This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
File:                     plApCrx0GfQg5AG7s6RNCBPR8Wk.mft (raw, json)
Hash identifier:          BmxgLmKf5f54vYIJNRmUJqZfQNFovAVWe/AcY9DG0/c=
Subject key identifier:   32:AD:6D:22:28:A7:A4:37:03:05:EC:1D:02:63:72:9F:37:17:11:48
Authority key identifier: A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69
Certificate issuer:       /CN=A9180EB5/serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169
Certificate serial:       04BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
Manifest number:          04B6
Signing time:             Sun 28 Dec 2025 23:01:44 +0000
Manifest this update:     Sun 28 Dec 2025 23:01:43 +0000
Manifest next update:     Sun 04 Jan 2026 23:01:43 +0000
Files and hashes:         1: plApCrx0GfQg5AG7s6RNCBPR8Wk.crl (hash: Eco8WvnagbPXnGFVaIkdWyMtIJe1DnOaMnmd54edZvY=)
                          2: C361870855FD11EC938D1744C4F9AE02.roa (hash: SB4h4zGEtxyFJYfc5GO7YkKy69kkEfQKoUL9+jluR6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl
                          rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 23:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180EB5, serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169
        Validity
            Not Before: Dec 28 23:01:43 2025 GMT
            Not After : Jan  4 23:01:43 2026 GMT
        Subject: CN=6951b6d8-7e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9b:7c:68:1f:79:1d:b3:60:ca:53:30:95:32:
                    3a:5d:12:0c:9d:fc:d7:43:0d:40:c9:f2:00:8e:87:
                    b2:01:ab:41:59:9d:be:f4:7f:c2:a3:ba:ca:9d:b4:
                    6f:bd:7a:05:af:f7:c3:d9:4d:6b:58:5e:fb:51:ee:
                    14:51:5f:c4:98:da:95:01:5f:6a:78:c8:33:e1:10:
                    d2:b9:97:bc:62:b8:b3:c0:f0:c6:fe:00:2a:ce:86:
                    c8:00:df:62:63:40:eb:d2:ac:7d:34:43:64:4f:b1:
                    aa:3c:27:0c:49:f0:11:af:39:fe:e0:c9:93:99:a3:
                    70:ad:a7:14:da:96:c5:45:ed:c5:95:21:0d:f4:44:
                    c9:a7:2e:8e:0a:99:b0:b7:e6:29:7f:b8:03:94:cf:
                    e2:39:b7:80:cb:06:0d:e3:08:28:68:62:36:f2:99:
                    15:a9:e6:2e:cd:9a:7c:c4:e2:17:54:69:64:b5:f5:
                    5c:43:42:33:fa:c9:c7:02:a0:f8:1a:b8:f4:c2:f0:
                    c3:fe:3b:c9:99:52:a7:32:a4:9c:fe:9d:ff:c8:cb:
                    df:47:63:41:3c:f4:e6:08:2a:ef:ff:6b:e4:b9:ca:
                    d1:b5:b2:5a:69:af:1e:43:7d:5c:71:7c:65:83:73:
                    c7:13:d6:d7:35:97:08:3a:73:29:16:5e:96:92:c8:
                    f1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AD:6D:22:28:A7:A4:37:03:05:EC:1D:02:63:72:9F:37:17:11:48
            X509v3 Authority Key Identifier:
                keyid:A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2c:68:76:24:66:5c:6a:21:8a:3b:bb:ee:1d:3e:7f:a4:17:
         2f:32:a5:4e:0d:e3:90:68:a3:62:b6:d1:ef:8f:a5:28:70:dd:
         eb:3e:61:01:ce:0f:20:ac:68:1c:e9:96:da:db:fc:ac:e3:db:
         e0:2b:ca:a3:bc:c0:d7:15:a1:ff:10:90:b8:2f:d3:9d:ec:fd:
         3e:44:cb:ae:47:89:3c:35:f6:31:a8:d0:e6:17:d7:f3:c1:d4:
         8d:3c:53:c9:14:38:51:d3:c8:8f:a1:05:15:1d:23:87:9b:2f:
         cc:46:25:22:67:8c:9d:3e:05:8f:ad:78:fb:26:4e:40:7f:e1:
         c1:35:af:d5:db:84:24:1e:31:12:69:c3:f9:94:a8:33:3a:b1:
         73:ff:67:24:8f:8e:f0:f2:49:ae:3c:34:3d:2c:1c:c9:b5:b6:
         01:53:6b:2a:22:78:ac:05:84:61:90:91:31:38:03:89:40:25:
         f6:09:4d:23:22:74:a1:a4:66:08:e3:ed:cd:ca:d1:8d:05:95:
         4c:5b:79:fb:b8:dc:27:bf:02:a7:6b:a9:1b:d8:d2:73:31:d1:
         a6:78:fc:54:a1:21:f9:58:c3:2d:06:a1:5a:25:8e:2b:bb:7c:
         5c:e4:13:03:57:0b:6b:2c:d2:3d:01:58:d6:c5:a1:ce:cc:26:
         0f:c3:42:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:12:35 2025 by rpki-client