This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File:                     peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier:          mVrIZKounODgPLNBnMoO8KPpRRY1q7m5RMFCDFMLUXw=
Subject key identifier:   DD:0B:CE:56:33:9D:70:59:F6:05:99:1B:BB:10:A2:E7:A5:D7:D1:E4
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer:       /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial:       0244
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number:          023F
Signing time:             Wed 03 Dec 2025 00:29:39 +0000
Manifest this update:     Wed 03 Dec 2025 00:29:38 +0000
Manifest next update:     Wed 10 Dec 2025 00:29:38 +0000
Files and hashes:         1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: sIliO8hg7mFkrfUvYcBuBwCALhocBjl9YSkpjkL+K3Y=)
                          2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: vYjDKJoL/LVvPBznc+DyGkQ1jp9r0XRmWXYGOVlx3uA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 00:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
        Validity
            Not Before: Dec  3 00:29:38 2025 GMT
            Not After : Dec 10 00:29:38 2025 GMT
        Subject: CN=692f8472-525b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:07:44:6c:30:36:57:0b:30:5d:56:aa:46:
                    c2:1b:95:85:5d:a2:28:ab:c5:e6:91:b6:83:29:ce:
                    a1:e9:c3:0b:4e:78:e9:7c:ac:89:f0:0f:3e:8b:b4:
                    0b:f4:7d:da:9c:eb:e9:70:1e:e4:81:22:73:06:b1:
                    b9:10:86:2f:22:c9:eb:75:03:e5:1b:67:64:08:96:
                    ae:91:29:65:88:d0:2d:73:30:29:4e:f6:b1:9c:ce:
                    4f:31:3c:a5:11:ef:f5:c9:19:40:18:2d:8f:32:e9:
                    44:fe:64:01:2b:f9:47:b1:4f:ed:80:59:26:7e:08:
                    08:1d:81:68:93:17:42:fd:e3:9b:d0:6d:ae:68:94:
                    86:36:57:fb:50:29:f2:fc:26:0c:16:7a:42:dc:d0:
                    49:cf:77:27:01:87:d6:0e:b1:c3:0d:08:6f:fa:c7:
                    d0:43:e2:e6:82:33:31:d9:29:70:a2:2c:64:d0:7f:
                    be:e2:73:40:07:b7:3a:aa:07:97:0e:fb:be:8a:31:
                    1c:df:30:31:55:eb:0c:9f:b2:dc:e2:6e:95:5b:c1:
                    98:17:51:32:1e:ab:86:6b:ba:42:57:b3:1e:ce:a6:
                    5a:0e:f9:6f:64:e4:c5:02:0e:73:f3:a9:b9:ec:ff:
                    80:54:23:68:67:64:18:fb:53:3a:29:16:ba:1f:48:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0B:CE:56:33:9D:70:59:F6:05:99:1B:BB:10:A2:E7:A5:D7:D1:E4
            X509v3 Authority Key Identifier:
                keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:64:5a:b5:48:3e:22:9d:02:cb:fb:c1:13:06:1d:35:ff:c2:
         28:92:bd:04:a5:e0:8b:ca:3c:fb:c9:b1:2f:63:48:fd:9e:9f:
         10:85:e5:09:ee:80:c1:de:7b:c4:bf:85:81:ba:cc:e7:a3:f9:
         4a:3e:f5:ca:f5:4d:43:98:2e:cc:07:ed:75:b1:b9:c7:6b:bf:
         f5:0c:55:22:ed:de:d6:de:ab:43:9f:74:f9:8a:5b:9b:dc:29:
         b8:c4:b1:ae:a9:82:19:94:93:65:fe:7d:39:52:5c:86:f2:de:
         76:f5:4c:6f:e8:93:d3:7b:50:3e:69:aa:76:76:b0:a4:a6:8b:
         ff:a8:af:9f:6e:51:fa:f6:fa:3c:65:16:3b:9c:3b:a0:0b:aa:
         d1:d1:22:82:b3:b1:b9:3d:9a:5e:da:f9:04:f1:8a:c5:04:f7:
         00:aa:25:b2:51:f4:28:65:57:c2:be:bb:9c:a0:36:dc:56:97:
         6e:2c:dc:63:e2:bb:66:ff:18:03:38:1e:be:d5:f7:27:81:8c:
         0b:64:e8:46:0c:82:d6:97:ea:79:a6:63:07:f7:78:48:1a:b1:
         2a:4c:21:77:5e:07:c3:6c:8a:12:d3:c4:5c:8b:66:26:38:5e:
         47:37:ee:3d:a9:da:4d:8d:e6:8e:08:f1:23:32:51:5a:75:f5:
         eb:48:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:42:45 2025 by rpki-client