This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
File:                     pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json)
Hash identifier:          LLBAJbQ/HMdZYq9aee0l0rkLdWsxw7Ma0OW3OV3pe34=
Subject key identifier:   EC:0C:92:5B:E6:86:C5:67:D5:9D:58:65:C7:90:05:D8:92:F5:8F:30
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Certificate issuer:       /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
Manifest number:          014A
Signing time:             Fri 05 Dec 2025 02:24:54 +0000
Manifest this update:     Fri 05 Dec 2025 02:24:53 +0000
Manifest next update:     Fri 12 Dec 2025 02:24:53 +0000
Files and hashes:         1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: sDcbQXR0jk103Z93ATTtZCTXpul9jL+wtqLzTzfvj84=)
                          2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=)
                          3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: Y2k2zpzO5L2UX1/syfcTHwfwkADI2HQTu1qn6JdDuuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
                          rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
        Validity
            Not Before: Dec  5 02:24:53 2025 GMT
            Not After : Dec 12 02:24:53 2025 GMT
        Subject: CN=69324276-450a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d2:cb:7c:80:c5:2a:a6:87:bd:99:5e:31:c6:
                    2f:04:48:bb:26:34:62:5e:9b:a6:dd:75:a9:f1:91:
                    11:09:c3:3e:f4:4a:8e:9a:6d:bb:d2:a8:c1:b4:4b:
                    fb:d7:41:ae:93:42:7a:b7:af:0c:58:3a:86:bc:18:
                    55:d0:08:f8:bd:be:a0:3a:ce:12:1d:05:37:5b:bd:
                    7b:42:b0:8f:1c:b6:76:ba:2b:af:b0:94:d0:46:e6:
                    28:71:38:db:58:48:81:5f:1d:9a:e2:6e:bd:86:9d:
                    91:08:c0:8d:43:36:75:d8:18:53:e6:20:52:89:75:
                    91:f0:0c:15:c7:e9:88:d0:bd:5f:a0:f9:88:48:7d:
                    2e:59:09:1e:d3:30:f9:8e:5c:7c:a5:cc:91:7f:24:
                    ed:a6:48:aa:45:bd:10:3e:15:51:50:ab:f5:0a:34:
                    4e:ad:57:62:50:d0:6b:7f:d3:62:7d:9a:95:af:15:
                    36:3b:29:20:32:9e:ab:b8:f3:94:a3:22:58:5f:91:
                    82:4a:c9:bc:3d:a7:78:e5:a6:bb:10:88:c5:35:df:
                    b2:5b:c4:ed:c6:f5:dd:e3:29:69:27:3a:17:0f:b3:
                    f2:59:74:1d:ca:74:be:92:0d:1f:06:b3:f4:2d:ef:
                    fe:b3:ad:93:b0:03:b4:ea:ef:f6:05:56:81:92:c8:
                    fd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0C:92:5B:E6:86:C5:67:D5:9D:58:65:C7:90:05:D8:92:F5:8F:30
            X509v3 Authority Key Identifier:
                keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a7:69:28:b9:90:ac:73:b1:32:51:9f:fd:83:78:92:7d:11:
         f0:d7:b2:ad:8a:55:01:c1:f6:60:9b:53:19:fe:2e:7f:9e:e1:
         ee:33:de:d7:8f:d6:eb:3c:ca:e7:a5:88:41:8f:31:e8:62:11:
         bf:fa:51:99:79:1f:5a:1f:af:0d:75:98:61:2a:56:e4:54:19:
         fb:b7:24:e0:d2:77:cb:08:11:40:7f:5f:a8:83:0a:ae:40:30:
         19:7c:28:58:ea:83:58:9f:b9:e5:58:30:5a:b3:6e:3b:9d:49:
         96:74:30:6c:7a:f6:f3:79:5f:40:62:63:c1:3c:be:db:65:e6:
         cd:5b:a7:e5:4d:8e:3e:13:1f:36:cb:0d:c1:8c:69:fc:86:00:
         7f:a4:77:47:b5:d6:de:ed:e6:33:b5:2f:06:81:e9:00:1e:15:
         f2:85:5d:59:f1:f6:fb:1b:13:99:39:b2:a9:f4:e0:b4:d6:8d:
         12:c1:e8:73:a7:01:95:90:4e:dc:c0:ec:4c:66:ef:44:72:7a:
         20:35:05:96:2b:d3:bc:58:f7:af:9d:29:d3:fe:5d:3f:c9:a6:
         a1:2e:96:65:1f:e4:1d:ad:47:65:4d:ba:e7:d1:7e:d8:d5:bb:
         e4:7d:a3:30:a5:07:7c:84:60:54:58:47:0b:d3:80:bf:0c:b8:
         19:9c:a2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:18:47 2025 by rpki-client