This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.mft
File:                     PLCVZot9dMLxtwBa-hWfT-UiUgo.mft (raw, json)
Hash identifier:          ORE5vb1KTezVGKf9948ipKe7eiFjdwD8vzXGUeicwNc=
Subject key identifier:   6A:55:F1:6D:78:96:8C:5D:9F:20:6F:3E:6F:FD:02:74:24:EC:CA:CD
Authority key identifier: 3C:B0:95:66:8B:7D:74:C2:F1:B7:00:5A:FA:15:9F:4F:E5:22:52:0A
Certificate issuer:       /CN=A91A423D/serialNumber=3CB095668B7D74C2F1B7005AFA159F4FE522520A
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLCVZot9dMLxtwBa-hWfT-UiUgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.mft
Manifest number:          18
Signing time:             Fri 05 Dec 2025 05:41:09 +0000
Manifest this update:     Fri 05 Dec 2025 05:41:08 +0000
Manifest next update:     Fri 12 Dec 2025 05:41:08 +0000
Files and hashes:         1: PLCVZot9dMLxtwBa-hWfT-UiUgo.crl (hash: IjKgkp0DFhkdXE/qkz4DBmiSKEEEHyi3hN0R0w1Gf1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.crl
                          rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLCVZot9dMLxtwBa-hWfT-UiUgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A423D, serialNumber=3CB095668B7D74C2F1B7005AFA159F4FE522520A
        Validity
            Not Before: Dec  5 05:41:08 2025 GMT
            Not After : Dec 12 05:41:08 2025 GMT
        Subject: CN=69327075-aaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3f:a4:49:55:5c:44:94:3d:52:44:32:68:23:
                    85:17:9c:7e:05:45:1c:3c:56:ad:2a:a2:61:4e:88:
                    12:2d:f0:61:e1:ef:83:cf:40:3e:81:8b:04:67:65:
                    9a:4a:55:7d:3d:4d:19:eb:6b:0e:e2:25:a9:03:5e:
                    af:fc:89:ed:1e:52:5a:dd:82:fd:55:e9:3d:f4:2c:
                    d3:f4:c6:8c:fa:88:cc:76:ed:d8:08:58:b4:50:c2:
                    7d:3c:dc:dd:d5:66:2b:74:fe:9a:42:bb:10:5e:cf:
                    29:73:52:c1:eb:04:f5:29:73:97:e3:96:6b:7c:97:
                    18:94:29:f3:ba:bb:78:b9:88:c7:db:52:55:5b:1c:
                    f7:a3:6b:de:73:bd:db:c8:52:a6:82:62:2e:3c:2d:
                    c5:aa:22:b7:a3:75:c2:0e:68:f4:30:c0:37:f1:40:
                    b5:30:10:a8:50:d4:9d:37:45:60:75:d3:76:b7:cd:
                    22:32:50:5c:b1:74:37:1c:ca:9f:2d:2b:51:f3:d7:
                    16:37:c3:2f:a7:23:ec:a6:2c:c5:b6:b3:1b:0e:75:
                    7f:27:1c:60:32:0a:ea:89:29:be:2b:04:e3:db:30:
                    67:87:00:06:bd:ad:e2:d1:6c:1c:a2:c8:97:c3:b1:
                    79:f6:9b:31:0d:ab:43:ad:30:cd:7d:bf:ba:10:13:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:55:F1:6D:78:96:8C:5D:9F:20:6F:3E:6F:FD:02:74:24:EC:CA:CD
            X509v3 Authority Key Identifier:
                keyid:3C:B0:95:66:8B:7D:74:C2:F1:B7:00:5A:FA:15:9F:4F:E5:22:52:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLCVZot9dMLxtwBa-hWfT-UiUgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:d3:47:07:e0:28:e2:90:64:1e:2c:58:6e:9a:96:1e:00:14:
         0c:5c:10:a2:8e:c6:fd:f6:1f:37:22:d2:f1:73:fd:b4:fc:21:
         bb:5c:2b:b6:f0:40:e8:b8:3f:22:9a:50:28:82:3b:8d:03:1e:
         26:e4:57:65:4c:9d:82:40:5c:c0:37:ce:fc:86:e5:49:52:3e:
         93:af:39:01:f1:ea:9f:b5:3d:31:35:69:97:ed:f2:f9:71:2d:
         8f:b9:39:47:f1:49:36:a1:21:7c:dd:53:f6:9c:a2:e4:fe:11:
         f3:86:0a:b9:3a:ee:32:43:a3:89:46:2e:89:68:6a:c5:2f:79:
         c4:fb:f9:a9:78:bd:ee:5f:73:ff:51:a0:7d:1b:5c:3c:2f:8d:
         3c:71:2b:85:af:81:af:77:88:85:70:21:63:a5:56:95:1e:95:
         42:55:4d:91:45:19:1c:62:35:2a:fc:95:26:dd:89:12:7e:98:
         87:31:bb:9e:a4:65:35:51:cd:fb:a9:6b:7b:d7:6f:b5:57:80:
         4e:ad:54:df:37:1c:8a:64:3a:61:23:af:24:8a:2c:d7:73:6a:
         1d:1e:36:11:6d:c7:2d:21:a3:86:17:c5:85:ec:15:8d:da:ff:
         ff:9d:30:fd:9f:3c:0d:0c:aa:39:60:a9:e5:a4:52:bd:2c:5e:
         fd:4d:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:18:29 2025 by rpki-client