This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
File:                     PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json)
Hash identifier:          rdcOQQgwGpNCNPT0U/5AwyTanmKJ2HWkgR68pg4Yh9A=
Subject key identifier:   19:DD:58:82:A9:81:F5:F9:AD:EF:84:A0:F6:CA:BC:18:A2:DA:6E:7B
Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB
Certificate issuer:       /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB
Certificate serial:       10F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
Manifest number:          10E4
Signing time:             Tue 30 Dec 2025 17:02:29 +0000
Manifest this update:     Tue 30 Dec 2025 17:02:28 +0000
Manifest next update:     Tue 06 Jan 2026 17:02:28 +0000
Files and hashes:         1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: 4pTNmRiDDkZafhblWhJ64U3/qpmmw6kKUKM5wr1DIGY=)
                          2: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: 1iubQBpsLSvGnn+Mx1GBJRtm0BcqUW85CF15NJsmWt0=)
                          3: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: ZDjZETXLZ7zFreIAvqJ7UMCHnkhV8V9TxpsSD145ZBI=)
                          4: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: zHchOODRMXh4YPNN1A7mCb7XiL/ujTp4cFUjm4qxBCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl
                          rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 17:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4343 (0x10f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB
        Validity
            Not Before: Dec 30 17:02:28 2025 GMT
            Not After : Jan  6 17:02:28 2026 GMT
        Subject: CN=695405a4-482e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:39:44:69:e7:1f:f3:b9:87:ee:aa:cc:c4:
                    14:82:ca:37:5f:96:b2:45:80:8a:37:4b:1f:1a:fd:
                    18:80:c4:91:af:6f:70:bc:8b:a6:f0:94:cd:90:bd:
                    9a:25:3d:e2:59:bd:1a:dc:ad:31:a2:97:e7:35:b9:
                    78:53:38:51:d6:c6:d2:48:19:38:6d:76:c8:37:ff:
                    d6:82:17:1e:fa:9b:46:fd:38:02:cd:ad:c2:ec:a3:
                    c6:ac:bc:01:a9:f0:b0:6c:23:a8:89:ae:df:98:0a:
                    d7:fb:70:90:da:8e:88:40:35:3d:df:f2:a1:24:07:
                    7f:46:ea:98:63:ae:3b:7d:59:7a:fc:4d:33:5e:d4:
                    7d:78:6f:bf:dc:bd:3e:f4:74:73:b0:e8:fc:39:03:
                    05:a9:6f:bf:dc:90:6b:c1:5a:5d:9c:94:bd:67:7b:
                    e0:25:fd:46:e3:78:01:3b:fc:83:49:4a:e8:fb:db:
                    47:0a:54:70:c5:a3:f0:fb:bb:95:68:10:c8:57:b6:
                    6f:b1:c8:30:0d:21:bc:e5:44:f8:4a:d1:46:ab:f5:
                    e9:fc:3c:7d:a0:13:1f:d4:89:37:54:51:9d:5c:88:
                    bc:fe:9a:0b:14:de:03:2e:cf:3d:ea:cb:3f:90:86:
                    4b:db:82:38:f9:71:35:d7:15:a7:9d:b1:27:c2:3e:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DD:58:82:A9:81:F5:F9:AD:EF:84:A0:F6:CA:BC:18:A2:DA:6E:7B
            X509v3 Authority Key Identifier:
                keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:05:58:9f:26:6a:95:25:52:ad:08:eb:55:cf:7a:f6:0b:26:
         fd:5b:19:a5:93:0b:8e:c1:80:31:a4:17:d0:bd:fe:66:56:a7:
         62:0d:ed:84:4c:0b:c1:c7:4c:16:40:16:9d:74:a5:53:88:38:
         76:5e:c4:1f:33:66:64:15:3e:f2:6b:da:f8:fc:85:91:bc:d8:
         9e:36:49:e9:1e:e1:d7:0f:93:2d:f7:c9:43:48:db:6c:36:1f:
         9e:39:0a:35:f9:09:f8:b3:63:1f:68:9d:26:b3:07:13:0c:07:
         5d:a3:84:d9:19:ba:9f:95:72:52:a7:4c:91:f5:76:25:23:93:
         82:2d:0a:88:b7:65:25:78:3e:be:06:89:20:d5:25:fa:c4:58:
         9f:55:5a:d4:35:83:70:d4:24:b6:f4:28:9f:a8:13:2e:d3:8b:
         f6:7c:70:57:23:f9:13:cd:eb:97:54:b3:4a:c7:2b:6b:4a:c9:
         9d:7d:fd:ba:c7:53:8b:4a:db:89:cb:27:c7:e2:83:5c:7f:5f:
         01:22:63:62:3c:8b:e0:06:5c:1e:d0:74:29:02:c5:b9:ab:5d:
         84:44:79:12:e4:37:92:17:ae:f0:3c:e8:8e:f4:63:4a:54:ea:
         cb:3d:73:af:87:6a:45:68:f7:c7:4e:9b:2e:c0:fb:56:8b:23:
         1b:94:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 09:19:51 2025 by rpki-client