This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File:                     PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier:          QztmQlLXmsV5bupPkd3KXhhrKl/9Av3gLd+RmTR46LI=
Subject key identifier:   B8:84:01:48:29:DC:BA:05:A6:DA:90:0B:0A:7C:6F:BA:6E:1B:D4:44
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer:       /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial:       2D4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number:          2D16
Signing time:             Sat 06 Dec 2025 15:19:13 +0000
Manifest this update:     Sat 06 Dec 2025 15:19:12 +0000
Manifest next update:     Sat 13 Dec 2025 15:19:12 +0000
Files and hashes:         1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: E05ALEF8nF8Sml7uBhBydiHgbgDonoL+3Xttj0GT4L4=)
                          2: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: utIpka2m9g7rscMzHbDTXQACJUoOh2JMTGT7Uylt93Q=)
                          3: 14820EDE248611EEB600357DC4F9AE02.roa (hash: uoxhoDVDIdZeIGpmPVYh0+yT+vTsXXRnS1XpZHEpwfY=)
                          4: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: wnP6JYClG7n+PNc2XDZbazMvuyyzMgyJZ4q4a/lxzfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11597 (0x2d4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
        Validity
            Not Before: Dec  6 15:19:12 2025 GMT
            Not After : Dec 13 15:19:12 2025 GMT
        Subject: CN=69344970-f040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:aa:14:75:4e:0d:3c:49:00:56:73:4f:ca:
                    46:4d:3f:24:56:67:65:34:9b:c7:e2:de:4c:97:d7:
                    bd:84:90:58:64:5b:c0:88:a9:a1:eb:0f:79:ec:f8:
                    13:dc:61:3d:69:13:22:dc:2b:1c:1e:c0:d2:a9:75:
                    d4:3a:2a:28:60:f1:0d:2c:05:44:6b:85:3a:53:0b:
                    8b:16:e2:b5:b8:6a:6d:2c:ae:85:e0:68:9c:d4:b8:
                    89:de:19:a3:f1:e8:50:09:16:92:b8:d4:76:f9:07:
                    6c:23:40:76:3a:63:a2:bd:9c:5f:30:4e:0e:26:3d:
                    36:f3:fd:4f:74:8e:fd:84:5b:30:0d:5e:38:16:c4:
                    b4:1b:7b:de:82:80:b4:5b:e2:3f:76:0b:8a:0f:69:
                    2c:53:77:64:31:bb:ed:9e:8f:71:46:28:31:c1:b2:
                    27:19:fc:bc:34:1d:6d:1c:e8:9a:99:d3:a7:fb:99:
                    8c:44:5d:6d:df:c0:c7:5a:24:5d:1f:cd:a4:a3:20:
                    fe:a2:e4:b7:bf:1c:d2:8f:25:14:18:c6:a4:a2:7d:
                    f9:fb:2d:c6:bb:5e:f4:d0:74:e7:cc:a1:df:03:a7:
                    5f:f8:4f:09:68:c2:8f:95:5e:1e:b7:86:52:5d:84:
                    98:ce:b2:94:34:e8:8c:4d:dd:ee:66:44:67:a9:31:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:01:48:29:DC:BA:05:A6:DA:90:0B:0A:7C:6F:BA:6E:1B:D4:44
            X509v3 Authority Key Identifier:
                keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6b:74:cc:86:70:9b:93:cf:b0:2d:c8:03:95:f3:28:e3:8b:
         b8:89:4e:f6:07:ea:0d:a9:0a:b5:ac:82:74:18:a5:24:7f:97:
         9f:c1:45:b5:21:4d:c8:14:35:5a:b8:9a:25:42:12:ba:eb:e1:
         8f:16:54:e0:1c:d7:82:3d:f3:41:b2:54:62:b0:b3:27:49:c8:
         cc:42:36:09:16:b8:79:bd:9b:53:a5:c2:b4:8c:d9:7e:f3:29:
         1b:bf:51:26:4a:be:ef:60:4f:49:42:1c:63:5c:89:3f:39:61:
         6b:f9:95:24:8d:24:8f:5b:9f:90:4f:cd:b2:ff:14:87:14:70:
         39:ce:93:fd:ee:08:9f:21:a6:e1:47:fa:4e:7c:7f:61:b6:a6:
         a2:25:f6:3a:05:8f:01:f9:95:e6:37:4a:77:90:22:01:36:c7:
         e2:0c:a5:79:6b:12:e4:2b:a4:5a:90:fe:14:3e:c5:c0:97:af:
         49:1f:82:84:91:39:db:ea:e3:73:7c:a2:da:4e:c8:68:17:6d:
         bf:23:68:cd:98:2d:46:a4:1c:df:09:6c:52:c8:b9:7e:67:22:
         61:f8:9f:39:9e:32:0c:34:15:17:2d:f2:71:ce:9b:55:cd:13:
         a8:02:30:bf:d2:01:2c:d5:1b:4f:4c:47:9e:c3:35:ba:3e:6e:
         df:94:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:15:46 2025 by rpki-client