This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
File:                     TxgnPYhVbjodbtgXi4CVKNmQppE.mft (raw, json)
Hash identifier:          q3SoSfihH04dow8cDXoI/AmOViylthDXF2EjUB3G5B8=
Subject key identifier:   6B:34:24:0F:60:EB:44:8E:00:25:13:40:D1:22:E3:4F:93:CF:F0:E9
Authority key identifier: 4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91
Certificate issuer:       /CN=A9127B24/serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
Manifest number:          D3
Signing time:             Fri 05 Dec 2025 03:40:46 +0000
Manifest this update:     Fri 05 Dec 2025 03:40:45 +0000
Manifest next update:     Fri 12 Dec 2025 03:40:45 +0000
Files and hashes:         1: TxgnPYhVbjodbtgXi4CVKNmQppE.crl (hash: X8Gm5eLhgCP5y4RgeCi4kwD8FkHRklsusgMmwbcrQ1Y=)
                          2: 31A0A22E803B11F0BAF8A92DC4F9AE02.roa (hash: M85jCIBYsps3LwVn3AYQZG0OyQL6Ba7RT/TX3KFmVeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl
                          rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127B24, serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691
        Validity
            Not Before: Dec  5 03:40:45 2025 GMT
            Not After : Dec 12 03:40:45 2025 GMT
        Subject: CN=6932543e-0161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2b:e4:69:4b:86:03:59:cc:12:17:a9:35:63:
                    d1:7a:1c:0c:58:5a:a3:0e:73:f7:3b:44:ea:ae:59:
                    c6:7c:40:9f:49:14:5a:ff:58:96:58:10:73:c5:5d:
                    d9:9d:6e:c9:61:e2:03:41:65:f5:c2:94:14:c7:7f:
                    0b:e3:1e:df:8e:65:65:7a:4a:ae:66:54:68:92:6e:
                    e9:c5:d3:dd:1d:89:b3:5d:e4:fa:23:1c:11:bd:19:
                    ef:fe:9a:0e:71:1f:e0:4c:89:6e:e1:62:2e:8d:52:
                    31:75:99:44:58:8d:1c:b5:9a:1d:14:ba:cf:0c:75:
                    f7:95:4f:6d:a2:d9:e4:a4:d3:62:73:0a:cf:99:33:
                    dc:51:76:95:78:5b:97:21:72:1d:17:1f:cb:88:b4:
                    f2:44:07:f7:19:a2:66:f1:e2:c8:94:6d:4b:b1:27:
                    3b:1a:10:0c:da:0c:ee:c5:94:90:49:26:7e:f8:4c:
                    9f:55:74:a6:b7:ad:86:75:a9:11:d6:28:53:b7:7f:
                    2e:7c:b9:60:b6:0c:38:dc:a8:86:89:94:cd:b3:81:
                    69:f1:60:a2:a7:cd:f6:5d:ff:0a:0e:97:d7:c9:98:
                    5d:58:73:29:cb:20:0e:b7:cf:ac:8d:ff:45:8e:04:
                    54:05:8c:e9:8c:7f:d4:f6:8b:0b:2b:67:c2:e0:b4:
                    8e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:34:24:0F:60:EB:44:8E:00:25:13:40:D1:22:E3:4F:93:CF:F0:E9
            X509v3 Authority Key Identifier:
                keyid:4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:09:a3:e8:5b:7d:a5:e8:d6:93:b6:d7:65:a2:86:4e:78:bd:
         87:57:38:70:54:0a:f4:e4:7f:f0:8a:2f:00:46:29:28:de:35:
         42:54:99:ed:72:14:fd:fe:6f:4f:d0:66:c9:de:b8:30:86:08:
         5b:d3:0c:5e:ed:f2:6f:cf:3f:fa:ab:fe:46:da:7d:18:ad:00:
         36:c3:05:08:0d:cd:e4:7b:f1:81:96:6c:e5:c4:f0:bb:8b:a0:
         e5:8a:8c:e8:6e:59:09:4b:9d:6c:cf:8c:2b:23:8e:8e:04:ca:
         5c:ca:f4:ad:d6:5e:8e:d0:b7:ec:57:57:47:40:6d:3d:4c:9e:
         91:89:63:09:06:06:a9:0e:3a:1a:e4:ce:9c:da:00:3a:ec:50:
         bc:7a:49:83:6a:8c:05:14:ff:be:0d:9f:cb:be:c5:47:b8:75:
         e8:97:50:c3:be:5e:ef:65:e9:3e:a6:c9:5d:f3:03:94:43:6a:
         ef:87:3f:a0:07:a6:4e:b5:1f:32:73:71:7c:d1:e6:23:60:8e:
         db:52:a6:c8:81:52:f1:e3:cc:c7:52:70:98:06:f7:83:80:df:
         75:b9:fe:1a:c8:1e:13:d1:1d:59:81:f8:cb:c8:b9:1d:2e:14:
         ce:c1:b0:05:92:e7:44:d2:70:0d:8a:ce:0e:5a:e1:bc:be:fa:
         3a:98:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:43 2025 by rpki-client