This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
File:                     pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json)
Hash identifier:          9i9pIAFH77pJ07B9GRymtVIGSkjybZv+8fELHxxmCUo=
Subject key identifier:   0E:63:0E:A1:69:8D:6D:6C:59:DB:2E:FB:B3:A2:A7:57:73:5E:39:79
Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
Certificate issuer:       /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
Manifest number:          020E
Signing time:             Sun 25 Jan 2026 01:36:27 +0000
Manifest this update:     Sun 25 Jan 2026 01:36:26 +0000
Manifest next update:     Sun 01 Feb 2026 01:36:26 +0000
Files and hashes:         1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: sL0IGN/pntU03CSviO6mHITJU3Tj49IW1k3CKR4hwNA=)
                          2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: gY3dwR5+r1G24a+7Zdvb4cHyMdDeob3RTrrDa7nI1A4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl
                          rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDADE, serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
        Validity
            Not Before: Jan 25 01:36:26 2026 GMT
            Not After : Feb  1 01:36:26 2026 GMT
        Subject: CN=6975739b-0b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:bb:93:d6:00:13:32:35:51:b3:a0:75:01:
                    0d:c3:32:3e:1d:d4:6d:37:fc:96:f5:1d:19:bc:fa:
                    2c:a0:dc:3e:b1:05:e8:68:32:e0:76:dd:6d:3f:0f:
                    b2:39:97:a9:ae:e9:b9:36:2e:b9:89:72:ce:03:74:
                    4d:17:4b:e6:a3:72:2f:51:08:36:ab:ac:8c:37:0f:
                    ed:49:80:71:7b:a5:68:51:a8:2b:6c:4a:83:35:f8:
                    a3:6b:ee:62:0b:e9:7f:8a:1e:ee:35:a4:d3:dc:5d:
                    f3:44:ae:98:ef:27:7a:e8:4e:2e:a8:ea:79:e5:c9:
                    53:8c:56:fe:ba:94:cd:dd:fc:f2:8b:6e:c8:45:79:
                    71:a7:dc:21:6f:09:54:66:2e:79:09:58:fd:30:87:
                    b7:b3:72:25:45:d2:a9:16:94:83:02:98:ab:38:38:
                    33:01:64:3a:97:d8:e0:34:8b:98:54:71:ee:73:d7:
                    9a:88:bf:81:6d:36:38:14:b1:10:b0:a4:4b:06:97:
                    72:0f:6d:cb:63:a9:f3:70:27:7e:91:98:77:e4:30:
                    4e:62:74:96:ba:eb:be:dc:b9:62:86:8c:cd:88:44:
                    9d:9f:57:f2:6d:1f:8a:0f:a3:6a:81:bd:e8:70:89:
                    94:a6:c4:fd:af:b7:ab:2a:b9:83:dc:c5:27:54:d0:
                    40:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:63:0E:A1:69:8D:6D:6C:59:DB:2E:FB:B3:A2:A7:57:73:5E:39:79
            X509v3 Authority Key Identifier:
                keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:bc:8d:e8:35:d6:0b:29:ea:cf:ef:9f:77:16:94:77:f5:55:
         57:e6:ed:e7:f1:89:b3:c8:20:be:bb:3c:89:05:5b:ab:31:97:
         e3:77:f6:ef:37:85:fe:fd:f7:99:47:f6:b3:7d:f5:df:c6:69:
         e8:8f:e0:44:e1:ce:42:c2:ee:b1:7a:cc:2f:ee:bb:2a:e9:fc:
         21:f2:61:47:f7:ce:9a:70:e5:9f:6e:50:e1:54:3f:0d:ad:f6:
         22:39:6c:cd:bd:36:2a:60:51:82:02:28:36:44:90:c8:d4:38:
         a9:2a:cf:c9:93:4e:82:e2:e1:5b:2b:6d:f8:a4:42:50:83:7a:
         94:cf:9e:51:ff:5c:02:de:79:df:d3:37:0b:f0:e0:2b:bd:9a:
         9a:9f:59:10:de:09:a1:6f:95:dc:c5:6e:65:d2:65:23:5a:22:
         8c:d9:35:a3:01:08:b9:d9:c8:1b:84:3d:e6:5d:e2:09:54:76:
         fa:8d:e4:72:8b:32:0c:09:d6:32:68:34:4a:91:21:c5:82:15:
         ed:23:22:11:1f:83:20:d2:6a:dc:ea:99:16:5e:a5:d6:b4:c7:
         73:36:f7:ed:82:dd:01:59:e2:47:02:97:a7:55:29:dc:20:4f:
         2b:06:d5:80:c8:8b:63:a8:30:1e:99:7f:3f:ca:f2:38:0e:51:
         6f:2d:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:15 2026 by rpki-client