This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File:                     peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier:          xBo5ODACzXaJoqO4tHHKMUHy2vbdJ1z4KXtpD4soE9w=
Subject key identifier:   7D:D2:D0:98:3F:30:AC:7E:C0:E0:4C:6E:8F:5F:CF:B9:90:B5:4D:7B
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer:       /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial:       0245
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number:          0240
Signing time:             Fri 05 Dec 2025 00:09:54 +0000
Manifest this update:     Fri 05 Dec 2025 00:09:53 +0000
Manifest next update:     Fri 12 Dec 2025 00:09:53 +0000
Files and hashes:         1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: zXKjMY3t7xRVaWY4J47WZ9WHEx/Xj2uFLfn0lGLrBmY=)
                          2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: vYjDKJoL/LVvPBznc+DyGkQ1jp9r0XRmWXYGOVlx3uA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
        Validity
            Not Before: Dec  5 00:09:53 2025 GMT
            Not After : Dec 12 00:09:53 2025 GMT
        Subject: CN=693222d2-a595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fe:d8:8b:d0:56:60:06:f0:a9:bb:4e:33:4a:
                    03:10:4e:27:0a:dc:44:67:4b:38:9a:28:5a:2f:6b:
                    76:58:65:8c:77:01:c5:dd:9a:bd:90:e7:8e:54:80:
                    06:fd:fa:f1:c7:e0:0b:51:74:a7:28:77:e3:47:ef:
                    41:33:c5:78:9f:da:05:73:ce:ea:2e:a2:c4:12:7d:
                    70:c1:19:26:f5:41:c6:db:43:36:76:ae:e1:2b:e5:
                    6c:c3:91:05:86:6e:31:83:3c:a0:46:96:1d:92:3d:
                    32:73:ed:4c:b3:9b:1b:00:1c:90:23:ac:c1:6b:0b:
                    de:c5:2a:07:55:92:41:bc:fd:6c:7c:c6:53:49:18:
                    bd:93:39:91:ea:1b:01:90:e9:bb:35:cf:79:32:0e:
                    4a:a6:f7:15:a1:3f:2a:51:a5:33:89:20:69:54:0f:
                    b6:26:b0:7a:51:6c:83:2c:f5:65:bc:d3:e1:0e:17:
                    d0:ad:1a:88:47:c5:1d:90:13:fe:ba:93:fc:c3:13:
                    f2:af:24:cb:1f:c8:bf:e7:da:bc:9b:1d:16:89:63:
                    c2:26:40:d9:95:62:19:a1:de:a4:c2:62:4c:22:d6:
                    dc:78:35:d2:2a:51:6d:05:e4:e4:08:f5:dd:0a:ba:
                    af:c1:d2:0f:b0:f6:5a:20:ea:8e:23:45:a0:db:50:
                    cf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D2:D0:98:3F:30:AC:7E:C0:E0:4C:6E:8F:5F:CF:B9:90:B5:4D:7B
            X509v3 Authority Key Identifier:
                keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9a:73:77:4a:1c:db:8d:6b:5f:f0:c5:03:31:55:54:6b:e6:
         7d:dd:0b:ce:ac:13:d3:84:68:10:73:ea:ae:3d:bf:39:31:3a:
         a1:1c:5a:a5:4e:26:f6:1c:ee:1a:86:c3:5d:50:a1:24:82:70:
         73:82:5a:cf:8e:e9:09:0f:a0:8c:ca:41:f6:77:49:72:bf:85:
         95:07:38:a6:f6:22:f4:ea:39:a7:c1:13:75:df:63:8e:5e:ce:
         06:ad:7a:91:a4:c4:d8:a0:52:68:c7:58:ce:82:c5:b0:87:a2:
         86:15:91:6b:9c:fa:60:e1:97:3e:a7:23:d3:f8:75:c1:d3:2a:
         f1:3f:bc:84:d9:39:f0:85:80:a3:b8:2f:41:56:8b:0e:93:a5:
         21:a5:b5:2d:6c:47:46:af:f2:66:98:f1:71:30:d6:54:fc:37:
         27:f3:14:7f:ed:83:63:a8:ac:b5:aa:d7:72:99:25:fc:c3:cd:
         88:0d:69:72:c5:17:d6:05:75:63:96:c4:f6:e8:00:be:47:7d:
         4d:48:16:48:a5:a3:69:89:f3:56:f3:b1:7d:a2:03:54:51:ad:
         6b:4a:53:8f:e1:6b:b4:07:0d:92:e7:21:c6:0c:3f:be:dd:c8:
         d2:9c:25:54:8c:f3:35:62:35:fe:be:6e:40:2b:d0:7a:15:c5:
         da:d2:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:58:32 2025 by rpki-client