This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
File:                     PGIfAALQYHByq7Fal4r7xa9DpVw.mft (raw, json)
Hash identifier:          ilFXMESPy+RhnLs63SwwcLfd8fxuVZFYQ8IyWQ8toTo=
Subject key identifier:   4F:64:55:45:D5:E9:3C:D4:9C:17:93:A7:61:FC:1A:65:43:D1:3A:C7
Authority key identifier: 3C:62:1F:00:02:D0:60:70:72:AB:B1:5A:97:8A:FB:C5:AF:43:A5:5C
Certificate issuer:       /CN=A91F4130/serialNumber=3C621F0002D0607072ABB15A978AFBC5AF43A55C
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
Manifest number:          13
Signing time:             Fri 19 Dec 2025 06:48:57 +0000
Manifest this update:     Fri 19 Dec 2025 06:48:57 +0000
Manifest next update:     Fri 26 Dec 2025 06:48:57 +0000
Files and hashes:         1: PGIfAALQYHByq7Fal4r7xa9DpVw.crl (hash: 1OIRR2h9I/tfpH/UDTJoZAIDSNTDRl0Dl3e3xQZTuKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.crl
                          rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4130, serialNumber=3C621F0002D0607072ABB15A978AFBC5AF43A55C
        Validity
            Not Before: Dec 19 06:48:57 2025 GMT
            Not After : Dec 26 06:48:57 2025 GMT
        Subject: CN=6944f559-fe36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5e:13:05:18:db:d9:fa:48:76:8e:c3:4a:07:
                    c6:f5:57:08:4a:62:43:36:20:c2:3a:d9:47:7e:e5:
                    db:e2:bc:ad:28:fe:7b:c3:f5:17:46:52:86:09:bc:
                    01:9b:4d:6b:a7:12:94:7e:c1:35:2d:fc:07:db:d2:
                    6c:0b:ed:4c:99:33:60:28:b3:98:ea:82:41:7a:d5:
                    b8:cf:e3:a1:31:a9:34:2c:05:07:cf:e4:33:55:5e:
                    56:0c:76:07:e2:60:98:cf:17:15:f9:bb:e3:b9:97:
                    a7:c3:f0:15:83:19:ca:56:e7:22:1c:c9:b8:c3:8f:
                    d6:d3:0d:15:2e:a5:75:9b:48:0a:91:24:a4:c0:49:
                    6c:b3:3a:46:9a:de:a1:f1:3e:f9:8d:61:f0:0c:69:
                    cb:e6:33:ec:ef:9b:9e:2a:e4:5a:76:3f:3b:99:3c:
                    3e:2e:80:51:f6:31:7c:06:1c:bc:98:71:5d:24:1a:
                    9f:51:fd:0b:66:30:2b:06:da:78:db:29:a0:55:ce:
                    c5:9e:36:64:d9:fb:01:c1:82:8d:9c:df:c4:68:6e:
                    9a:1d:58:2b:57:86:52:a1:eb:07:08:bd:c4:aa:e3:
                    df:6a:12:79:db:8c:08:7a:41:21:71:6f:f3:69:2c:
                    eb:96:89:2b:6d:e7:11:45:dd:43:85:a3:7e:da:82:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:64:55:45:D5:E9:3C:D4:9C:17:93:A7:61:FC:1A:65:43:D1:3A:C7
            X509v3 Authority Key Identifier:
                keyid:3C:62:1F:00:02:D0:60:70:72:AB:B1:5A:97:8A:FB:C5:AF:43:A5:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:13:eb:2b:c1:20:57:0a:65:e5:cb:a9:ce:c8:ee:4f:b6:11:
         2c:5a:dd:7c:b6:2e:40:58:e4:58:12:1f:52:f0:e8:8f:e0:f9:
         65:b6:fb:29:14:2a:11:96:be:30:48:d6:0b:ec:8e:97:36:ad:
         4f:dd:11:57:aa:d5:53:67:b5:c5:4e:79:f2:b6:6c:1f:7e:d6:
         07:bf:88:d9:eb:b6:c9:dc:d7:9a:18:26:fb:d7:0c:dd:df:0b:
         7e:16:54:b9:75:b5:5d:03:05:f7:92:c4:72:3f:79:59:3c:70:
         e0:78:34:59:cd:67:a1:2a:5a:51:65:0b:48:9a:94:bc:81:57:
         90:5f:6e:91:cd:0a:40:1b:6a:55:da:2f:27:7a:c6:28:3d:90:
         14:46:39:79:61:86:3b:c0:da:7f:be:42:a6:d6:c4:e8:11:f0:
         37:be:34:3f:2c:8b:7b:a5:bb:fb:de:c4:2a:25:78:de:34:94:
         db:b4:f9:72:c2:99:65:7f:cd:71:33:89:38:9a:c0:0b:70:95:
         28:fb:90:f2:6e:6f:12:91:cc:40:cf:d6:9a:10:ab:61:30:b6:
         6c:3f:48:ef:a8:49:1c:55:de:b9:86:33:2e:f6:d2:fd:7a:98:
         2e:3e:da:4b:ce:6c:9b:f1:57:28:89:99:b0:98:e1:fa:68:c6:
         49:27:07:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:48 2025 by rpki-client