This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
File:                     TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json)
Hash identifier:          /fADo2Kp2EOCstexsn4IoyiJWWevBmbpcG4a8qMYljk=
Subject key identifier:   13:C6:B4:BB:51:BC:46:FE:27:39:D1:96:73:DD:BF:57:D1:2F:2E:18
Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
Certificate issuer:       /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Certificate serial:       05AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
Manifest number:          05A2
Signing time:             Thu 04 Dec 2025 21:49:32 +0000
Manifest this update:     Thu 04 Dec 2025 21:49:31 +0000
Manifest next update:     Thu 11 Dec 2025 21:49:31 +0000
Files and hashes:         1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: ltWy+JGX3sFgeWdIjJkAZxauiRKev3LG3NMuptR88pc=)
                          2: 46AF15AA9F6D11F09AF30234C4F9AE02.roa (hash: S07N/8Ez+PeXS+KaKtYo/aw1ppaoCrg3SZIV/r7xqcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
                          rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1454 (0x5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
        Validity
            Not Before: Dec  4 21:49:31 2025 GMT
            Not After : Dec 11 21:49:31 2025 GMT
        Subject: CN=693201eb-7dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:55:26:e2:a1:78:63:ce:c6:6e:37:b5:8b:5f:
                    84:8b:c0:46:9a:1a:e2:b3:d1:45:65:6a:a2:e9:a6:
                    95:52:f4:34:54:12:2f:08:de:ac:43:b9:4d:a1:e5:
                    e9:b7:00:3e:4a:7d:5b:49:5d:b3:dd:8e:00:37:38:
                    4a:02:18:6b:ae:e4:e6:b6:a2:c9:42:46:c0:7a:58:
                    f1:66:73:55:34:61:e8:83:c7:94:35:9c:7d:48:06:
                    3d:2e:a7:19:fc:06:2c:2a:df:08:00:52:a2:00:1c:
                    52:5e:af:73:c1:6e:e8:ee:c3:48:89:43:7b:b3:0b:
                    d2:ad:02:38:92:b2:8e:bd:60:08:18:be:d6:d3:b3:
                    08:37:d9:8e:f6:29:1e:15:50:6e:4b:b8:a6:7d:d2:
                    19:11:35:15:ab:71:9f:7e:5a:63:5d:bb:a9:53:a3:
                    3d:af:b9:52:cd:35:fe:15:62:af:1f:e5:a1:8b:63:
                    60:1d:86:38:90:7c:c3:3d:2f:7b:38:51:b1:15:98:
                    50:df:a6:4d:d6:9d:e5:57:5b:e9:8e:ac:95:60:14:
                    52:ce:84:40:f1:c6:f1:28:9a:69:ab:70:77:fb:89:
                    fd:79:3f:60:8a:e6:85:f3:f3:ba:4d:66:bd:54:79:
                    52:68:5a:07:80:96:b1:04:d9:17:f4:8e:1e:82:da:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C6:B4:BB:51:BC:46:FE:27:39:D1:96:73:DD:BF:57:D1:2F:2E:18
            X509v3 Authority Key Identifier:
                keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:69:a2:f6:65:d0:e6:a8:d5:e7:93:a7:f2:cc:a0:39:35:4f:
         e0:fa:51:cd:e5:69:da:dc:29:8e:e3:e6:af:a9:50:df:db:48:
         0e:ab:14:3d:08:9f:80:d7:2a:c1:8f:a9:fd:94:1d:d8:88:71:
         58:53:7f:ab:4a:a4:ea:75:aa:b7:ca:9b:4e:9f:22:a5:45:d8:
         c8:58:2c:ca:64:f1:20:92:1e:f0:d4:11:c2:93:ab:10:62:ee:
         ef:d3:ec:3e:c4:a9:0c:62:37:d5:0f:9c:c8:6d:50:4f:bd:d9:
         b3:fd:8f:1b:44:2f:3f:a0:78:06:14:fe:ba:51:76:98:0a:c8:
         34:44:1f:59:d6:4b:ed:b2:bc:4f:f9:60:4a:a8:93:5e:18:b4:
         97:45:da:e6:9b:91:33:8d:f1:a5:ee:b5:16:97:59:3c:96:89:
         8b:37:8d:39:f4:91:7e:5a:71:53:0d:91:d5:6b:0f:ff:79:ee:
         a2:6c:0a:64:29:3e:44:5e:04:cb:94:35:4c:8c:4e:80:3e:be:
         81:47:65:02:1b:93:35:bb:63:23:15:f4:5c:18:be:ab:e5:ac:
         10:23:1d:4d:78:73:c6:5c:12:33:db:c3:11:32:51:4d:45:68:
         be:a8:19:4a:1a:14:bf:8d:d0:61:7c:c5:91:23:95:e5:19:40:
         f2:b2:41:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw
QjVBM0NERDAwHhcNMjUxMjA0MjE0OTMxWhcNMjUxMjExMjE0OTMxWjAYMRYwFAYD
VQQDEw02OTMyMDFlYi03ZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2VUm4qF4Y87Gbje1i1+Ei8BGmhris9FFZWqi6aaVUvQ0VBIvCN6sQ7lNoeXp
twA+Sn1bSV2z3Y4ANzhKAhhrruTmtqLJQkbAeljxZnNVNGHog8eUNZx9SAY9LqcZ
/AYsKt8IAFKiABxSXq9zwW7o7sNIiUN7swvSrQI4krKOvWAIGL7W07MIN9mO9ike
FVBuS7imfdIZETUVq3GfflpjXbupU6M9r7lSzTX+FWKvH+Whi2NgHYY4kHzDPS97
OFGxFZhQ36ZN1p3lV1vpjqyVYBRSzoRA8cbxKJppq3B3+4n9eT9giuaF8/O6TWa9
VHlSaFoHgJaxBNkX9I4egtqiAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPGtLtR
vEb+JznRlnPdv1fRLy4YMB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0
N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkMxNC8yMkRBRUNDOEY0N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02
OTljaWtEZDY3YzBMV2p6ZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpaaL2ZdDmqNXnk6fyzKA5NU/g+lHN5Wna3CmO4+avqVDf20gOqxQ9
CJ+A1yrBj6n9lB3YiHFYU3+rSqTqdaq3yptOnyKlRdjIWCzKZPEgkh7w1BHCk6sQ
Yu7v0+w+xKkMYjfVD5zIbVBPvdmz/Y8bRC8/oHgGFP66UXaYCsg0RB9Z1kvtsrxP
+WBKqJNeGLSXRdrmm5EzjfGl7rUWl1k8lomLN4059JF+WnFTDZHVaw//ee6ibApk
KT5EXgTLlDVMjE6APr6BR2UCG5M1u2MjFfRcGL6r5awQIx1NeHPGXBIz28MRMlFN
RWi+qBlKGhS/jdBhfMWRI5XlGUDyskE9
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:01:51 2025 by rpki-client