This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
File:                     TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json)
Hash identifier:          n1+HQ9/gshirROvUjEXaNnRoQooJcsS7MrifZ8JTFzA=
Subject key identifier:   7A:F5:CE:4B:41:F8:75:E3:3B:FC:8C:D6:4E:DC:57:B7:1B:B7:E6:13
Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
Certificate issuer:       /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Certificate serial:       110F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
Manifest number:          1105
Signing time:             Sat 06 Dec 2025 16:46:19 +0000
Manifest this update:     Sat 06 Dec 2025 16:46:19 +0000
Manifest next update:     Sat 13 Dec 2025 16:46:19 +0000
Files and hashes:         1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: lJXp3ct5kCURrQEXHD8hu1aAQpYRF7oBDB+6QObj2v8=)
                          2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: 5meBlAmMOmT720cyEIa4c/tv1J4emStSE4Ky/WBp3tQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl
                          rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4367 (0x110f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
        Validity
            Not Before: Dec  6 16:46:19 2025 GMT
            Not After : Dec 13 16:46:19 2025 GMT
        Subject: CN=69345ddb-7633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:9f:91:84:54:08:36:07:88:dd:30:dc:46:
                    1e:de:70:c1:71:a8:18:16:a2:d5:7c:d6:c8:da:95:
                    fd:d1:51:f1:7a:f4:16:94:e0:36:80:ff:41:0d:f4:
                    e5:e5:2c:38:6e:30:43:bb:5b:8f:aa:e4:79:59:07:
                    02:10:ae:1e:ea:c9:43:51:1f:69:07:08:15:94:27:
                    cc:bc:2a:ca:91:fc:26:56:08:ae:96:94:b1:d1:f4:
                    19:e1:8b:2f:0d:eb:8f:be:bc:87:25:48:dc:ed:f4:
                    94:b9:43:1e:03:c7:4e:71:37:f2:73:24:8a:b6:a9:
                    ee:8c:75:e6:a1:11:39:f1:ac:1e:58:b7:51:c6:44:
                    fc:34:06:2e:a1:10:d2:a0:cc:f1:2f:3d:08:23:25:
                    5f:59:b7:55:12:e0:ee:76:a6:5b:8f:54:13:3b:96:
                    2e:81:3b:f5:2a:39:ce:60:b8:df:93:82:0e:6b:2d:
                    0a:f5:7b:c7:64:48:50:1f:c8:e8:ff:27:41:ef:c1:
                    d5:25:78:59:8f:b3:e6:0b:76:de:6c:6b:f6:69:6c:
                    d5:d9:b8:11:76:c1:88:87:e0:8f:5c:40:e8:9b:63:
                    86:73:23:52:63:b8:48:81:ea:e3:8d:ff:cb:f3:df:
                    dc:60:4c:37:16:d3:3f:41:13:7d:4f:75:32:67:51:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F5:CE:4B:41:F8:75:E3:3B:FC:8C:D6:4E:DC:57:B7:1B:B7:E6:13
            X509v3 Authority Key Identifier:
                keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:4f:4c:16:a4:f0:06:75:8f:9d:a8:e4:60:cc:1d:c1:40:77:
         a3:a5:bc:26:d4:fb:12:aa:15:d4:78:1e:20:06:4a:1a:2a:28:
         cc:a0:18:29:48:d2:a3:a7:44:72:91:09:98:5c:73:62:25:9c:
         9c:2e:b8:54:f7:a9:df:f8:f3:49:a6:fd:52:63:26:6d:43:09:
         16:fc:93:6e:cc:a6:64:74:90:c4:98:02:92:f4:78:74:d8:b7:
         63:50:7a:04:46:ad:e5:14:87:11:80:05:05:10:5b:f4:44:ed:
         de:1e:c5:19:b3:04:93:cb:4c:38:83:85:af:30:e7:4b:e7:f6:
         4b:ef:b5:3f:cd:fe:d8:2a:f4:e8:3c:51:bf:51:b2:2b:c4:1d:
         34:3c:7b:24:ab:36:40:69:08:0e:c1:90:9d:54:01:b7:67:20:
         3e:f5:7c:65:de:3b:b6:38:bf:d5:ae:be:8b:6a:bf:f0:b8:5d:
         43:cd:82:6d:6e:92:59:1a:e3:ae:a3:fc:fd:17:55:a8:dc:e1:
         3c:54:4b:17:da:0a:f0:78:37:68:6c:e0:52:e4:c9:d5:62:24:
         52:90:95:ec:0f:f3:a8:25:fa:fa:f6:ee:19:76:66:b8:b6:5e:
         ca:12:d7:17:a7:c6:27:2a:32:1f:50:f8:bc:b7:ed:f1:e5:8f:
         85:ca:78:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:09:32 2025 by rpki-client