This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
File:                     plApCrx0GfQg5AG7s6RNCBPR8Wk.mft (raw, json)
Hash identifier:          4bW6aCjoZ9FXkuB7z817ZX8G6anf01ipW1ZtxhEzmrY=
Subject key identifier:   C4:E5:15:6B:E8:5F:62:A1:0E:39:94:B5:81:C2:6D:BC:10:9A:CA:52
Authority key identifier: A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69
Certificate issuer:       /CN=A9180EB5/serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169
Certificate serial:       04AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
Manifest number:          04AA
Signing time:             Thu 04 Dec 2025 22:27:26 +0000
Manifest this update:     Thu 04 Dec 2025 22:27:25 +0000
Manifest next update:     Thu 11 Dec 2025 22:27:25 +0000
Files and hashes:         1: plApCrx0GfQg5AG7s6RNCBPR8Wk.crl (hash: lRWIyZ5D/dKH3uUzKZJPaH7nz/PCF59K9K1J/sANZKk=)
                          2: C361870855FD11EC938D1744C4F9AE02.roa (hash: SB4h4zGEtxyFJYfc5GO7YkKy69kkEfQKoUL9+jluR6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl
                          rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1198 (0x4ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180EB5, serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169
        Validity
            Not Before: Dec  4 22:27:25 2025 GMT
            Not After : Dec 11 22:27:25 2025 GMT
        Subject: CN=69320ace-36b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:28:2b:9b:5a:b9:c1:38:cd:4a:70:95:e5:54:
                    c1:0f:3d:23:21:1c:67:88:d3:61:c8:8a:1c:20:10:
                    c3:04:4c:9d:3d:9a:58:26:0b:bf:19:e9:43:98:54:
                    2d:49:94:6f:3b:f8:d3:1c:fa:a4:71:ea:30:34:0a:
                    98:73:ef:44:6b:24:29:2d:2d:a2:ee:58:3a:50:52:
                    21:be:0b:14:ce:ec:94:6a:f8:e5:3f:fa:af:9b:37:
                    7a:0d:fd:c0:4f:45:48:ad:50:f8:96:9f:c9:bf:d0:
                    a0:6e:c3:c3:90:88:76:79:39:73:e8:48:5b:22:41:
                    9d:e6:8b:90:00:10:83:59:e9:ae:3f:8d:fb:6b:50:
                    0b:97:2c:22:2f:47:51:63:95:96:2a:e3:72:f6:43:
                    81:23:c8:7d:f1:30:78:61:85:27:18:83:b0:46:f9:
                    63:e5:37:aa:b1:5f:b6:4a:b3:ae:2c:6a:15:50:12:
                    ae:1e:66:1e:35:31:03:4d:22:6d:d3:4c:ca:f3:03:
                    51:10:e0:e7:80:9e:d1:55:be:b9:6b:0e:44:1f:9b:
                    11:62:4a:c4:70:0f:ed:e6:52:20:19:e4:f2:16:2f:
                    1b:84:1c:0f:07:a9:b4:3a:5e:99:06:cc:74:c3:dc:
                    f2:16:cf:47:62:fe:a9:73:9f:ca:08:90:d8:82:56:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E5:15:6B:E8:5F:62:A1:0E:39:94:B5:81:C2:6D:BC:10:9A:CA:52
            X509v3 Authority Key Identifier:
                keyid:A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2c:8a:eb:54:c4:30:04:cf:c9:dd:f5:02:94:78:d8:ab:28:
         7e:f0:f9:00:f5:4a:85:df:c9:2e:57:8d:8d:ec:59:af:8e:b0:
         85:e1:72:f5:da:1c:b1:ce:99:dc:97:7e:36:97:d7:44:e0:bd:
         af:da:dc:d3:e6:6e:28:ec:fa:11:16:95:60:3b:1e:6c:3a:ec:
         04:fd:7f:d5:44:72:23:59:37:c0:54:fe:ff:55:68:cc:57:8f:
         8e:45:52:ee:45:83:c7:20:e4:4c:1f:43:15:f3:75:68:28:26:
         ad:6c:2c:04:42:90:11:b6:63:6f:0f:97:1d:9c:eb:fa:0d:c0:
         5b:1c:c3:1e:98:b3:cd:72:bb:22:c0:33:f7:c5:6b:cf:9b:9e:
         bd:1d:bd:b8:97:b0:f8:7a:bd:34:74:b3:4b:56:03:b1:65:f9:
         9c:f7:be:fc:ec:2e:1a:7e:6f:6e:1e:46:ed:f8:30:72:b5:43:
         e6:3d:28:17:6f:b5:59:50:f9:6c:9e:0a:74:cf:05:1b:0f:1f:
         84:cf:c5:84:0a:4f:b9:ce:52:3d:4a:3e:93:e6:4b:5b:78:ef:
         b5:3e:0f:f6:12:2e:2f:5f:ee:d7:86:b8:56:26:35:4f:06:64:
         fa:03:79:02:64:30:b6:66:f2:29:80:2d:3a:9f:82:4b:ac:2c:
         9e:04:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:27:52 2025 by rpki-client