This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File:                     TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier:          hOzS4TwJbDfth0hQ6ZHd+izNNGZqI//BP/fqDIXEIK8=
Subject key identifier:   E7:BB:19:B3:79:8F:7A:42:77:2E:84:B9:22:DF:19:2D:48:C2:EB:66
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       03ED
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number:          03E8
Signing time:             Sat 06 Dec 2025 23:12:31 +0000
Manifest this update:     Sat 06 Dec 2025 23:12:30 +0000
Manifest next update:     Sat 13 Dec 2025 23:12:30 +0000
Files and hashes:         1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: YNajteMlMKzsd425Q9HugODJftB+P3LuLPP0mGHTcjs=)
                          2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: ypQGr8fcGrxnVWfQ2RrFsZZ4R7tmsDgEITmj6bx0ScA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Dec  6 23:12:30 2025 GMT
            Not After : Dec 13 23:12:30 2025 GMT
        Subject: CN=6934b85f-5cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:87:8f:af:26:82:43:99:f2:4c:3f:33:c2:
                    f6:57:81:20:e8:7e:c9:3a:30:86:14:ed:51:c4:bc:
                    c0:c8:0e:20:88:5e:cf:cd:21:88:8c:70:f1:65:a4:
                    66:e7:de:a9:06:3f:e0:e2:4a:28:96:f5:57:56:af:
                    1c:87:85:65:be:54:fc:19:9c:15:b5:f9:5c:1c:a5:
                    4c:47:cf:c4:aa:bf:24:90:31:57:e7:2f:0f:11:00:
                    38:6c:da:f3:85:3b:8c:62:21:2d:5f:8d:19:8f:e1:
                    df:55:bf:d1:9c:fe:db:87:57:00:3a:6a:5c:99:71:
                    77:4e:5f:1f:0e:76:3c:a0:17:fb:d5:b5:d0:7e:4e:
                    e2:28:a9:43:08:3f:63:ea:a5:09:b0:d7:e8:e6:e6:
                    df:78:da:1b:bc:c8:f4:1e:90:4d:84:08:d9:ca:d4:
                    9a:13:99:c9:56:3c:78:05:9a:91:75:02:39:d9:f7:
                    fd:e1:ed:30:60:db:d4:63:3d:1b:43:77:4d:1c:02:
                    6d:a5:de:74:40:00:cb:2c:5d:cf:03:09:5f:16:91:
                    42:4c:3d:9f:98:2d:fd:3a:77:fa:ca:13:82:ba:cd:
                    53:f5:07:c1:4b:97:63:20:96:29:ca:5e:3f:2f:fb:
                    f2:fb:03:20:98:27:f5:d8:1c:3d:8c:36:51:5a:55:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:19:B3:79:8F:7A:42:77:2E:84:B9:22:DF:19:2D:48:C2:EB:66
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:aa:d6:75:ec:e8:c6:f1:3a:a8:de:6c:b8:96:22:2f:18:13:
         cc:93:64:c7:ff:87:c5:33:49:67:e6:85:a8:cd:7b:ac:9b:b1:
         77:23:23:ae:ab:0c:ab:68:35:1a:d3:3d:4f:fe:c6:2e:d0:c3:
         89:96:7a:ce:12:75:a0:58:f0:39:d6:0e:20:47:be:11:79:6e:
         4f:ea:72:ce:71:ae:81:e7:3a:83:cb:41:be:44:84:3e:7f:28:
         c6:c0:af:e6:2f:f1:c3:48:99:e8:21:af:75:8e:88:6a:d2:f5:
         a0:aa:fa:35:9d:bf:5f:5d:f3:70:50:4a:fc:1a:fd:03:e2:c3:
         cb:4a:66:3f:07:d3:c2:af:ac:31:bf:e6:1d:66:6c:a0:c2:72:
         0c:44:74:4d:15:58:46:7c:68:14:77:f2:4f:1a:74:c4:11:1f:
         42:2e:23:b5:7b:2f:c1:8a:dc:c7:93:4c:51:0a:4e:a8:97:f7:
         4f:1a:bd:d7:64:a0:6d:ec:18:0e:b3:8f:5b:d2:bd:ea:c2:70:
         69:b2:56:5a:4b:1e:75:cc:d0:23:a0:a8:ce:9e:16:99:05:67:
         26:41:28:68:b5:c6:a2:40:5e:38:8d:5c:54:c9:2e:7b:92:ce:
         17:b4:40:d1:9e:74:f9:f8:ef:ad:4b:69:4f:c9:4d:99:cf:2b:
         ce:1f:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:11:29 2025 by rpki-client