This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
File:                     TPa6KUJsvCB032LFH683jELTuK8.mft (raw, json)
Hash identifier:          //MToJvbHvxsNhMVvA0qTgTFe6Gy/aRJMYR9WCLDEyU=
Subject key identifier:   35:41:50:BE:DF:EF:39:7B:71:3D:3B:01:3D:D8:97:C7:26:CE:1E:E8
Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
Certificate issuer:       /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
Certificate serial:       0773
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
Manifest number:          076B
Signing time:             Sat 06 Dec 2025 20:38:33 +0000
Manifest this update:     Sat 06 Dec 2025 20:38:33 +0000
Manifest next update:     Sat 13 Dec 2025 20:38:33 +0000
Files and hashes:         1: TPa6KUJsvCB032LFH683jELTuK8.crl (hash: rCytyfKhbSuD8yXxwMk66qsELjUpS12KMHN4XSMkkPk=)
                          2: B6A436A8411F11EBA45D5857C4F9AE02.roa (hash: 8umaFtJV5TgBXJUzmNOXuQWmgpWLTZbpyNtna3LX4IY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl
                          rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
        Validity
            Not Before: Dec  6 20:38:33 2025 GMT
            Not After : Dec 13 20:38:33 2025 GMT
        Subject: CN=69349449-e821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e1:72:92:be:89:e7:06:c8:ed:ef:19:63:d0:
                    ce:89:f3:0b:2f:f0:b6:1d:56:d0:37:4f:62:c1:d7:
                    bb:34:b1:a8:58:f8:6a:72:32:07:57:f0:5d:c2:b7:
                    71:8a:19:f9:cd:39:c9:a5:48:97:6e:34:de:5c:3f:
                    8b:13:2f:5f:54:a7:8c:5c:10:e2:47:cf:16:68:79:
                    e1:05:a3:0c:e5:67:94:6f:a9:7a:a4:a3:30:d7:6c:
                    a5:51:1b:8d:e3:b0:ae:6c:48:6f:57:85:cd:8e:95:
                    94:24:4b:15:32:56:87:f5:e3:e2:72:af:69:e4:9a:
                    a7:0b:21:0a:90:ab:ba:09:01:18:ea:17:76:07:a1:
                    6d:3f:83:08:f8:21:59:96:75:c8:2f:6e:5c:ba:06:
                    a0:05:b7:50:44:59:56:bd:b0:0d:3b:76:33:79:83:
                    40:a6:f7:6f:ff:1e:07:89:19:c5:06:6d:ea:de:43:
                    0d:e2:ba:ae:e8:b5:98:38:8f:7b:c3:57:e8:a1:62:
                    44:26:0e:77:65:ed:45:d7:4c:2d:54:1a:27:6f:5e:
                    ca:e4:d8:3d:99:39:05:00:e0:c1:4f:38:e4:99:95:
                    ae:6b:49:ff:a9:1c:9c:9f:66:e4:eb:d6:c3:ec:cc:
                    9e:0e:b7:36:99:db:b3:2f:e4:18:f0:0b:92:21:24:
                    39:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:41:50:BE:DF:EF:39:7B:71:3D:3B:01:3D:D8:97:C7:26:CE:1E:E8
            X509v3 Authority Key Identifier:
                keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:63:cb:91:3b:1b:00:68:56:b8:ca:26:75:d5:cd:95:80:09:
         9d:9d:49:01:e5:0b:54:21:92:77:9f:e1:c2:c8:96:65:81:a2:
         80:a4:d5:97:58:47:f0:fe:4f:95:14:3b:60:f8:71:e6:1a:4f:
         73:36:9c:50:26:9a:e8:dc:54:11:a3:7d:fd:8c:bd:c3:84:8b:
         84:64:5d:0e:ff:a8:2f:95:a1:07:ed:31:fd:7d:65:5b:71:79:
         29:16:f3:b8:53:a3:85:d4:4f:0e:a6:67:7c:e4:9e:90:31:e3:
         1e:70:dd:72:bb:21:9c:a8:6a:19:20:88:25:db:7a:70:da:68:
         14:71:10:86:41:8d:df:c3:2a:d5:71:b5:51:a8:e1:c1:29:9d:
         7b:2d:cd:2c:42:74:0f:2a:7f:c3:12:18:04:dd:77:3f:94:11:
         6c:93:79:89:11:0a:a7:2d:bc:58:00:cf:58:51:62:6a:cf:6b:
         44:f2:0c:07:a1:b6:2f:89:d0:95:99:c0:3c:09:2e:8f:27:96:
         3e:0b:d6:50:b7:5f:db:cd:fc:81:53:60:fe:15:5e:f4:e4:e2:
         c0:d1:70:0d:11:0c:63:f7:45:cf:b3:a1:96:d6:34:20:a2:dc:
         63:9d:3e:e5:ad:cf:c5:9e:42:5f:a4:9a:be:17:90:6d:a2:aa:
         dc:06:af:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhGNTAxMTAvBgNVBAUTKDRDRjZCQTI5NDI2Q0JDMjA3NERGNjJDNTFGQUYzNzhD
NDJEM0I4QUYwHhcNMjUxMjA2MjAzODMzWhcNMjUxMjEzMjAzODMzWjAYMRYwFAYD
VQQDEw02OTM0OTQ0OS1lODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7uFykr6J5wbI7e8ZY9DOifMLL/C2HVbQN09iwde7NLGoWPhqcjIHV/Bdwrdx
ihn5zTnJpUiXbjTeXD+LEy9fVKeMXBDiR88WaHnhBaMM5WeUb6l6pKMw12ylURuN
47CubEhvV4XNjpWUJEsVMlaH9ePicq9p5JqnCyEKkKu6CQEY6hd2B6FtP4MI+CFZ
lnXIL25cugagBbdQRFlWvbANO3YzeYNApvdv/x4HiRnFBm3q3kMN4rqu6LWYOI97
w1fooWJEJg53Ze1F10wtVBonb17K5Ng9mTkFAODBTzjkmZWua0n/qRycn2bk69bD
7MyeDrc2mduzL+QY8AuSISQ5eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVBUL7f
7zl7cT07AT3Yl8cmzh7oMB8GA1UdIwQYMBaAFEz2uilCbLwgdN9ixR+vN4xC07iv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY1MC9BMUUxRjc5QzQx
MUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZDQjAzMkxGSDY4M2pFTFR1
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RQYTZLVUpzdkNCMDMyTEZINjgzakVMVHVLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEY1MC9BMUUxRjc5QzQxMUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZD
QjAzMkxGSDY4M2pFTFR1SzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWY8uROxsAaFa4yiZ11c2VgAmdnUkB5QtUIZJ3n+HCyJZlgaKApNWX
WEfw/k+VFDtg+HHmGk9zNpxQJpro3FQRo339jL3DhIuEZF0O/6gvlaEH7TH9fWVb
cXkpFvO4U6OF1E8Opmd85J6QMeMecN1yuyGcqGoZIIgl23pw2mgUcRCGQY3fwyrV
cbVRqOHBKZ17Lc0sQnQPKn/DEhgE3Xc/lBFsk3mJEQqnLbxYAM9YUWJqz2tE8gwH
obYvidCVmcA8CS6PJ5Y+C9ZQt1/bzfyBU2D+FV705OLA0XANEQxj90XPs6GW1jQg
otxjnT7lrc/FnkJfpJq+F5BtoqrcBq+h
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:04:47 2025 by rpki-client