This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
File:                     pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json)
Hash identifier:          hhtEEgcO6OakZYehaSOfURlRoyM0k0KJnM5t8o7WytM=
Subject key identifier:   7A:48:C9:B7:24:74:B1:E0:EE:68:65:77:44:E3:CA:65:38:E9:21:B7
Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
Certificate issuer:       /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C
Certificate serial:       11BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
Manifest number:          11A6
Signing time:             Thu 18 Dec 2025 17:02:54 +0000
Manifest this update:     Thu 18 Dec 2025 17:02:53 +0000
Manifest next update:     Thu 25 Dec 2025 17:02:53 +0000
Files and hashes:         1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: UsIUdep2h6CA5aCHGXbEZgBpd2Mg3r3u3MeBkItu+eg=)
                          2: DB4085480A3A11E999FA296FC4F9AE02.roa (hash: 16660dDxZH468UZss0VebZFnv/Ql37+WVYt3vkRrUmQ=)
                          3: 041E1E420A3811E9BE336267C4F9AE02.roa (hash: Spb+pH4GvP2Ukki1wFpymghuHWZTFJjsX3H/le8aCzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl
                          rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4538 (0x11ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C
        Validity
            Not Before: Dec 18 17:02:53 2025 GMT
            Not After : Dec 25 17:02:53 2025 GMT
        Subject: CN=694433be-6011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:d0:ab:5d:68:05:24:e5:e8:63:1d:38:3b:
                    a1:db:33:b7:2d:9c:19:35:fe:ab:18:fd:9c:b8:db:
                    96:eb:b3:d7:3c:cc:4e:72:b1:e7:db:2c:17:30:1e:
                    ef:b0:12:e5:7b:ed:07:8b:30:5c:00:95:e8:98:f0:
                    9c:15:1b:35:a9:4e:4e:97:37:6f:94:70:3c:e9:7a:
                    45:5e:0d:23:f5:61:cb:96:f2:8b:f1:8b:78:2e:b2:
                    60:26:59:90:1e:06:6e:30:25:58:5f:e6:95:ec:b0:
                    46:47:fe:9b:01:09:fd:74:e5:af:ab:cd:40:31:2d:
                    f9:c8:d3:1d:15:fb:7c:66:af:b6:a3:4d:dd:45:1f:
                    59:44:9b:94:6f:34:fc:de:15:a4:22:ae:ba:2c:64:
                    53:af:f3:5b:77:75:13:0d:12:43:cf:04:94:66:40:
                    18:d6:d0:f6:36:1f:5d:16:fd:de:91:b5:af:86:e6:
                    f2:e9:77:58:44:5f:28:96:dc:b2:37:0d:0e:d6:f1:
                    60:db:5e:33:2b:d6:96:29:a6:a1:48:bc:02:d2:c2:
                    7a:3b:f6:48:07:65:29:2b:72:88:96:94:8c:dc:2e:
                    12:90:71:6a:cd:15:ab:b6:73:35:08:0e:ea:cd:61:
                    7a:88:87:ab:79:ae:b0:68:04:65:4a:d2:08:c4:05:
                    a2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:48:C9:B7:24:74:B1:E0:EE:68:65:77:44:E3:CA:65:38:E9:21:B7
            X509v3 Authority Key Identifier:
                keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:03:84:74:b8:45:40:98:a9:c0:98:df:65:95:62:0a:f7:d8:
         82:f3:00:85:9e:31:ad:27:88:da:fc:9a:1a:75:44:c3:7b:5b:
         6d:b9:1e:b8:c7:96:cb:0d:ce:b8:4f:67:f5:a2:7c:76:1a:6e:
         bd:62:13:cf:48:4b:da:7e:fa:0b:f2:02:96:b5:9c:e6:d8:5e:
         34:49:08:df:3b:b6:24:03:f0:c4:4b:9c:50:d6:9b:9b:a5:72:
         e3:8e:78:d2:7d:ed:bc:c2:1c:ef:95:19:77:93:38:fd:77:72:
         5f:d4:91:f5:f6:bf:92:f1:99:cd:15:26:08:a2:a9:e7:00:de:
         be:38:0c:cc:35:ca:93:5a:29:e1:8e:26:f7:b8:b4:4f:1f:56:
         59:fb:8a:8a:66:a3:b3:34:36:c8:6b:37:15:52:8f:a3:3a:6a:
         0e:45:f3:a4:63:a4:92:08:84:1b:c8:c1:b3:d0:ce:29:d0:23:
         1c:9f:72:34:31:59:25:85:f6:e4:1d:9d:64:af:ed:ce:6c:eb:
         c5:85:ab:51:44:84:95:16:b1:be:f3:82:64:9b:0f:9a:01:8a:
         df:ee:df:f8:f9:e0:75:72:6c:15:7b:28:77:00:62:fd:4e:73:
         74:08:c0:cf:e9:c3:e2:3b:32:2d:a6:62:94:5c:df:3d:1e:bf:
         78:d4:23:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:32:02 2025 by rpki-client