This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
File:                     Pt_GEu6fIVySACA44L-3jfmkIt0.mft (raw, json)
Hash identifier:          nq39v/NPYxVaJ2QDYKsZvaIyCmW9wbOZLfxWmnT1w/A=
Subject key identifier:   74:97:25:11:58:0C:83:BB:7C:02:E7:71:A3:73:18:DD:EB:AA:D5:01
Authority key identifier: 3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD
Certificate issuer:       /CN=A9179D2B/serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
Certificate serial:       0556
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
Manifest number:          054B
Signing time:             Thu 04 Dec 2025 22:02:36 +0000
Manifest this update:     Thu 04 Dec 2025 22:02:35 +0000
Manifest next update:     Thu 11 Dec 2025 22:02:35 +0000
Files and hashes:         1: Pt_GEu6fIVySACA44L-3jfmkIt0.crl (hash: DzK1Nne+dvzPSgkV904inDAMOcEamUxS+cQHfkjmiWs=)
                          2: 405A719A173B11ECA6FAAE38C4F9AE02.roa (hash: WHVkMVaIDqsUtFffiasOomdMlljt2kCgIYVccMhJqfM=)
                          3: 415B7AF8173B11ECA6FAAE38C4F9AE02.roa (hash: aZljL1GmgNxI0k7AknE4ROV0CHcBUzl9gIS4j1EL964=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl
                          rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D2B, serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
        Validity
            Not Before: Dec  4 22:02:35 2025 GMT
            Not After : Dec 11 22:02:35 2025 GMT
        Subject: CN=693204fc-2da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:71:6f:6c:75:d3:81:10:42:74:27:7f:b0:
                    5e:33:90:63:26:f0:02:75:b6:f2:06:d4:45:67:65:
                    b0:5d:b1:db:be:b2:44:40:55:49:78:44:85:bf:41:
                    c5:e0:c5:25:fb:58:24:d8:07:e1:44:76:8a:dd:12:
                    ba:16:3c:7a:28:cf:d6:68:e5:c4:9a:3e:0a:29:32:
                    02:70:3d:4c:f5:be:6e:e8:b2:44:dc:3a:3b:18:16:
                    18:d7:13:96:26:cf:d9:ef:95:8e:41:f2:5f:a5:c3:
                    c3:60:9d:66:fe:ff:ff:8c:e8:3b:a5:b3:44:08:bd:
                    fa:88:d4:4d:11:b8:7e:cf:ea:ac:66:bf:a5:8a:fa:
                    92:cf:55:4d:23:43:f2:12:8d:4e:e2:39:21:b2:6a:
                    db:a3:dc:cd:b8:c8:16:68:fd:f0:0b:3e:61:e5:eb:
                    ea:a1:80:f3:3d:8c:da:7b:61:bb:ea:ba:65:dd:ba:
                    ff:00:2f:32:46:95:7f:ea:23:b8:e7:41:41:5c:2e:
                    df:00:4c:59:a7:85:05:c9:4f:67:53:0c:72:36:68:
                    48:17:0d:3f:70:9c:63:78:1c:b2:49:56:a7:28:dc:
                    db:52:04:2b:17:fc:38:e1:22:73:0b:f8:9c:ed:ae:
                    50:4d:1b:94:a3:33:d4:b7:d3:2e:d6:1b:d3:71:16:
                    d8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:97:25:11:58:0C:83:BB:7C:02:E7:71:A3:73:18:DD:EB:AA:D5:01
            X509v3 Authority Key Identifier:
                keyid:3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:55:64:05:a7:8f:7f:48:a7:04:2c:80:28:43:d7:14:8f:54:
         7b:10:fb:78:1f:6a:e9:7c:4e:e9:11:9a:45:e9:39:22:26:89:
         45:16:89:45:94:b9:e1:6f:39:50:85:2e:4d:c7:a7:37:4b:61:
         f1:2d:7b:c0:38:b6:15:7b:ca:9f:72:56:31:36:13:96:bf:d9:
         d7:42:57:da:1e:2d:76:59:6f:09:a6:55:af:0b:94:7b:63:a4:
         d3:eb:fe:0f:39:d3:c3:b9:ae:fb:17:1c:aa:61:cb:ad:43:45:
         5c:ab:e1:2d:e7:49:4f:b7:f6:5c:73:b3:2d:b2:4e:58:9d:dd:
         c7:96:eb:8e:a8:b2:85:b7:e7:7d:91:4c:68:f2:0e:ab:5e:70:
         e5:4c:82:79:80:2e:38:aa:1e:cc:54:34:ca:d1:a9:8b:b9:12:
         4a:b9:c0:d8:d5:96:33:9c:fa:48:3c:b8:34:c8:a9:ed:6b:cf:
         cd:2f:40:8f:6c:87:70:cd:da:d6:82:ae:02:dd:c9:54:69:ed:
         1e:ec:60:d0:fd:80:04:e1:11:b4:bc:44:64:89:1e:09:94:29:
         8f:7a:7c:7d:74:21:c7:b9:f6:bc:ac:e9:b0:39:be:9c:f7:90:
         1a:e5:3f:0f:01:cc:af:f5:0e:50:7c:43:de:d6:e3:84:76:60:
         1f:01:2c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:59:23 2025 by rpki-client