This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft
File:                     puZHuaRPqqc-u4IEBQzGTMpFmOo.mft (raw, json)
Hash identifier:          sGRa/PQP1tYyegRe5JOX7+fQjWnmDaeDZveQ7Rvy1K8=
Subject key identifier:   9E:54:22:DF:16:B0:51:03:F5:6B:D3:F6:77:41:7B:4C:7E:91:93:ED
Authority key identifier: A6:E6:47:B9:A4:4F:AA:A7:3E:BB:82:04:05:0C:C6:4C:CA:45:98:EA
Certificate issuer:       /CN=A91C5319/serialNumber=A6E647B9A44FAAA73EBB8204050CC64CCA4598EA
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft
Manifest number:          DE
Signing time:             Tue 23 Dec 2025 04:30:37 +0000
Manifest this update:     Tue 23 Dec 2025 04:30:36 +0000
Manifest next update:     Tue 30 Dec 2025 04:30:36 +0000
Files and hashes:         1: puZHuaRPqqc-u4IEBQzGTMpFmOo.crl (hash: 4s5A/AguxdjV1pvvZmPCbisWz1cD1Jvv++ZjfTmaqM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.crl
                          rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5319, serialNumber=A6E647B9A44FAAA73EBB8204050CC64CCA4598EA
        Validity
            Not Before: Dec 23 04:30:36 2025 GMT
            Not After : Dec 30 04:30:36 2025 GMT
        Subject: CN=694a1aed-e394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:29:8d:e6:9f:dc:27:d5:20:87:0d:53:7a:8c:
                    cc:45:36:66:09:f4:79:ad:d9:62:bc:46:4e:82:f6:
                    4d:a5:8e:06:86:87:f2:5a:e7:5e:3d:9c:76:89:07:
                    18:99:02:c2:ce:1f:58:ad:83:b0:82:d3:8e:40:08:
                    d6:c3:da:c3:4c:76:2d:18:89:db:0c:23:ff:a9:5c:
                    a6:b8:20:59:4a:a9:82:49:07:50:89:87:f4:79:5e:
                    2e:53:46:7c:c3:79:ab:be:fd:81:af:75:ca:0d:af:
                    62:84:db:d0:c4:a8:93:e9:80:48:aa:55:7c:9c:46:
                    26:1f:3e:b4:47:8b:4e:f3:af:9b:05:c1:63:67:3b:
                    c7:1f:75:48:54:4f:e2:b4:b4:4d:d5:ef:78:61:9b:
                    c8:fb:f5:61:c1:ef:8a:ec:0b:fd:a7:fe:ff:32:ad:
                    38:d0:cc:a6:16:f9:5d:01:75:f7:a5:ad:93:8c:98:
                    99:d1:ef:7d:0f:d4:37:51:dc:3c:aa:35:0a:09:41:
                    f7:65:6a:4f:49:a4:08:e5:4d:06:89:d3:b2:0b:3a:
                    76:11:26:55:64:84:b9:ca:f0:40:da:fb:1b:13:61:
                    9c:46:65:32:b0:58:aa:df:ac:bf:12:e0:03:6d:29:
                    12:05:58:27:15:d8:d1:99:ee:72:28:81:a7:5d:e2:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:54:22:DF:16:B0:51:03:F5:6B:D3:F6:77:41:7B:4C:7E:91:93:ED
            X509v3 Authority Key Identifier:
                keyid:A6:E6:47:B9:A4:4F:AA:A7:3E:BB:82:04:05:0C:C6:4C:CA:45:98:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:80:3c:3c:c8:f1:2d:8e:b6:40:17:fa:58:84:8e:7f:76:
         03:b6:66:23:74:fe:53:2c:ba:ea:1d:fb:07:fd:31:99:de:73:
         2e:b7:7b:7d:0f:e4:b3:47:0b:2d:65:7d:fe:dc:1e:88:f1:1d:
         8a:45:a2:2c:bf:79:dc:b7:09:4e:49:21:69:e6:6c:85:5f:2d:
         a0:f0:ac:04:84:b7:da:79:c6:09:be:b2:70:6e:d8:d8:f6:4a:
         14:ac:72:8b:ff:f5:7d:8c:06:11:a9:64:1a:02:2b:bd:62:5a:
         75:29:b0:74:76:81:10:41:d3:08:f6:6f:1c:47:47:f9:35:40:
         a8:ef:8c:f3:40:34:5e:a8:eb:44:0b:23:a7:80:30:dc:be:c5:
         67:5c:36:ee:9b:d2:89:e5:3d:74:7b:bb:30:74:22:d9:cc:20:
         24:1b:83:59:8f:87:f8:a4:d4:ff:29:9b:dd:e1:84:b1:29:2d:
         e2:af:db:a0:6f:16:e6:12:74:94:dd:0d:53:46:a9:98:99:7a:
         5b:f9:eb:eb:e6:b1:2e:45:83:a7:e1:8d:ec:ef:0f:1f:6f:a7:
         f7:88:6e:ee:58:8c:c6:21:7b:b4:53:0b:0a:4e:6c:38:6b:08:
         90:c0:af:54:80:e5:52:b6:af:10:2d:ed:96:ba:4a:f6:60:4a:
         47:1d:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:00 2025 by rpki-client