This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
File:                     TSeYiynlKyZQPcq8BBqz9h8kEFE.mft (raw, json)
Hash identifier:          UeMtYT1NQuirR4+Jck21nhlkp/sOEVLVJR20zEpS3cw=
Subject key identifier:   38:F7:B4:56:F7:AA:91:6D:CB:57:56:C4:A7:FE:4C:8E:DC:1F:55:F8
Authority key identifier: 4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51
Certificate issuer:       /CN=A91383D8/serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051
Certificate serial:       0618
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
Manifest number:          0610
Signing time:             Thu 04 Dec 2025 21:36:07 +0000
Manifest this update:     Thu 04 Dec 2025 21:36:06 +0000
Manifest next update:     Thu 11 Dec 2025 21:36:06 +0000
Files and hashes:         1: TSeYiynlKyZQPcq8BBqz9h8kEFE.crl (hash: mn7eqSjApFQicKXK3MANURmzUxycGj0cQLkb2PLfC8I=)
                          2: F14DD31CCA2D11EB8B7FE060C4F9AE02.roa (hash: FUPhJ7viy8W3pQYFN/dbDBBE9qpZwOpzgVenyvyXp+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl
                          rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383D8, serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051
        Validity
            Not Before: Dec  4 21:36:06 2025 GMT
            Not After : Dec 11 21:36:06 2025 GMT
        Subject: CN=6931fec7-b6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:a6:dd:75:d2:64:f7:fc:83:6e:b1:df:b2:
                    0f:5a:54:21:a3:10:6a:0e:21:6b:ad:53:51:7f:6c:
                    7c:29:9d:72:e9:84:e4:89:41:09:a5:01:f8:f6:99:
                    18:37:42:be:64:14:a9:14:7c:eb:9a:7a:10:35:20:
                    41:6c:e8:26:72:a2:ea:1c:aa:25:20:a2:69:87:f1:
                    7d:99:ed:f5:ae:34:aa:a1:5e:ed:22:cd:0f:5e:79:
                    aa:72:7c:65:f0:79:fc:1c:1d:46:37:18:e1:6d:03:
                    b3:57:b4:70:df:a6:62:dc:36:7f:c6:ad:8d:7d:3b:
                    3f:d0:62:7a:4b:5e:16:de:9a:25:22:2a:51:b8:ad:
                    5e:0f:cb:8d:29:cf:cf:d0:13:83:bd:88:04:fc:06:
                    5a:0b:ab:bf:5e:55:16:b7:ca:05:e9:d3:ef:f5:40:
                    28:2c:a7:8f:37:cf:dd:a5:4a:12:9c:3d:cf:aa:d9:
                    3c:54:2e:ca:48:e0:17:0b:77:50:07:7a:ec:0c:4d:
                    b1:69:f8:9d:18:8a:74:55:c0:70:23:a5:ea:ea:e0:
                    3f:cd:b1:c3:78:b8:12:35:65:f9:12:17:89:3c:b1:
                    27:68:b3:31:4c:7a:2e:87:a7:ec:7f:24:57:99:d5:
                    6d:08:ed:d3:16:8e:b6:f0:84:c9:23:3d:3a:58:91:
                    76:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:B4:56:F7:AA:91:6D:CB:57:56:C4:A7:FE:4C:8E:DC:1F:55:F8
            X509v3 Authority Key Identifier:
                keyid:4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:93:56:c8:97:01:64:23:dc:be:ce:23:8e:17:e6:71:6a:f7:
         b5:b9:1b:5f:54:11:11:c7:7a:24:f3:05:6e:4c:90:88:b4:55:
         bd:a6:2a:36:31:c2:8f:7d:c9:d2:bb:16:b0:e1:14:65:4a:09:
         da:f6:43:ce:1b:4c:e1:bc:9f:12:8c:e7:3f:6c:0f:d6:c5:69:
         fb:70:ab:88:7f:d8:66:9e:b0:63:6c:c0:0f:8b:c5:aa:4f:b1:
         32:77:aa:9d:03:28:82:a3:92:c4:98:83:87:fa:16:d5:80:7b:
         ee:94:9e:af:9c:d4:35:c0:49:30:63:0a:d7:86:ee:e2:3e:65:
         8e:7e:16:c4:6c:1e:19:0d:80:10:af:2e:38:c0:47:32:5c:85:
         25:c5:2b:bb:04:a4:d0:0c:9e:f1:d2:eb:c7:a2:03:77:ab:5f:
         a6:57:45:87:3c:b5:27:bd:57:1b:c1:8b:ff:f4:0e:d8:23:a6:
         84:5f:33:0a:ef:fe:2b:f0:2b:e5:ae:39:3a:8d:63:13:6f:cd:
         ce:a9:3e:d9:14:2d:0c:99:89:b9:83:60:f0:20:45:f3:2c:98:
         0b:c3:cb:07:0d:a1:b2:bc:b3:c7:5a:f3:21:30:62:3b:50:26:
         64:24:37:44:8b:89:e5:7f:ba:2b:a8:d7:53:c4:26:24:0a:1f:
         3a:fc:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:20 2025 by rpki-client