This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
File:                     PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json)
Hash identifier:          dXK2UiwGYgklSQ8ddgMODzKHfVUIh9xnTumVzn2kXf4=
Subject key identifier:   BD:CC:5E:0C:7C:45:AD:06:55:70:16:59:39:B5:5C:5D:E9:81:05:00
Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
Certificate issuer:       /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
Manifest number:          E3
Signing time:             Fri 19 Dec 2025 04:34:35 +0000
Manifest this update:     Fri 19 Dec 2025 04:34:34 +0000
Manifest next update:     Fri 26 Dec 2025 04:34:34 +0000
Files and hashes:         1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: pAhp/iWafr9ZzUwjxgvUGlXP/4UOWSXGtxKgPzxTG5E=)
                          2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: jhgv9aU9R5cyiS+8jQVzOexFGNK8rhaSdkQTaqCgMHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl
                          rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
        Validity
            Not Before: Dec 19 04:34:34 2025 GMT
            Not After : Dec 26 04:34:34 2025 GMT
        Subject: CN=6944d5db-ed92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:de:f3:42:4f:cf:a3:4d:a3:65:73:6e:a1:f5:
                    69:eb:68:ec:49:10:43:2f:c6:03:d3:24:97:30:60:
                    f2:97:07:da:ce:c9:32:d4:b8:2c:fc:78:83:82:59:
                    da:76:18:a6:63:fa:70:e4:19:05:32:66:dc:3e:82:
                    4e:57:3f:de:c1:85:ad:ae:e3:2c:83:ad:e4:29:13:
                    cd:be:be:91:66:eb:1d:26:8a:10:51:3f:af:40:3b:
                    c0:9f:8f:c9:d3:16:f0:61:9f:cf:38:7c:bc:90:ba:
                    87:bd:57:c8:af:9d:31:ce:bd:03:29:e2:8c:9f:a9:
                    24:d6:33:52:23:d7:ba:9b:f9:8c:46:39:f8:4c:b2:
                    dd:1c:95:64:9a:43:a0:33:b4:00:da:9d:55:90:aa:
                    ff:d6:80:d6:3b:49:22:b7:9f:80:9d:92:fd:a2:19:
                    d2:dd:9e:08:9f:60:08:44:cb:22:e4:02:fc:40:49:
                    da:10:74:b5:4a:05:05:96:3f:25:5c:2b:9a:52:86:
                    c4:6d:b4:76:44:fb:d6:c3:ff:83:80:20:39:82:6d:
                    1b:26:08:0f:5d:84:7e:cb:76:07:30:5d:01:fb:e5:
                    fe:63:55:7f:93:fe:ba:db:bd:af:c4:cc:dc:ba:a2:
                    b0:f0:a8:34:3c:a0:a3:6f:ba:17:ed:22:2f:2a:da:
                    cb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CC:5E:0C:7C:45:AD:06:55:70:16:59:39:B5:5C:5D:E9:81:05:00
            X509v3 Authority Key Identifier:
                keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9e:e1:7b:e1:e9:ab:6b:0f:6b:2a:99:cb:3d:07:a6:14:a6:
         1d:48:a8:43:98:70:ef:71:35:b2:45:5d:72:02:62:cb:9c:bd:
         13:94:f8:75:70:20:d0:3c:87:51:ad:9a:63:89:50:21:ec:af:
         1b:b0:24:78:0e:75:8e:fa:c0:77:a4:41:9f:66:68:6d:16:c1:
         61:82:75:ae:6f:f7:fb:dc:88:15:19:49:ed:c6:de:88:4b:fd:
         ab:3a:60:44:4a:30:56:f2:bf:be:e0:58:3e:54:e9:4f:53:8f:
         0b:63:c0:2c:53:a4:c2:c6:a1:4c:c6:15:36:dd:7b:a9:3a:4c:
         e8:6f:2c:27:0b:26:d2:49:34:1c:af:fa:94:1a:a1:62:eb:0d:
         6c:88:02:4a:64:ad:b2:13:05:da:f1:80:a4:9c:fb:19:20:ab:
         7a:d4:b4:ff:aa:3d:88:c2:f4:5f:f5:1b:27:96:d1:74:92:f3:
         c5:a9:f8:15:e4:30:49:0f:3e:03:23:01:17:7d:c0:92:8c:c7:
         72:d4:f6:bb:a7:30:0c:7f:94:61:d4:06:0f:e0:84:23:b6:ab:
         8d:d8:f7:c8:9e:d3:3a:e9:f0:20:9f:9c:e2:09:78:70:47:bf:
         3e:87:d3:49:3b:34:89:68:2f:ee:01:e6:d4:14:56:43:2d:5a:
         3e:63:cf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:13 2025 by rpki-client