This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
File:                     Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json)
Hash identifier:          bndGQRZKawZozo1ucdu3EujNwvk4I8vFl7R+a9MhEj0=
Subject key identifier:   CC:9B:F5:17:76:B0:BD:D4:5F:B5:33:41:48:0C:42:6C:83:A6:90:68
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Certificate issuer:       /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial:       0834
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
Manifest number:          0830
Signing time:             Thu 04 Dec 2025 19:52:24 +0000
Manifest this update:     Thu 04 Dec 2025 19:52:24 +0000
Manifest next update:     Thu 11 Dec 2025 19:52:24 +0000
Files and hashes:         1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: Pq8ByuKRslvXAFKHhofew32oYyxZotCqju+092nIHSU=)
                          2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: /F/gYX/L863YX0w0vTOKFM1DOvBiDwzCSuLCvUmNqSk=)
                          3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: CJo3Y0RDZ6WOA9pdaOgsipKbuYOBA79WFUuGjeqh4aQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2100 (0x834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
        Validity
            Not Before: Dec  4 19:52:24 2025 GMT
            Not After : Dec 11 19:52:24 2025 GMT
        Subject: CN=6931e678-9bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:a3:37:3f:ef:a7:dc:d5:d3:29:bf:49:93:
                    ae:a7:c1:b3:fc:48:bc:78:2d:de:bb:77:38:d7:8e:
                    bf:f0:75:c9:91:6f:b2:44:d7:24:3e:3c:7f:26:8d:
                    f2:e3:87:66:7d:d5:96:00:d2:f8:a4:bb:44:5f:26:
                    73:c4:42:87:20:53:68:c7:28:cf:ed:5a:a9:97:7d:
                    09:00:54:bf:3e:3d:f6:33:13:0a:e3:3d:a0:84:2d:
                    92:20:26:be:3a:c3:43:8b:8a:11:fb:d9:a4:cf:f2:
                    2b:7c:88:72:a9:c4:8e:51:82:e8:73:d6:89:83:56:
                    13:e3:8c:69:8e:43:c6:d7:0d:80:23:31:d8:70:d8:
                    e8:4b:60:ca:34:a0:b4:2c:70:65:28:42:4e:2d:b8:
                    83:45:3f:97:01:8a:71:bf:59:92:98:99:a6:5d:99:
                    2e:35:98:ee:26:36:a0:a8:90:5c:82:b0:bf:2e:c3:
                    7f:00:3a:3b:9b:a8:39:d1:1a:eb:21:10:7f:48:9e:
                    ac:47:d8:9e:cc:1d:c5:86:f3:33:a7:a2:b5:57:6b:
                    b1:0f:aa:13:28:b2:31:39:d4:85:5d:60:4d:9c:6a:
                    0d:4e:c3:47:73:86:3b:32:9f:f2:85:18:4c:8e:a2:
                    00:3f:13:cb:cb:af:c2:81:5f:74:c7:ba:68:00:20:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9B:F5:17:76:B0:BD:D4:5F:B5:33:41:48:0C:42:6C:83:A6:90:68
            X509v3 Authority Key Identifier:
                keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:50:41:cc:ed:b2:ce:83:68:96:52:c7:a7:b7:55:16:14:89:
         f2:97:b5:fe:7f:1d:d2:5d:33:4e:52:b9:5d:50:7a:52:0f:62:
         06:8c:bc:2a:e0:0c:1b:ea:8c:1e:4b:f8:5f:36:ee:ff:88:61:
         6e:67:5c:bd:5a:72:d7:ce:ad:81:d0:07:bb:c4:b1:5c:c2:fb:
         57:c2:d6:be:12:05:b3:b7:2b:89:8b:43:f8:bb:47:fa:4b:5a:
         c3:71:60:b3:09:76:eb:3c:a8:4d:9a:17:ca:2a:e2:ba:b3:2c:
         67:71:51:d0:8d:f2:99:ff:0b:82:60:7c:b6:6c:8c:24:d2:a2:
         58:63:11:b1:7a:3c:e9:de:dc:18:5c:f7:23:f5:45:f6:d8:a5:
         36:08:f9:73:c3:24:47:ef:31:3e:36:28:be:50:c5:8d:8c:96:
         e3:7d:28:f7:be:13:d9:c3:3a:d6:31:1f:cb:41:44:56:3f:29:
         b1:7b:ae:cf:08:bc:b0:b0:37:b6:df:d9:ea:57:b0:fe:f7:3c:
         bf:6a:c2:5f:97:b2:ba:83:30:c7:9a:a5:65:0f:57:94:05:e0:
         89:7a:8c:8d:04:85:15:f2:84:32:2e:a8:78:f9:2a:94:2c:dc:
         c0:64:3d:b2:a1:97:d9:cd:de:53:32:83:48:ed:47:14:29:23:
         79:5c:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:30 2025 by rpki-client