This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
File:                     PfacqYyxMelltbxKM_znG50156g.mft (raw, json)
Hash identifier:          q57M6Pf+JbNyU9qoVMrhqBfwlGYAMa8vRr4hJvwItl0=
Subject key identifier:   43:0A:37:A0:8F:63:FB:A0:D4:D6:65:C5:AF:8D:FE:30:AB:79:6D:1D
Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8
Certificate issuer:       /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
Certificate serial:       07BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
Manifest number:          07AD
Signing time:             Mon 08 Dec 2025 20:24:24 +0000
Manifest this update:     Mon 08 Dec 2025 20:24:23 +0000
Manifest next update:     Mon 15 Dec 2025 20:24:23 +0000
Files and hashes:         1: PfacqYyxMelltbxKM_znG50156g.crl (hash: WTVJ0gb2PjZPpSmb8+uECWUHH3VmTz7AifaCnWVe8Fk=)
                          2: F1C686AA1D5811EFA8D26E3EC4F9AE02.roa (hash: TkoNa9ji5ztcG7b34KFx+YNM0+7Oo5t7XfdNpMfZbEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl
                          rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 20:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1979 (0x7bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AF13, serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
        Validity
            Not Before: Dec  8 20:24:23 2025 GMT
            Not After : Dec 15 20:24:23 2025 GMT
        Subject: CN=693733f7-0868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:73:a2:ae:36:e2:3c:27:cf:3e:db:6d:b3:b9:
                    de:47:71:3b:8a:db:70:9d:6a:57:d9:d5:6c:a3:38:
                    aa:7a:67:db:4c:0c:0c:6f:1b:e7:1d:f4:7d:ca:b6:
                    e4:54:ef:20:db:90:fc:fc:2e:b0:e2:ea:32:9e:85:
                    65:c2:da:6b:f1:f9:96:82:76:63:f1:fd:cb:eb:7e:
                    5a:20:05:cd:e5:f3:cb:87:b9:49:47:94:c2:8b:2a:
                    45:f0:3f:a8:ab:36:5d:8b:da:4c:4b:9b:21:16:42:
                    5b:bc:1b:08:27:00:c8:c6:14:d3:52:c6:5a:9a:c3:
                    9c:93:78:8a:ac:95:20:db:fd:c6:80:4e:43:47:92:
                    2f:13:9c:ce:96:aa:e2:80:f0:da:a6:30:4b:91:71:
                    a4:81:6c:c5:e6:61:c8:4c:92:c2:99:fd:cd:45:78:
                    bc:15:48:f5:88:8c:70:16:7f:33:68:c7:b1:28:d8:
                    4d:e9:53:fe:0a:d0:13:a5:f2:eb:e2:be:75:27:cc:
                    69:5a:58:02:15:e6:6c:97:dd:a0:c7:e4:97:08:6b:
                    4e:8a:85:c3:f6:80:bb:2f:f3:15:6e:c4:9a:d2:cd:
                    78:b3:bf:c3:0a:89:72:04:15:1c:d5:3e:30:d1:eb:
                    db:e3:ea:4b:59:34:07:c6:23:e8:3c:23:73:48:4c:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0A:37:A0:8F:63:FB:A0:D4:D6:65:C5:AF:8D:FE:30:AB:79:6D:1D
            X509v3 Authority Key Identifier:
                keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:dd:5c:d2:7f:89:93:a0:09:ab:ca:2e:b1:3e:97:5f:f0:a2:
         c6:cb:8a:62:fb:31:32:7d:dc:b2:6c:f3:8f:22:c9:16:0c:27:
         a5:5b:53:c0:f0:4d:bd:f7:a2:af:e6:c2:60:89:a0:c3:ea:48:
         48:e1:27:11:f3:38:57:c6:fa:5c:57:7b:07:aa:1a:58:43:5e:
         9f:9a:cb:a6:ff:ed:3c:0b:5e:6d:27:d2:c1:4e:24:15:61:3d:
         aa:65:88:91:8c:58:38:b2:6e:4c:0c:f2:6c:ac:24:70:e6:f2:
         56:e9:cc:e5:aa:66:a8:8a:5b:e4:7f:5b:2c:3d:bc:ab:6e:14:
         be:55:56:fa:94:dd:10:7c:d1:8d:59:c8:6a:2b:13:89:d5:7c:
         0f:3e:6d:e4:9f:81:81:95:6f:64:c4:b7:f2:0e:61:ba:9b:12:
         89:c9:09:a3:5b:62:78:dd:87:18:54:05:f6:c9:07:44:6d:eb:
         5f:cb:c7:b6:51:d6:51:ee:fa:97:5b:36:38:cf:39:0d:8a:3a:
         65:b5:c1:4c:18:de:b5:28:3d:db:98:5d:19:99:44:14:72:69:
         a1:2b:f0:86:9e:e9:ed:f7:40:79:1e:4d:10:dc:73:b3:9b:f2:
         69:c6:fa:cc:56:56:35:ea:af:af:69:80:75:76:9f:8a:93:b1:
         7a:58:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:40:03 2025 by rpki-client