This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File:                     PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier:          TycnOW7QxyWdJLuOXFWhyOtJ5bUTWo90482WXLLmv94=
Subject key identifier:   A0:B1:BB:9C:E6:B8:1E:88:1A:6D:A2:7F:F2:41:B3:A9:4F:EF:62:B4
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer:       /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial:       049D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number:          0497
Signing time:             Tue 02 Dec 2025 22:51:56 +0000
Manifest this update:     Tue 02 Dec 2025 22:51:55 +0000
Manifest next update:     Tue 09 Dec 2025 22:51:55 +0000
Files and hashes:         1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: B4cH8RlKJUKRu+Oc21k6G1pwctSKraZdFA5nQfY0OnY=)
                          2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: mDuBvAb87vc0xqlLuEIwzuSg0BaaCa9nDXGB49E/55o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
                          rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 22:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1181 (0x49d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
        Validity
            Not Before: Dec  2 22:51:55 2025 GMT
            Not After : Dec  9 22:51:55 2025 GMT
        Subject: CN=692f6d8c-15a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:6d:1c:33:f0:0a:2c:e8:40:26:bc:d6:5e:
                    90:cc:26:da:bc:26:0d:69:d8:d5:6b:f7:04:7a:0d:
                    88:2f:2e:d0:1c:23:d8:94:3c:64:8c:ee:d9:ff:ed:
                    90:50:ba:30:2a:bc:49:50:00:39:33:74:2e:fe:0a:
                    28:b7:b3:60:25:9a:a2:8e:eb:ee:f6:18:a9:a7:7b:
                    52:7a:13:57:12:29:d3:1a:e7:41:3b:06:e2:9d:f8:
                    7e:44:e6:e8:5f:70:84:5b:28:ed:44:60:20:c7:d5:
                    5b:4f:1a:a3:72:c1:79:29:da:a0:4d:da:2c:fb:05:
                    b8:f3:ae:1f:7e:73:3f:d6:ff:41:34:d4:d7:16:71:
                    2a:f6:6c:a4:a2:1b:61:af:7c:c7:9d:6b:f6:22:11:
                    49:50:77:2e:e8:02:0b:4c:bc:b8:bf:09:8f:9a:0b:
                    64:c3:7a:3d:f5:ae:db:e5:98:db:88:c8:5c:97:31:
                    be:b9:06:79:e8:07:fd:cf:1d:f2:7a:d8:eb:07:98:
                    43:af:68:a6:b4:53:81:85:61:48:de:0f:3d:f8:fd:
                    9b:e6:07:62:06:13:92:93:7e:23:47:b2:96:c3:85:
                    d2:d1:6b:8a:38:6c:6b:3f:f6:32:3c:f9:68:c3:44:
                    c6:64:94:03:d1:4c:47:0a:09:f7:e0:5a:43:ab:70:
                    d8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B1:BB:9C:E6:B8:1E:88:1A:6D:A2:7F:F2:41:B3:A9:4F:EF:62:B4
            X509v3 Authority Key Identifier:
                keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:06:c3:c4:15:d6:6b:c7:45:20:15:0d:a0:53:e9:68:9c:9f:
         37:c3:2c:30:5b:81:4d:e4:f2:28:08:fb:23:bd:cc:89:75:de:
         ac:55:cf:6f:a0:12:57:c5:87:25:fb:60:04:76:ad:34:e3:cb:
         b5:8b:25:fc:4c:00:7c:13:66:a7:de:3c:e9:1c:70:8b:a6:1e:
         1b:eb:8e:14:1c:09:7f:03:50:f4:fb:95:b1:31:9d:46:d2:89:
         d9:84:ab:15:42:8d:7a:4d:8f:87:00:33:9b:15:b8:03:c4:30:
         df:82:16:6c:c5:28:df:e8:56:0f:7b:bf:19:ca:be:66:2c:b1:
         d9:ec:eb:99:82:cf:d5:aa:b9:05:6c:83:2a:60:5b:bb:cf:08:
         a5:06:0d:0a:16:76:7a:01:16:ad:de:09:bb:4f:36:01:bd:04:
         c4:e4:d2:37:3a:17:74:c3:4f:f3:50:4b:2b:45:6f:3a:cc:3e:
         51:8f:51:7a:f9:3f:f9:ae:1c:4b:32:31:59:4e:cf:9e:e1:52:
         a4:55:f0:f4:bf:0e:77:f2:31:7c:5b:97:62:a8:d5:73:95:d3:
         03:e9:ee:68:69:e9:45:f7:3e:5c:4b:b8:c4:20:a6:7f:b9:ee:
         2b:de:6a:b3:51:16:ed:0a:28:67:4c:98:7b:43:bc:9a:de:01:
         3b:ec:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:36 2025 by rpki-client