This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
File:                     pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft (raw, json)
Hash identifier:          twvYlqva1+xzRAwvfRpU0fYaBDEr2t1XoBP8tIQ2O8Q=
Subject key identifier:   A8:1E:ED:23:05:EC:74:B1:FD:AA:4B:AF:CD:A9:76:2A:74:F2:E9:D1
Authority key identifier: A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
Certificate issuer:       /CN=A919AD11/serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
Manifest number:          010A
Signing time:             Wed 03 Dec 2025 03:24:21 +0000
Manifest this update:     Wed 03 Dec 2025 03:24:20 +0000
Manifest next update:     Wed 10 Dec 2025 03:24:20 +0000
Files and hashes:         1: pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl (hash: BDR4zK6ecjjVm/0CsqJKr2bMbrCEufbChuZRA2y+mXw=)
                          2: FB29FEA06C1F11EFA8C5694EC4F9AE02.roa (hash: lcZB3z1c/RDD2H75d40NX0zmlgKhDSF1Om3/hMjJ4tA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl
                          rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 03:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD11, serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
        Validity
            Not Before: Dec  3 03:24:20 2025 GMT
            Not After : Dec 10 03:24:20 2025 GMT
        Subject: CN=692fad64-9017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:44:b3:d7:85:96:98:1e:a6:9a:53:d5:dd:00:
                    17:00:df:61:d5:9c:27:46:27:89:ea:24:5e:40:27:
                    f5:4d:98:e4:c6:85:29:49:5a:a6:54:b3:c5:ca:3e:
                    b1:63:c9:cb:a7:55:fd:8c:8b:6e:da:ad:99:1d:5d:
                    62:71:7d:1b:87:ef:df:d5:40:c0:0d:54:64:89:6b:
                    bf:57:a7:82:fb:f0:31:a7:c2:8e:2d:b0:08:ba:60:
                    77:9f:d6:9f:7f:c9:33:02:90:8a:73:e4:af:73:73:
                    8c:58:12:50:20:2f:e1:ed:0d:6f:93:41:44:27:33:
                    a3:ec:0a:c6:ff:b9:b4:8a:30:ae:61:cf:ec:6a:11:
                    a4:b5:4c:ab:98:4d:95:1c:5f:db:05:60:93:ab:78:
                    7b:d9:03:af:2d:61:4e:ec:fc:0b:9f:b3:d3:bd:70:
                    4f:87:a9:a4:e2:19:b6:3d:eb:e5:d7:34:f5:e8:9a:
                    ab:0f:77:e7:b7:8c:eb:6e:ea:f3:b4:16:4d:7f:9c:
                    fa:f2:32:dc:d2:84:27:ba:a4:76:92:71:ee:79:00:
                    68:00:9b:13:98:48:c1:64:5f:94:60:bf:33:83:07:
                    1c:e6:01:a1:3b:2c:2e:b8:d1:5c:cc:f8:f0:7d:b2:
                    d3:02:03:fb:f0:dc:26:fa:8a:fa:76:c6:4a:a6:d8:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1E:ED:23:05:EC:74:B1:FD:AA:4B:AF:CD:A9:76:2A:74:F2:E9:D1
            X509v3 Authority Key Identifier:
                keyid:A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:02:ea:62:83:19:c9:1f:ba:b4:3b:e6:e5:5e:dc:9a:a1:c1:
         e8:33:b7:e6:84:05:60:9a:ae:9b:c1:37:c2:77:36:01:93:be:
         0b:d5:f3:d0:b1:45:6f:17:f6:5d:5d:66:e7:9c:91:4f:6c:cf:
         28:99:ca:96:bb:da:5b:11:53:2f:7a:49:1b:7c:06:8a:75:a3:
         03:05:ba:02:7c:a4:80:71:3e:44:fe:08:41:8b:a6:9c:94:aa:
         dc:0d:d7:6f:43:42:1a:8c:09:c3:9d:c5:e4:d4:72:22:a3:f5:
         16:61:f3:ec:a3:29:be:29:82:21:35:48:5d:41:97:9f:21:01:
         20:3b:fc:62:f9:e3:9c:0d:3a:1f:31:bf:b2:9d:31:5d:d2:e0:
         17:f5:97:19:65:bf:f1:96:2b:96:16:34:39:98:b5:68:2e:e6:
         c0:2f:31:28:c9:66:ad:8b:a4:4b:af:b1:be:20:9c:7d:b0:c1:
         17:8b:3c:c2:73:d7:e7:3b:14:21:8f:5e:8c:77:d5:1a:8d:49:
         b1:d4:c8:f8:a0:0b:c8:c8:f2:bc:15:52:b0:2a:9c:4f:82:4c:
         c6:af:8d:8f:5c:6d:15:3e:f0:d5:d5:36:b6:81:e9:a9:92:01:
         52:74:3a:be:47:51:9f:0e:58:89:f0:a5:f0:b0:24:51:1b:11:
         9c:c9:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:46 2025 by rpki-client