This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
File:                     PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json)
Hash identifier:          BtbF53SBXHs0pCIw1PBOgSWlCmlVmD1PCVJcJQZrWeY=
Subject key identifier:   9E:EB:3A:83:D6:4A:F7:63:21:47:04:08:E2:7C:54:56:4F:43:82:D6
Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
Certificate issuer:       /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
Manifest number:          01A4
Signing time:             Tue 09 Dec 2025 01:54:01 +0000
Manifest this update:     Tue 09 Dec 2025 01:54:00 +0000
Manifest next update:     Tue 16 Dec 2025 01:54:00 +0000
Files and hashes:         1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: kUYLXrd/VNn7fYXBIXopO5zSCbdEH6613st2b4PugOI=)
                          2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: c6Y5sHXtnUIlloWQfNj0Oltc+Rkovm/FExQvQHllfw0=)
                          3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: PEdc3Ajz5VckvHX4I+KQ2ScP909N/JzMHxUtf14BV6s=)
                          4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: h8bAcU4fUoKskIhMDXeBIXC9uHuKpiNxD6RQQxWm6fQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
                          rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 01:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
        Validity
            Not Before: Dec  9 01:54:00 2025 GMT
            Not After : Dec 16 01:54:00 2025 GMT
        Subject: CN=69378138-fbd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ed:8e:1d:67:cd:3c:e6:34:d5:39:7b:42:46:
                    c9:66:6d:06:e0:e2:74:39:3e:aa:d1:ea:f5:3e:bd:
                    96:db:de:8a:d4:d4:13:a2:cc:93:37:33:ca:6b:f2:
                    fd:4a:1c:40:86:08:cb:2c:ce:f0:1a:4c:12:92:4a:
                    5d:f0:16:ed:ee:10:03:f3:9b:56:17:7e:e9:82:7c:
                    7d:88:aa:5e:24:93:a7:2e:1b:f8:52:ae:8c:36:46:
                    b3:78:f6:15:c4:e9:d6:2c:8a:77:e6:70:03:ac:36:
                    eb:d3:43:18:be:a6:1d:48:4b:85:31:85:b6:40:5a:
                    6f:f7:ab:4f:74:0e:fc:8a:80:ce:f7:f3:96:44:99:
                    4c:d3:fe:8c:47:95:ed:38:68:e1:4f:b6:25:de:71:
                    d2:60:52:3c:b0:9c:73:fb:a5:26:26:d0:ce:7e:9d:
                    44:aa:b4:f2:15:fb:28:40:52:e3:8e:f9:25:a9:c8:
                    6b:79:2f:27:8e:61:bb:99:54:59:76:52:c9:c3:f2:
                    ed:36:b6:5e:fe:79:a2:42:8b:d5:7c:64:dc:57:96:
                    36:f7:e3:bc:a0:ba:75:11:ef:38:ef:ee:c6:7b:ce:
                    f9:f5:60:af:b1:7f:ab:04:eb:15:24:19:71:45:7b:
                    75:5c:5c:f1:e2:96:d6:86:e3:17:58:40:0b:b7:bc:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EB:3A:83:D6:4A:F7:63:21:47:04:08:E2:7C:54:56:4F:43:82:D6
            X509v3 Authority Key Identifier:
                keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1c:18:11:62:c7:de:6e:04:34:ea:79:c7:37:9d:f5:96:a6:
         4f:68:b9:9a:49:0d:4a:8a:ec:d6:78:77:45:d7:e4:6b:b3:c6:
         d2:11:13:52:3e:53:2d:6c:fa:b1:e8:91:15:e2:15:35:3b:d7:
         d9:8c:6d:e2:ab:c2:af:41:f9:42:10:e5:25:5f:35:f6:d4:e1:
         5a:20:5f:e4:e2:7e:06:c6:0a:c1:4e:ea:68:fb:15:e6:24:9f:
         2c:f7:11:e3:df:14:16:b9:9d:a6:9f:2d:63:c1:12:a9:2d:a1:
         ac:7e:19:16:c1:62:3c:fd:84:cc:44:39:2a:05:b5:34:4e:a6:
         2d:be:cf:21:60:40:e5:38:77:39:99:51:fc:fc:60:98:99:3b:
         ef:8a:c6:21:a8:d2:18:ca:9c:bb:89:c0:b1:5d:47:df:41:cd:
         3f:58:1b:5a:bd:ca:39:2d:f2:3b:84:f6:e0:e5:8d:42:2c:2b:
         d2:58:73:50:0d:9c:6c:b6:4f:ba:99:12:0c:5b:7a:ef:8b:ca:
         39:5f:c8:c3:09:19:d6:ef:a2:78:c3:41:c8:f8:44:8c:c5:43:
         31:5b:a2:8f:3b:fd:bc:6e:b9:10:38:05:41:13:35:02:81:4b:
         4e:92:d1:82:f9:c7:53:4f:ff:72:38:2e:5a:22:3c:b1:80:5d:
         e0:97:41:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:16:59 2025 by rpki-client