This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
File:                     PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json)
Hash identifier:          8DDr0F7T7pRRzwBSaxwSOQj1QVJjDHoMMMyIMfKDg98=
Subject key identifier:   CC:07:04:C5:88:D6:64:07:B3:7E:08:78:83:BA:24:FE:47:55:D4:6D
Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
Certificate issuer:       /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
Manifest number:          F2
Signing time:             Sat 17 Jan 2026 04:25:32 +0000
Manifest this update:     Sat 17 Jan 2026 04:25:31 +0000
Manifest next update:     Sat 24 Jan 2026 04:25:31 +0000
Files and hashes:         1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: iqdqcwUZkV0BQwA+S3KYIWB19nbn3v+xPHs6ekJHalc=)
                          2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: jhgv9aU9R5cyiS+8jQVzOexFGNK8rhaSdkQTaqCgMHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl
                          rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
        Validity
            Not Before: Jan 17 04:25:31 2026 GMT
            Not After : Jan 24 04:25:31 2026 GMT
        Subject: CN=696b0f3b-e577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:27:b2:8f:55:53:12:6a:0b:52:aa:48:a3:
                    45:d5:38:9e:f3:1e:6c:62:24:48:92:c5:9e:8c:57:
                    83:3a:1b:6b:c1:2c:07:18:98:be:04:d4:13:52:78:
                    6c:c6:93:80:c6:f4:11:64:11:64:fd:8e:de:81:2e:
                    27:41:eb:03:f7:a9:09:2a:68:d8:36:50:bc:b4:93:
                    90:2a:81:06:f6:94:fb:11:a7:82:42:c3:fe:7f:2f:
                    1b:22:ee:4c:54:ae:ba:88:1d:f8:ab:8c:eb:17:13:
                    88:12:da:76:89:23:fa:57:56:25:6a:d1:20:bb:5c:
                    7c:33:ae:20:f8:bb:35:18:98:58:ec:57:96:4b:e9:
                    60:9a:1b:6b:10:6a:db:f0:e9:a9:83:e7:96:8c:b1:
                    98:0a:b1:58:12:d4:69:03:b7:71:a0:c5:bf:e7:5f:
                    c2:48:f9:8a:e8:3c:e3:43:4b:49:1d:f4:1b:d5:71:
                    06:9d:92:86:ba:da:74:0d:03:76:73:fc:cd:de:2f:
                    6f:d2:b4:2d:14:2c:5d:31:c0:98:bb:1c:cf:b1:79:
                    af:78:c0:b6:c6:34:9e:28:c4:83:6a:7a:b7:d1:83:
                    14:19:74:96:cf:d8:2e:e0:88:b7:11:52:16:85:67:
                    1e:d5:81:00:05:36:52:fa:90:19:d7:d0:b6:ba:f9:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:07:04:C5:88:D6:64:07:B3:7E:08:78:83:BA:24:FE:47:55:D4:6D
            X509v3 Authority Key Identifier:
                keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f7:0c:79:36:2d:a9:9f:30:b6:2b:a0:9c:f3:ef:da:6f:67:
         a4:d4:80:e6:a8:fb:0c:3f:59:a1:0e:a7:9f:81:69:f1:b4:8a:
         58:7c:16:d2:ad:cf:a4:ba:e3:f2:cb:e5:b7:96:17:b4:f2:d0:
         9c:1c:76:32:92:f9:66:e5:19:9d:be:b8:e6:1e:13:73:b0:89:
         3c:47:ba:3c:20:8c:53:bb:6b:2d:5a:58:fb:76:a9:6d:2c:ef:
         4d:c9:47:59:40:2f:fd:05:cd:ae:f7:25:13:12:93:a0:e7:cc:
         c8:0a:c8:ff:98:fc:ef:22:17:93:74:bc:d7:01:ef:80:4a:f5:
         6d:c1:3a:2b:b7:03:cf:67:6c:8f:3e:a3:04:07:6c:f7:cf:72:
         67:6f:bf:aa:eb:b2:5a:ee:36:cf:b4:a7:00:24:63:ab:ea:15:
         b5:6a:fe:b4:01:53:72:ca:41:d3:1a:e5:27:42:55:70:46:74:
         19:8a:65:84:db:d5:a2:f3:44:80:d5:9a:64:2d:70:77:1d:68:
         8d:46:1e:04:1c:51:90:5a:ce:85:f6:22:06:13:69:f8:e4:d9:
         cb:e5:13:3c:67:b1:b0:d4:96:81:79:e3:e2:6b:12:57:b1:b3:
         7d:c5:94:30:80:4f:58:cc:09:98:8b:94:15:96:d9:26:a3:7b:
         14:74:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:00:45 2026 by rpki-client