This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File:                     PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier:          LOH3RwOR2ZKd7SDj/M20DCWOrajRKFqwNZUnT5ykRns=
Subject key identifier:   C1:DE:27:46:C6:21:67:C4:B1:AC:84:F4:32:3B:EB:8E:D7:FE:A6:F1
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer:       /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial:       2D5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number:          2D23
Signing time:             Wed 31 Dec 2025 15:24:23 +0000
Manifest this update:     Wed 31 Dec 2025 15:24:23 +0000
Manifest next update:     Wed 07 Jan 2026 15:24:23 +0000
Files and hashes:         1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: hlSUXfWmy0r8t2NjjxWsvKqNp+OQZCw2TzSE9r/QxwA=)
                          2: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: wnP6JYClG7n+PNc2XDZbazMvuyyzMgyJZ4q4a/lxzfM=)
                          3: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: utIpka2m9g7rscMzHbDTXQACJUoOh2JMTGT7Uylt93Q=)
                          4: 14820EDE248611EEB600357DC4F9AE02.roa (hash: uoxhoDVDIdZeIGpmPVYh0+yT+vTsXXRnS1XpZHEpwfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 15:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11610 (0x2d5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
        Validity
            Not Before: Dec 31 15:24:23 2025 GMT
            Not After : Jan  7 15:24:23 2026 GMT
        Subject: CN=69554027-9bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:0a:36:41:63:64:a3:a9:7c:4e:8b:0b:be:
                    1c:4b:f3:6d:e7:52:4a:79:0b:ae:57:a0:26:0d:a0:
                    d5:a6:25:ee:7e:f6:2e:e5:9c:23:30:7f:9b:0a:9f:
                    d6:14:c7:ac:c8:d4:2c:5a:35:98:d0:7f:1e:68:ea:
                    95:41:33:23:ca:f3:ed:93:ca:df:08:5f:99:4e:31:
                    d9:dc:50:30:d8:b1:36:b7:4b:95:e6:72:69:19:11:
                    0d:8e:e8:90:92:6f:36:2b:dd:34:96:c7:50:08:4f:
                    c0:e9:d7:6c:3f:9a:25:8e:c8:ff:13:10:6a:a2:24:
                    20:fa:56:58:37:3b:62:f8:45:a9:dc:dd:1d:86:ee:
                    83:4d:1c:03:03:2d:21:02:2f:60:fb:d4:40:9b:00:
                    72:26:4e:58:d1:39:1c:e4:95:cc:77:3e:f3:88:54:
                    08:d9:a6:63:db:75:d1:2f:7d:d4:b4:e5:5e:11:3a:
                    6b:8b:2c:a5:2f:7c:3f:97:cf:4f:a5:8e:c7:3a:62:
                    c9:cc:45:32:2a:77:ba:8c:a0:30:ef:68:76:3f:44:
                    cf:76:ab:74:43:81:fc:e0:9e:98:ab:ed:7e:73:3f:
                    2d:0e:1f:42:20:98:ec:39:68:d3:a2:a9:7f:18:75:
                    51:48:13:0b:4b:c0:18:f6:de:d8:2a:69:13:3b:b8:
                    73:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DE:27:46:C6:21:67:C4:B1:AC:84:F4:32:3B:EB:8E:D7:FE:A6:F1
            X509v3 Authority Key Identifier:
                keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:ec:fa:be:62:e0:27:19:ce:b7:4a:66:a5:8b:e6:1f:a0:
         d8:73:d5:b9:d5:77:88:bc:63:c4:ad:2b:43:4f:85:3f:a1:ad:
         2f:c7:5c:be:5f:9a:eb:6b:fa:e9:73:c3:d3:31:ef:ef:ea:ce:
         d8:ec:1d:70:95:de:27:5f:ef:2c:b8:2b:6d:59:95:4c:47:51:
         dc:0d:8c:cc:bd:97:10:51:9b:a3:23:af:64:b4:e8:47:6f:e7:
         55:90:06:8a:d5:a3:3b:06:6b:42:32:f3:7a:01:74:d8:49:ed:
         d0:ab:b7:99:d4:71:d5:f1:7e:dd:02:ad:35:11:e2:a3:54:8e:
         85:1c:ac:d8:c5:9e:87:e4:80:bc:2d:a0:62:86:9d:a5:76:5b:
         4a:c1:ca:cb:24:15:68:0d:e3:4f:07:91:4d:e7:22:17:45:4f:
         7a:a7:53:85:7e:97:60:b4:a5:4b:77:9f:d9:54:c4:b1:d4:b5:
         a2:38:48:f3:6a:0a:b9:f4:e4:21:1b:a3:34:b9:b8:d0:1f:06:
         fc:fe:ad:8d:b2:5e:13:74:e5:9e:24:c5:04:2b:e6:8e:d0:e4:
         de:4b:19:e2:ef:ca:d4:90:89:17:74:f7:74:76:82:af:6d:9b:
         94:d5:36:28:2a:43:24:48:c8:f4:8d:42:df:5f:72:55:b3:19:
         f4:3b:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 10:52:37 2026 by rpki-client