This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File:                     rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier:          zelXcgtyubTVPOKcC1hf6zuQGkyHuUAoKjzmGSRwTWA=
Subject key identifier:   5D:1E:66:F9:1E:78:BD:49:3C:C4:24:9C:50:CE:BD:07:D3:CC:38:C0
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0F4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number:          0F45
Signing time:             Sat 06 Dec 2025 17:03:00 +0000
Manifest this update:     Sat 06 Dec 2025 17:02:59 +0000
Manifest next update:     Sat 13 Dec 2025 17:02:59 +0000
Files and hashes:         1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: 0L1D4A4OfQaqLkKUq7IbSONQFfDt/ARSzlFLRBHkY2Y=)
                          2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: LbtoKXQWVtjM8PuzryWfj67xT/YA5C3Pl76nVAvV2lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3918 (0xf4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: Dec  6 17:02:59 2025 GMT
            Not After : Dec 13 17:02:59 2025 GMT
        Subject: CN=693461c3-66b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:15:0c:9a:a4:43:7c:7a:f0:ad:77:c4:50:
                    ee:46:c0:ca:a8:69:20:b1:19:9f:67:d1:f6:2b:68:
                    48:85:28:a5:ca:f1:fa:9d:cf:9a:99:2f:a0:60:59:
                    f4:5e:59:06:95:13:36:62:4c:d6:f6:ad:34:21:a3:
                    99:1d:76:6e:6f:a6:7f:5c:73:d7:61:20:0c:d4:1e:
                    f5:72:92:46:98:f4:09:08:a3:c4:d6:20:7c:37:54:
                    e1:e0:92:72:a8:ec:66:34:d7:04:91:c8:bd:51:e5:
                    ab:43:af:3b:53:d0:a0:ef:04:9e:df:fd:34:12:13:
                    d0:61:68:80:e1:07:2b:61:33:ac:67:42:2a:55:c3:
                    3b:2e:dd:73:62:ed:6b:6a:79:ce:c3:33:0f:0a:f6:
                    ca:70:58:30:be:ea:a0:73:44:b4:44:06:53:ac:1e:
                    32:55:cc:7a:b9:8f:64:2b:80:a5:24:23:13:7f:49:
                    aa:b6:8d:06:b8:13:3a:03:03:9b:ba:54:ea:0f:b7:
                    19:64:93:87:d1:15:9a:ad:4f:43:45:ea:1c:f1:2d:
                    08:97:d8:14:b5:e3:b4:24:a7:0f:ab:a4:47:b5:fa:
                    60:38:ba:ce:f2:77:a9:bd:56:e8:ca:7c:5f:80:f9:
                    21:20:c0:92:e6:b7:fc:cd:ce:0d:a1:fe:4e:cd:fc:
                    09:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1E:66:F9:1E:78:BD:49:3C:C4:24:9C:50:CE:BD:07:D3:CC:38:C0
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5e:15:03:ba:6e:20:5d:97:7e:07:41:8f:21:a2:4a:eb:30:
         cb:cc:6f:2f:38:2f:71:93:24:9b:ba:c3:89:ab:fd:7f:db:9f:
         29:87:bd:b5:60:51:b0:b5:79:03:cb:f3:0e:e1:cf:70:68:f1:
         51:9f:83:17:45:67:a2:c1:97:5c:77:db:5c:37:bf:a3:28:1b:
         9a:6b:19:cb:cd:f8:48:dd:7e:8c:99:5c:dc:b4:05:f1:da:2f:
         99:8d:42:d9:93:6a:a0:5a:a7:f2:10:4b:83:31:04:96:d9:8d:
         43:97:21:6a:57:b6:5b:e0:2e:16:82:20:d3:8a:8a:72:62:e4:
         08:3b:24:f4:ea:cd:77:f4:03:20:fe:c0:9c:0d:4c:f1:43:46:
         ad:17:5f:3f:72:48:c7:d7:33:d4:03:e7:e6:9b:a0:b0:37:80:
         bb:5f:9c:2b:9c:23:e5:f1:47:d3:18:d9:a3:23:1c:bc:28:95:
         bb:27:95:4c:50:ed:8d:1c:7f:c8:17:ca:29:43:9b:12:01:31:
         52:4a:e9:00:b1:04:92:03:d3:9d:c3:15:e3:9a:fe:31:00:05:
         22:5c:69:7d:f8:65:16:c4:8c:21:e7:87:7e:6e:65:f0:9c:bd:
         fd:0d:7b:c4:88:5d:07:bd:1a:7c:ed:12:0b:76:6f:5f:e1:4b:
         08:95:3d:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQyNEQxMTAvBgNVBAUTKEFFREI5RjdFMzg1RkE2NDQzNkQzODRCQ0I3QjkyRTA5
NDY5NTU0MzMwHhcNMjUxMjA2MTcwMjU5WhcNMjUxMjEzMTcwMjU5WjAYMRYwFAYD
VQQDEw02OTM0NjFjMy02NmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA05AVDJqkQ3x68K13xFDuRsDKqGkgsRmfZ9H2K2hIhSilyvH6nc+amS+gYFn0
XlkGlRM2YkzW9q00IaOZHXZub6Z/XHPXYSAM1B71cpJGmPQJCKPE1iB8N1Th4JJy
qOxmNNcEkci9UeWrQ687U9Cg7wSe3/00EhPQYWiA4QcrYTOsZ0IqVcM7Lt1zYu1r
annOwzMPCvbKcFgwvuqgc0S0RAZTrB4yVcx6uY9kK4ClJCMTf0mqto0GuBM6AwOb
ulTqD7cZZJOH0RWarU9DReoc8S0Il9gUteO0JKcPq6RHtfpgOLrO8nepvVboynxf
gPkhIMCS5rf8zc4Nof5OzfwJKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0eZvke
eL1JPMQknFDOvQfTzDjAMB8GA1UdIwQYMBaAFK7bn344X6ZENtOEvLe5LglGlVQz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDI0RC83NTExMDlBQTgw
NUYxMUU5OEEyMDVCMEJDNEY5QUUwMi9ydHVmZmpoZnBrUTIwNFM4dDdrdUNVYVZW
RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J0dWZmamhmcGtRMjA0Uzh0N2t1Q1VhVlZETS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDI0RC83NTExMDlBQTgwNUYxMUU5OEEyMDVCMEJDNEY5QUUwMi9ydHVmZmpoZnBr
UTIwNFM4dDdrdUNVYVZWRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaXhUDum4gXZd+B0GPIaJK6zDLzG8vOC9xkySbusOJq/1/258ph721
YFGwtXkDy/MO4c9waPFRn4MXRWeiwZdcd9tcN7+jKBuaaxnLzfhI3X6MmVzctAXx
2i+ZjULZk2qgWqfyEEuDMQSW2Y1DlyFqV7Zb4C4WgiDTiopyYuQIOyT06s139AMg
/sCcDUzxQ0atF18/ckjH1zPUA+fmm6CwN4C7X5wrnCPl8UfTGNmjIxy8KJW7J5VM
UO2NHH/IF8opQ5sSATFSSukAsQSSA9OdwxXjmv4xAAUiXGl9+GUWxIwh54d+bmXw
nL39DXvEiF0HvRp87RILdm9f4UsIlT00
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:18:29 2025 by rpki-client