This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
File:                     trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json)
Hash identifier:          6lYhVVSGnx0OIoOyyMIoUznor2o2WUaZ8d/bZ0fnmog=
Subject key identifier:   A4:3F:FB:90:C4:F8:7B:84:51:AE:12:DC:19:57:6E:A8:64:02:6A:F6
Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
Certificate issuer:       /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Certificate serial:       09B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
Manifest number:          09AB
Signing time:             Sat 06 Dec 2025 19:13:42 +0000
Manifest this update:     Sat 06 Dec 2025 19:13:42 +0000
Manifest next update:     Sat 13 Dec 2025 19:13:42 +0000
Files and hashes:         1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: vNyf140CZ7C1Lp3gf7/XrFX9P0EDwebkt4yixPSA3Xw=)
                          2: 25295764036811ED9D8E5F3EC4F9AE02.roa (hash: tZaPoTXH9PYuZmi5WQPi/UkCOHiXWsrwkIuE69EcCaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl
                          rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2485 (0x9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
        Validity
            Not Before: Dec  6 19:13:42 2025 GMT
            Not After : Dec 13 19:13:42 2025 GMT
        Subject: CN=69348066-9daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:63:d7:7a:1d:5d:d4:c2:b5:94:f3:92:9f:93:
                    69:88:7d:d5:01:88:d9:ec:ac:ba:ed:fa:69:7d:69:
                    2a:e9:c8:4d:ce:10:fb:a3:85:63:6f:71:2d:4b:d4:
                    72:53:25:bb:57:d8:37:30:46:27:e8:93:7c:e3:c0:
                    ba:a7:4a:ee:9b:36:91:da:1d:83:fe:ae:21:aa:e2:
                    57:bf:37:c7:30:79:d0:86:17:de:aa:a6:7d:58:77:
                    9d:fd:6f:75:a8:30:9c:c7:4c:03:c5:65:37:06:d9:
                    ce:e3:1c:74:20:8d:90:35:fd:f6:45:8e:fb:1c:07:
                    8c:5b:80:ad:91:c0:a7:22:4e:e9:0b:6a:38:e7:92:
                    97:71:5a:9b:51:2d:d4:e5:cf:38:26:26:98:72:c6:
                    91:f8:ce:a3:bf:1e:7d:8e:b8:85:f2:69:b1:75:3d:
                    9e:36:c2:2a:03:fc:93:2c:b2:e6:8c:6c:54:cb:f4:
                    1e:d2:cb:63:9e:94:eb:9f:b5:fb:42:02:bd:c2:e2:
                    23:21:97:de:01:e9:b2:c1:e9:73:e9:a9:f4:10:f1:
                    f3:05:0f:e6:c3:3a:1b:4b:dc:e1:a9:bc:30:cb:9c:
                    03:a4:04:83:5a:38:35:df:b9:5b:38:7c:ab:47:ec:
                    a7:26:57:6c:ff:b6:a8:1b:56:4a:27:5b:26:44:70:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3F:FB:90:C4:F8:7B:84:51:AE:12:DC:19:57:6E:A8:64:02:6A:F6
            X509v3 Authority Key Identifier:
                keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:6a:0b:b3:de:d5:28:aa:1a:b3:f2:63:d9:e4:b8:39:66:8a:
         02:18:24:6f:24:b3:11:b9:6b:5e:1d:b7:8a:c3:7d:d9:e3:5d:
         9a:92:fc:bc:18:8f:6a:5c:38:e5:14:aa:48:bd:19:97:2f:ef:
         0c:11:2a:e4:0a:df:7e:53:68:49:e7:52:ab:ca:72:d7:66:b7:
         47:b4:be:ad:ec:6b:2b:25:90:dd:a2:d3:fe:ce:1d:72:3b:eb:
         93:30:eb:1a:7b:ff:6e:70:01:fb:42:92:28:e9:2d:7f:d3:30:
         1f:1d:49:28:47:67:54:30:42:2a:d8:c1:56:75:34:a3:f1:5a:
         0b:2f:b3:51:e2:e2:98:b1:85:e2:33:41:bc:18:32:37:d4:ca:
         41:0b:f9:5d:7e:7e:6a:86:af:cb:2b:24:c8:25:1f:c4:b7:da:
         62:c2:b2:3b:a3:56:fa:4f:72:de:70:ab:e4:dc:2d:b2:e1:76:
         37:b4:58:13:a2:e2:1c:88:af:8b:bb:fb:7a:d1:cd:e9:96:ac:
         80:ad:30:fe:b3:63:41:c6:64:f3:e4:41:02:97:8a:a7:65:86:
         10:5c:d1:50:34:71:08:7c:8e:1e:fc:84:1f:74:15:24:82:51:
         e3:da:ba:b2:cf:50:bb:0e:d5:77:22:e9:82:37:26:ee:8a:f1:
         5a:80:ca:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0
ODI1OTFDQkMwHhcNMjUxMjA2MTkxMzQyWhcNMjUxMjEzMTkxMzQyWjAYMRYwFAYD
VQQDEw02OTM0ODA2Ni05ZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+mPXeh1d1MK1lPOSn5NpiH3VAYjZ7Ky67fppfWkq6chNzhD7o4Vjb3EtS9Ry
UyW7V9g3MEYn6JN848C6p0rumzaR2h2D/q4hquJXvzfHMHnQhhfeqqZ9WHed/W91
qDCcx0wDxWU3BtnO4xx0II2QNf32RY77HAeMW4CtkcCnIk7pC2o455KXcVqbUS3U
5c84JiaYcsaR+M6jvx59jriF8mmxdT2eNsIqA/yTLLLmjGxUy/Qe0stjnpTrn7X7
QgK9wuIjIZfeAemywelz6an0EPHzBQ/mwzobS9zhqbwwy5wDpASDWjg137lbOHyr
R+ynJlds/7aoG1ZKJ1smRHCELQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQ/+5DE
+HuEUa4S3BlXbqhkAmr2MB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD
NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0I4Qi83QUNDQ0I0MDlDNkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hj
N0FiVE9aU1JXSHBJSlpITHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCaguz3tUoqhqz8mPZ5Lg5ZooCGCRvJLMRuWteHbeKw33Z412akvy8
GI9qXDjlFKpIvRmXL+8MESrkCt9+U2hJ51KrynLXZrdHtL6t7GsrJZDdotP+zh1y
O+uTMOsae/9ucAH7QpIo6S1/0zAfHUkoR2dUMEIq2MFWdTSj8VoLL7NR4uKYsYXi
M0G8GDI31MpBC/ldfn5qhq/LKyTIJR/Et9piwrI7o1b6T3LecKvk3C2y4XY3tFgT
ouIciK+Lu/t60c3plqyArTD+s2NBxmTz5EECl4qnZYYQXNFQNHEIfI4e/IQfdBUk
glHj2rqyz1C7DtV3IumCNybuivFagMq+
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:24:39 2025 by rpki-client