09:90:ee:67:
                    7f:ba:6b:45:92:da:d2:d4:15:25:71:aa:7a:03:2a:
                    1e:4f:a1:b5:ca:59:51:f0:75:dc:44:7c:ee:6f:6d:
                    2d:6c:90:b7:22:f9:cd:c5:61:5e:cd:12:6e:e2:4a:
                    e3:81:ea:2b:f7:cd:61:75:ad:13:d1:6d:de:8e:06:
                    80:11:b9:76:d2:81:f5:1a:90:60:c2:32:42:f2:a0:
                    31:98:2b:88:b6:e6:32:21:25:c5:45:cf:6c:7e:f6:
                    57:6f:05:59:37:c0:88:3c:19:c3:19:f6:63:28:ef:
                    9e:ec:13:d6:c6:7a:8d:65:2a:44:4d:89:9c:4d:50:
                    9b:a4:e9:de:21:7c:75:7e:82:5c:70:7f:80:41:b3:
                    6d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:51:32:AF:39:52:92:03:13:96:D0:09:57:DE:B2:1D:63:1F:D8:F0
            X509v3 Authority Key Identifier:
                keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:51:c8:b6:c6:59:27:5e:c0:d5:75:a1:47:59:d8:a5:ca:56:
         b1:e0:93:dc:32:23:ac:2a:21:9f:14:15:7b:32:cd:be:5f:09:
         06:61:fb:5a:4f:b7:32:dc:89:f2:32:e9:a3:57:cc:f2:4a:db:
         9e:d1:85:2f:4c:14:5a:51:48:2e:e9:68:bd:6b:95:36:3a:4f:
         3f:2b:f7:24:33:11:bd:81:45:7c:e4:e1:cb:a4:4b:f3:43:c3:
         a0:20:7d:6a:59:d5:f1:1a:d1:b2:bf:0c:53:99:ca:d6:2b:91:
         02:1f:76:2b:1b:a9:5f:38:25:ba:2e:f7:fc:7c:20:5e:41:68:
         c7:00:ab:c9:c5:82:b0:c1:f4:91:14:29:2e:3e:27:be:ee:7c:
         d7:3d:01:16:3a:0f:f5:b9:4b:56:d0:66:a9:17:52:ff:53:47:
         ec:16:10:52:05:07:87:9e:68:38:e5:e6:1d:f3:a4:53:65:03:
         42:3b:65:e7:a2:b0:3f:37:14:eb:b5:63:34:05:7a:c6:35:a1:
         fd:cf:0c:eb:ef:65:91:1a:d4:41:a2:30:02:45:18:23:0c:4b:
         57:0e:f8:6e:27:4b:d9:7f:43:e1:5a:43:ba:8f:a3:d7:69:72:
         40:ab:8a:ac:f2:e1:97:81:ea:37:6f:8f:47:f3:6f:79:2d:b8:
         83:2c:d3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:15 2025 by rpki-client