This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
File:                     P3JyYLCUlEIN1npzBNggXUL_P_E.mft (raw, json)
Hash identifier:          yyVWsHDpuUReXLrvrv08XSbbnTIbTw8AWuMiAS4B3pg=
Subject key identifier:   0C:6D:A1:38:F6:2B:F3:B8:05:D8:D9:18:3D:6B:88:8D:7B:4D:5E:2A
Authority key identifier: 3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1
Certificate issuer:       /CN=A91CA58E/serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
Manifest number:          36
Signing time:             Tue 23 Dec 2025 06:21:05 +0000
Manifest this update:     Tue 23 Dec 2025 06:21:05 +0000
Manifest next update:     Tue 30 Dec 2025 06:21:05 +0000
Files and hashes:         1: P3JyYLCUlEIN1npzBNggXUL_P_E.crl (hash: akJcEw8EcwR1WwUFhXzfkEj2x8xPs2Ih/LJ/qzJURPQ=)
                          2: 3DC1FF148C6911F08611A235C4F9AE02.roa (hash: fLngag0jvcUXsL/3ScrJd5vhIuo9JacsTzQUqtZ8EUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl
                          rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA58E, serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1
        Validity
            Not Before: Dec 23 06:21:05 2025 GMT
            Not After : Dec 30 06:21:05 2025 GMT
        Subject: CN=694a34d1-8cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:81:84:0f:3c:03:83:9a:08:d6:58:cb:72:
                    a7:70:bb:3d:a8:43:d0:90:2a:41:3a:22:ec:4d:4f:
                    ef:11:04:ec:24:a1:eb:44:41:8e:39:91:cd:d5:3c:
                    ec:ec:cd:72:fc:d2:a7:e0:b5:b2:1a:78:cd:3c:a8:
                    a1:33:ed:2b:8d:1d:8f:56:12:d7:79:15:1c:5d:76:
                    ca:5d:09:81:a0:31:47:fc:43:a9:38:9c:34:50:c1:
                    3f:5e:3d:c9:24:76:09:2c:2b:81:b5:6a:75:d4:0e:
                    a0:54:14:9e:63:b3:26:a1:c6:75:18:59:42:66:30:
                    50:86:44:71:3a:f6:4c:f5:e4:31:18:bb:0b:c1:3d:
                    f3:96:9a:aa:a6:12:18:45:b3:60:c8:81:80:fc:2f:
                    13:2e:22:a4:5e:39:3a:62:23:1b:4e:a0:bb:6e:19:
                    ef:b7:35:73:61:c8:0f:35:46:3a:d9:ae:2f:c0:73:
                    f8:91:50:a3:f0:da:64:8f:9e:30:c0:d3:ec:ce:f6:
                    f1:00:25:a1:ab:02:19:d7:9d:d5:95:53:4e:87:e8:
                    9d:18:53:05:15:3c:db:04:c8:82:1d:0d:2d:74:11:
                    88:8d:f0:20:0e:80:88:f7:5c:11:2a:29:40:e4:ce:
                    8f:af:83:0a:d9:c7:d2:a1:79:b0:dd:06:e9:c0:d5:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6D:A1:38:F6:2B:F3:B8:05:D8:D9:18:3D:6B:88:8D:7B:4D:5E:2A
            X509v3 Authority Key Identifier:
                keyid:3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:83:73:1d:32:1b:3a:75:89:90:db:64:66:fc:b4:d2:e0:d2:
         15:ea:10:d4:82:21:d8:f7:ea:61:66:41:9e:96:55:d3:13:3f:
         9b:ac:f5:eb:2f:72:94:c1:b2:86:ce:1e:07:84:6f:9f:6f:c6:
         01:51:73:79:7d:de:7e:9b:1c:8a:13:ef:a5:32:64:ae:19:2e:
         9b:e5:ee:5a:fa:3e:74:dd:7d:fe:1a:ef:5b:7f:17:a0:41:3b:
         f4:67:63:9c:c3:6e:41:06:8a:a5:bf:a2:d1:a5:35:94:cd:b9:
         6b:0f:e7:d8:cb:38:33:cf:50:5b:2d:45:a8:fd:0f:1a:38:ce:
         39:75:d1:bf:b3:7c:d4:4b:57:72:97:81:54:0e:c2:88:b7:30:
         ca:6d:5a:12:39:be:1b:a6:c4:d5:c6:24:76:b5:a5:6b:79:2d:
         ce:d6:38:bf:7c:cd:fa:46:ca:58:2e:94:47:ee:60:d7:0f:60:
         31:fe:a8:eb:30:91:64:19:bb:39:aa:ad:e5:fa:82:2f:07:1b:
         7c:c4:ed:01:8b:ce:08:84:01:b1:a3:29:ec:c4:66:94:e9:0f:
         4f:d0:04:2b:80:1f:80:34:8a:9f:35:19:d2:01:5f:20:19:55:
         5e:16:a5:c7:1b:bc:3a:54:74:b0:6c:a4:0e:70:a2:3f:ec:86:
         a4:c5:55:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:49 2025 by rpki-client