This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
File:                     pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json)
Hash identifier:          +3mWf+MD4ba8yzs6LZ1lXA6Sijbwz5tTBocz6h4dqvw=
Subject key identifier:   2E:DB:57:48:1D:E9:8D:F3:3F:59:3D:E9:47:9F:00:FF:F4:5E:E9:5B
Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
Certificate issuer:       /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Certificate serial:       0879
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
Manifest number:          2B01
Signing time:             Wed 31 Dec 2025 16:42:41 +0000
Manifest this update:     Wed 31 Dec 2025 16:42:40 +0000
Manifest next update:     Wed 07 Jan 2026 16:42:40 +0000
Files and hashes:         1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: jx1NxSQBuxCXecJ5N77vE9eCkD9j/e8ytUi/Q4eKVNs=)
                          2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: DSrMI7Nowx4RDukf/foMtUodJX/NiInBR6IMaoe7AeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
                          rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 16:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169 (0x879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5ED0, serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
        Validity
            Not Before: Dec 31 16:42:40 2025 GMT
            Not After : Jan  7 16:42:40 2026 GMT
        Subject: CN=69555281-df6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:f6:ca:a3:ef:97:6d:18:ee:4c:1b:93:07:
                    9d:37:47:38:c7:e6:f6:21:0f:08:9d:46:3d:da:1d:
                    2a:53:bc:82:7a:a6:62:fc:e5:52:65:48:f9:7c:08:
                    b6:46:6b:1f:1f:44:ae:95:21:91:81:25:a1:75:ad:
                    22:4e:df:57:cc:96:92:0f:d3:99:5f:2d:4e:56:71:
                    88:a2:07:4d:03:ad:ac:41:53:c4:36:1c:19:b5:a2:
                    15:13:7c:de:d3:a3:3e:82:e0:77:9e:b0:0d:87:af:
                    0a:a5:a7:08:d4:3a:06:59:c6:ea:44:d3:0e:0e:a7:
                    ec:6b:be:ba:6d:03:e1:c8:fe:43:b5:b5:ff:74:65:
                    e8:59:0b:9b:5c:1a:12:b9:1f:96:04:c0:f2:48:0f:
                    e0:5b:9d:c1:b9:0c:f0:82:80:28:06:9e:b0:99:ed:
                    53:d0:65:1c:cc:a9:7e:32:c1:7f:c9:dd:01:30:1e:
                    1b:92:d7:ed:37:14:23:e0:99:f4:ba:0f:df:22:6f:
                    c0:2d:2e:13:d4:d8:ac:e1:39:41:b8:59:5f:27:0a:
                    0a:48:06:37:39:8a:a9:1f:4e:55:8b:17:09:bd:f1:
                    b8:9c:6f:7c:47:cc:90:c0:82:59:68:8f:14:e7:7b:
                    03:55:91:3a:af:33:43:44:e9:f8:4d:99:53:26:2f:
                    44:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DB:57:48:1D:E9:8D:F3:3F:59:3D:E9:47:9F:00:FF:F4:5E:E9:5B
            X509v3 Authority Key Identifier:
                keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3d:37:ae:8e:1a:78:86:81:b0:c4:0d:2c:81:df:31:19:93:
         c5:5f:d3:ef:41:88:f5:db:c1:e1:d1:15:e3:09:86:de:c7:f8:
         67:74:61:e4:db:5c:06:92:b7:9a:1b:6f:14:bc:0e:28:39:03:
         a0:c8:e6:94:dc:b2:91:14:ec:fd:2e:c0:bc:8b:90:8b:1d:c6:
         c6:c6:62:fb:1a:cb:b0:ff:c7:93:12:9e:32:37:47:20:ff:44:
         36:23:53:03:53:88:2b:85:0b:09:f7:60:12:cc:eb:8c:be:53:
         02:0d:ac:79:2b:e1:a5:ff:0f:2c:6d:e8:fe:7d:28:bc:44:61:
         ae:a8:92:f8:61:0f:09:3c:28:d2:7e:b4:68:ce:aa:ce:03:65:
         32:14:7a:1a:40:da:99:0b:44:44:81:4b:8a:dd:0b:63:87:35:
         ca:33:26:83:32:63:b0:18:fc:4c:39:3f:2c:67:30:78:b0:82:
         01:97:64:44:76:dd:66:e5:f6:57:24:1d:40:90:b5:0b:57:dc:
         7b:0b:12:ce:46:a7:83:81:05:69:b6:f8:97:be:72:26:f3:94:
         4f:6e:9d:8b:e7:b5:1d:14:0b:84:a1:38:fb:38:42:27:61:2c:
         e0:49:1d:0b:30:57:17:3d:4d:fa:96:fa:e5:b5:b7:10:99:6f:
         2b:fa:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 19:09:59 2026 by rpki-client