This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
File:                     PtImrpJ_g5gXgFRs42LzNp7bJLM.mft (raw, json)
Hash identifier:          0g2fex1Dbc12/6LOGozVHj4IldmCGm0Im3og4bosPRs=
Subject key identifier:   E3:FD:D0:07:E5:85:07:B6:5E:6A:4B:C1:43:41:9C:B5:AD:84:4A:D1
Authority key identifier: 3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3
Certificate issuer:       /CN=A91B92DC/serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
Manifest number:          0229
Signing time:             Fri 05 Dec 2025 00:23:57 +0000
Manifest this update:     Fri 05 Dec 2025 00:23:56 +0000
Manifest next update:     Fri 12 Dec 2025 00:23:56 +0000
Files and hashes:         1: PtImrpJ_g5gXgFRs42LzNp7bJLM.crl (hash: x02ejmDiq20Wbwx5zp5uNoxYY6LiOrAPNHHGKSgPBhM=)
                          2: 3CD61DC8812D11ED9C04940EC4F9AE02.roa (hash: cOiY+eFyn2JhrTs/7WoKVeEfi4A0VW9I3AIS/bx3zYY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl
                          rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B92DC, serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3
        Validity
            Not Before: Dec  5 00:23:56 2025 GMT
            Not After : Dec 12 00:23:56 2025 GMT
        Subject: CN=6932261d-9d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:cc:e3:41:cd:97:0e:68:d2:8b:0f:02:40:
                    64:ac:e1:cb:15:b1:ed:b3:26:18:fe:7a:47:fa:fb:
                    b0:3a:09:d6:a5:78:61:fe:d7:26:82:a3:09:69:68:
                    23:d0:ee:4f:de:7b:30:0d:73:bc:76:c8:02:08:42:
                    1c:22:8a:04:6f:66:3b:62:aa:e0:91:73:44:c8:8a:
                    bd:9b:2d:8c:9f:7a:dd:f0:b9:7a:ca:87:4f:6e:d2:
                    cf:36:df:8a:58:70:ad:67:3a:3f:80:d8:b7:4e:c5:
                    c4:92:9e:9c:b8:ed:79:5e:76:a9:a9:b3:8c:b9:bc:
                    87:1d:eb:9b:7a:5b:34:88:b4:a2:58:62:5a:8a:17:
                    8b:61:5d:cf:1d:8e:9c:91:99:f3:45:67:53:a9:c9:
                    2f:20:5f:de:14:a1:b1:42:a5:1e:44:59:cd:fb:32:
                    2b:f6:24:4d:82:10:c0:92:a5:43:c6:d4:04:7f:d8:
                    35:66:0f:2b:61:db:e3:00:77:38:d9:65:7b:d8:c8:
                    e9:5b:b5:bc:d4:d1:be:ff:34:34:8a:ab:6a:58:dd:
                    d1:7f:47:d9:35:af:a3:6f:7a:f3:f0:9d:ac:82:9f:
                    7f:38:ab:cb:27:90:a0:20:42:dd:5d:7d:b6:d6:11:
                    04:34:61:78:b5:79:31:0a:8d:66:16:97:43:c2:17:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FD:D0:07:E5:85:07:B6:5E:6A:4B:C1:43:41:9C:B5:AD:84:4A:D1
            X509v3 Authority Key Identifier:
                keyid:3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:41:75:20:26:ba:32:c9:ec:68:b0:bf:2b:00:fd:8a:e0:7a:
         de:fb:f2:52:3a:57:53:eb:22:94:c8:b6:97:83:33:f1:c0:ad:
         ac:54:02:48:40:0d:b5:31:a5:c8:79:71:f3:3e:1f:02:52:67:
         ff:01:70:04:67:0a:f7:dd:92:1f:3a:75:0f:e6:ca:00:75:10:
         ce:d3:1e:df:f3:d5:70:82:5c:81:11:ac:33:ba:63:33:74:7b:
         52:35:c8:c5:e3:dd:0b:84:24:ce:17:67:84:8b:18:c6:12:98:
         d9:e6:1a:05:46:62:f0:41:21:db:78:56:63:0f:4d:cf:c7:a8:
         d9:70:ec:8f:09:8e:80:64:db:20:c4:31:09:20:42:6d:28:2b:
         96:91:7c:2b:32:3a:6f:b5:dd:87:91:42:d5:cc:66:84:c3:a1:
         16:f7:f5:5d:ff:c4:4e:1d:2f:93:c0:9a:24:76:e1:44:14:b3:
         6e:49:6a:90:0c:8c:49:bc:68:40:47:94:1c:83:8a:5f:cc:ab:
         de:dc:ed:4d:35:55:8f:36:43:6f:57:82:fd:a5:9b:5b:b8:80:
         92:d8:c1:63:f0:f6:f6:ef:e0:1f:74:44:c1:cd:36:be:64:5f:
         72:aa:25:3f:dd:14:ad:1b:22:f9:86:0b:0e:a3:2b:3d:6d:ad:
         ca:15:07:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:53:11 2025 by rpki-client