This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File:                     PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier:          14r5KAqSbiyvBDY4aoNIFzcUEEOHih600QaXvtlQwSM=
Subject key identifier:   3F:00:F7:B6:73:48:2C:27:3B:62:82:74:A3:EC:12:5B:E6:3F:51:81
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer:       /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number:          015F
Signing time:             Sun 07 Dec 2025 02:30:51 +0000
Manifest this update:     Sun 07 Dec 2025 02:30:50 +0000
Manifest next update:     Sun 14 Dec 2025 02:30:50 +0000
Files and hashes:         1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: CWfsqHoYhJqKyUsFHo/0FXySDuqi72w6cxKg0OyBuz4=)
                          2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: idAFhUmAkJaKGqP8j1ITDESnMkqFyJap6af21HGHAgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
                          rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
        Validity
            Not Before: Dec  7 02:30:50 2025 GMT
            Not After : Dec 14 02:30:50 2025 GMT
        Subject: CN=6934e6db-0453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:02:8b:14:41:ce:63:ae:0a:36:cb:42:23:
                    75:b2:97:93:bd:04:c7:78:5e:8c:3d:b3:39:19:7e:
                    f0:d1:c0:d9:84:e4:8f:20:ce:fd:19:ec:49:6a:88:
                    b8:8d:07:18:df:da:dd:cb:4e:37:df:62:1e:9f:42:
                    40:6f:dc:59:f3:d9:3f:23:f0:28:cc:46:23:d5:9f:
                    8d:2d:78:9f:5f:84:bb:c5:fa:33:b8:27:41:d5:30:
                    d1:f2:4f:52:6f:0a:5a:0c:b9:2f:ee:59:23:cb:7f:
                    a4:a1:7d:66:d2:a3:9e:fa:73:44:72:be:49:15:03:
                    21:05:3d:43:51:46:9d:46:3c:a2:db:62:ec:02:b2:
                    3c:c0:92:72:31:3a:7c:65:76:97:1b:47:78:82:59:
                    2d:3a:cf:83:83:3c:3c:73:06:53:3c:06:88:aa:c2:
                    70:44:43:90:4a:14:5a:dd:e6:30:e3:27:c4:1b:1a:
                    fa:75:6e:1e:bb:79:96:0b:cd:c1:47:6a:a3:2a:3c:
                    4a:cd:f7:d2:05:06:44:6e:1d:d5:74:a0:a2:fd:93:
                    b5:f2:86:a4:db:92:0b:e3:5f:42:22:37:17:fd:8e:
                    04:52:97:19:65:a8:d0:c8:ef:85:07:f4:c9:75:a5:
                    94:9e:5e:d3:4e:be:c4:12:2a:85:59:e9:88:80:d5:
                    ea:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:00:F7:B6:73:48:2C:27:3B:62:82:74:A3:EC:12:5B:E6:3F:51:81
            X509v3 Authority Key Identifier:
                keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f5:75:94:a7:1b:5f:e2:09:e8:a3:2f:2f:7d:18:86:54:77:53:
         ef:9a:47:3c:79:ef:00:c2:44:cb:6f:a8:d7:f6:04:3f:22:1b:
         44:0f:34:e6:97:a0:8b:4b:08:73:b5:2b:2c:ee:11:34:4f:77:
         c2:c6:f5:35:c4:88:a2:68:01:2d:70:a3:63:39:1f:f1:ed:e0:
         0f:5b:4b:d6:37:02:52:23:50:3a:70:08:86:37:91:89:d1:eb:
         b2:43:8f:4b:5d:d0:be:50:d0:f0:4e:c6:4b:41:56:c7:1c:9b:
         07:d1:7b:eb:52:da:48:39:b7:ba:15:a4:29:86:a5:5e:11:4a:
         39:a9:fe:68:35:93:6c:13:75:f6:a6:51:db:52:cf:aa:34:e2:
         01:79:2b:de:c2:31:5a:bb:69:b3:34:e6:b5:2d:4c:1a:bc:04:
         40:b2:16:7d:fe:60:95:70:ce:f7:15:4b:d5:4d:06:90:ce:45:
         2a:33:2b:74:19:79:9c:ae:91:e3:0a:fb:46:a5:3f:bc:65:93:
         87:0a:97:c5:80:47:5c:eb:95:78:1b:16:24:b8:7a:d4:31:06:
         ab:01:4e:1c:7a:ad:fc:7c:f7:b3:6a:3c:56:43:5f:c4:0a:f3:
         e7:9d:30:cd:ee:26:17:a4:0e:60:65:09:a1:0a:b6:5b:ec:f3:
         fa:07:83:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:02:19 2025 by rpki-client