This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
File:                     PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json)
Hash identifier:          UJLrwptd1S6lqcW92HfCNox8QFx7FOFOVb/lAwo59xg=
Subject key identifier:   22:D4:BA:ED:15:7F:88:BE:8C:3F:3C:3E:20:0D:83:3E:59:49:7B:F1
Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
Certificate issuer:       /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Certificate serial:       08EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
Manifest number:          08E6
Signing time:             Sun 28 Dec 2025 19:47:46 +0000
Manifest this update:     Sun 28 Dec 2025 19:47:45 +0000
Manifest next update:     Sun 04 Jan 2026 19:47:45 +0000
Files and hashes:         1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: yKimjW3ppbTyyQVi7rgfBjLmRzDKTy9Acx7lX/DmhhA=)
                          2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: /a+ZA2ERE3wFJg9UM9vnT7hTqkW6cEzxlPnScilW2Xc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 19:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287 (0x8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
        Validity
            Not Before: Dec 28 19:47:45 2025 GMT
            Not After : Jan  4 19:47:45 2026 GMT
        Subject: CN=69518962-0f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:4f:fd:44:f3:99:4a:82:6c:79:bc:dc:ea:
                    90:76:f7:c4:f0:c1:31:88:16:9b:96:bf:d4:6a:d5:
                    47:34:fa:50:43:fc:80:a8:aa:03:89:68:d8:9d:92:
                    a1:47:a8:86:38:a4:de:62:24:f0:57:0f:c2:7e:a9:
                    e2:75:da:4a:ef:c1:7b:18:ec:f8:2c:c0:45:b6:d3:
                    84:bd:dd:5b:ec:1b:99:4e:cc:e3:c3:71:0b:9c:52:
                    3a:5c:2c:61:2a:8b:a8:35:cd:55:b0:f9:a8:ed:40:
                    28:c5:d8:bf:c7:0a:aa:22:cb:3b:3c:87:44:b0:b9:
                    ae:34:93:6c:f3:86:47:3e:82:e8:9d:7e:5d:cb:c8:
                    d1:35:41:ce:e5:47:a2:ac:63:e7:0a:ab:5d:c4:77:
                    bd:7f:30:5f:3a:9d:e1:60:17:7a:28:e1:43:52:29:
                    20:bc:a8:73:16:d6:56:0b:7d:58:7c:8f:45:e6:f7:
                    84:6d:ea:75:46:21:7a:c4:1c:46:e4:b5:0b:fa:e7:
                    6e:18:35:ef:37:2d:d4:01:ef:d4:11:97:e1:d7:e3:
                    62:34:d2:07:7c:e6:84:d0:dc:2d:db:54:a6:a5:96:
                    7c:3e:05:fe:4f:c0:7a:a8:b5:3e:3c:48:41:12:89:
                    a0:fc:53:a2:b4:d3:1e:72:89:2b:39:b6:7c:e8:91:
                    9c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D4:BA:ED:15:7F:88:BE:8C:3F:3C:3E:20:0D:83:3E:59:49:7B:F1
            X509v3 Authority Key Identifier:
                keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:85:29:a6:4f:20:fb:ab:93:1f:a9:bb:73:a5:1c:7b:3f:40:
         bb:c5:de:45:2f:14:94:3b:09:97:51:c3:21:2d:2d:12:b7:d6:
         fd:80:6f:cd:70:3c:78:c7:9e:79:50:06:38:43:f2:6a:99:18:
         c8:3c:f2:07:d5:b6:83:48:93:ce:b7:27:c9:30:f7:5c:87:a8:
         87:92:63:0f:11:fb:28:98:6f:1c:58:3d:2b:71:a3:fd:fb:06:
         04:89:c4:a7:44:6f:69:6f:5e:7d:30:4a:41:bc:e4:cc:b2:c7:
         d7:4e:e8:15:98:5f:48:8e:05:7c:ce:f3:f0:81:8a:33:57:52:
         36:1d:5d:48:19:17:4b:6f:ce:02:0e:43:d4:77:f7:1b:aa:90:
         c7:85:79:c0:a0:3d:83:5d:33:e3:8f:67:a7:38:98:de:4e:58:
         4d:1a:4d:18:77:ee:36:af:8c:45:0a:e8:b5:ca:e0:78:1c:2e:
         a5:ef:0a:ca:77:6a:df:69:46:4e:5a:05:fa:bb:4a:78:c1:a8:
         17:56:a6:33:c0:ae:97:25:9f:f6:2c:a4:f0:97:d0:a0:3e:05:
         c5:59:ab:ce:48:6f:1a:23:f4:22:b5:b3:a0:17:8c:e3:26:53:
         4b:6a:ec:4b:2f:13:36:95:57:69:cf:03:cb:10:03:0d:67:3d:
         e3:aa:ca:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:04:34 2025 by rpki-client