This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
File:                     PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json)
Hash identifier:          yi2B8JCQ2baEz268NfBfzrMonx4GKrE72xrq81UHFSU=
Subject key identifier:   05:7F:C2:BB:8A:50:D9:F9:65:55:0C:80:A0:72:DD:25:79:AB:3A:F0
Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
Certificate issuer:       /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Certificate serial:       0226
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
Manifest number:          021F
Signing time:             Mon 29 Dec 2025 01:23:37 +0000
Manifest this update:     Mon 29 Dec 2025 01:23:36 +0000
Manifest next update:     Mon 05 Jan 2026 01:23:36 +0000
Files and hashes:         1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: 5YqKy8yoSriUrehTBXP1GnWG7DLESQUbJBhFQwbf/+U=)
                          2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: 1FbgogUKsuIfXEKaTsa4RV0e3CNtC1HQdrvDxgG3fiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
                          rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 01:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
        Validity
            Not Before: Dec 29 01:23:36 2025 GMT
            Not After : Jan  5 01:23:36 2026 GMT
        Subject: CN=6951d818-0fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:42:ee:9e:47:7c:30:24:38:ec:54:4b:84:
                    c1:23:c5:02:cd:3a:d4:40:dc:b3:01:03:ce:e5:d9:
                    00:db:ee:6d:66:59:eb:b7:14:a6:0d:85:75:85:0a:
                    dd:32:f6:e2:c5:f4:b6:2f:0d:ed:fc:44:f6:0c:da:
                    0b:e7:47:b0:a8:44:e6:6e:4b:2b:c5:a7:50:46:a9:
                    61:e7:ff:3e:2f:f0:e2:8a:91:a3:6d:d9:f4:d4:35:
                    63:69:0c:22:00:fc:8a:87:05:17:c3:59:a0:f3:57:
                    3e:6d:d6:7d:75:f5:60:20:b4:e3:d7:dd:d6:20:d9:
                    8d:60:79:57:31:de:03:2e:ba:ba:ad:c4:e7:dd:75:
                    3d:4c:62:8a:b9:51:40:85:2a:61:8e:be:21:4b:03:
                    46:55:17:6a:e5:3c:47:ee:b3:45:15:93:57:e7:4f:
                    13:11:91:7f:eb:ce:91:04:bd:df:d6:e4:4e:21:29:
                    b4:96:fb:2d:bb:f5:00:bf:f4:4f:91:52:89:32:4c:
                    38:04:50:d7:d3:63:91:3b:4c:e3:c7:75:55:9a:ed:
                    f5:cb:ff:b9:e3:0c:3b:2e:4e:50:99:08:2c:c2:8a:
                    a6:de:e4:73:fa:9e:2d:15:62:00:c2:89:aa:e4:24:
                    b5:a5:78:a5:c3:db:0e:23:06:94:18:cb:df:4c:8f:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7F:C2:BB:8A:50:D9:F9:65:55:0C:80:A0:72:DD:25:79:AB:3A:F0
            X509v3 Authority Key Identifier:
                keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:bb:6b:da:c7:de:9c:2a:e4:d1:12:1c:91:db:7d:af:1b:22:
         58:f6:82:18:55:48:7d:53:31:3c:68:42:11:08:cb:9c:1e:69:
         5e:25:f9:b0:5b:67:76:79:4e:2b:ec:29:a4:4c:c6:a1:0d:4b:
         0a:1d:e1:d9:99:a8:1a:f2:24:0e:f3:f2:05:ad:78:7d:fd:87:
         e4:98:3f:4a:bf:ed:db:52:75:fc:da:e3:39:3a:3e:59:1d:54:
         04:f0:52:7b:cd:05:2e:83:44:be:6e:0f:82:6a:25:9c:b1:49:
         33:60:f5:97:cc:16:27:9e:5e:d9:69:53:75:9e:a0:a1:60:73:
         7d:95:49:f2:f1:c3:47:24:51:34:de:30:74:1e:9f:62:2d:7c:
         3e:82:a6:ae:e3:99:c0:42:46:72:ea:d7:5a:f0:8c:8e:a3:98:
         2c:15:14:2f:72:b9:00:f5:f4:90:8f:d1:0a:64:a0:fa:d1:b7:
         4f:49:22:a6:fb:f7:74:aa:d4:30:05:03:c7:aa:fc:e4:19:92:
         71:3b:0b:d2:64:e7:1e:a9:d4:1f:0a:3b:9d:47:cc:a3:02:d9:
         a7:a1:a3:cd:8c:a8:1c:c3:c8:99:78:8e:5c:22:d9:5b:17:d4:
         8b:15:08:2e:a8:fd:ad:87:a7:3d:d9:a7:60:41:7e:40:c3:0a:
         a6:83:4c:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx
QjQ4RkI3QzUwHhcNMjUxMjI5MDEyMzM2WhcNMjYwMTA1MDEyMzM2WjAYMRYwFAYD
VQQDDA02OTUxZDgxOC0wZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZhC7p5HfDAkOOxUS4TBI8UCzTrUQNyzAQPO5dkA2+5tZlnrtxSmDYV1hQrd
MvbixfS2Lw3t/ET2DNoL50ewqETmbksrxadQRqlh5/8+L/DiipGjbdn01DVjaQwi
APyKhwUXw1mg81c+bdZ9dfVgILTj193WINmNYHlXMd4DLrq6rcTn3XU9TGKKuVFA
hSphjr4hSwNGVRdq5TxH7rNFFZNX508TEZF/686RBL3f1uROISm0lvstu/UAv/RP
kVKJMkw4BFDX02ORO0zjx3VVmu31y/+54ww7Lk5QmQgswoqm3uRz+p4tFWIAwomq
5CS1pXilw9sOIwaUGMvfTI8SMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAV/wruK
UNn5ZVUMgKBy3SV5qzrwMB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB
NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0
OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDJFMS9EQTg2QjYxNkJBNkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdq
VU5Icy03cG15cjBiU1B0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNu2vax96cKuTREhyR232vGyJY9oIYVUh9UzE8aEIRCMucHmleJfmw
W2d2eU4r7CmkTMahDUsKHeHZmaga8iQO8/IFrXh9/YfkmD9Kv+3bUnX82uM5Oj5Z
HVQE8FJ7zQUug0S+bg+CaiWcsUkzYPWXzBYnnl7ZaVN1nqChYHN9lUny8cNHJFE0
3jB0Hp9iLXw+gqau45nAQkZy6tda8IyOo5gsFRQvcrkA9fSQj9EKZKD60bdPSSKm
+/d0qtQwBQPHqvzkGZJxOwvSZOceqdQfCjudR8yjAtmnoaPNjKgcw8iZeI5cItlb
F9SLFQguqP2th6c92adgQX5Awwqmg0w5
-----END CERTIFICATE-----
Generated at Wed Dec 31 02:24:57 2025 by rpki-client