This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
File:                     tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json)
Hash identifier:          4o3gx8QEcsEdpKfVJkmbIuc1XrXhcbnGhF3qHo+YmTI=
Subject key identifier:   F4:E0:11:A0:2C:2C:A2:F4:64:C9:4E:F7:0B:07:A0:D6:13:C2:45:6F
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Certificate issuer:       /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial:       1565
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
Manifest number:          1531
Signing time:             Thu 04 Dec 2025 16:28:43 +0000
Manifest this update:     Thu 04 Dec 2025 16:28:42 +0000
Manifest next update:     Thu 11 Dec 2025 16:28:42 +0000
Files and hashes:         1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: n1pYa5OfzHDAC4MUpdToY5WclCPt8lRJYT3WAAVP+1U=)
                          2: E944914AF0F111E999D61615C4F9AE02.roa (hash: XKJY2ruAbdxVwtFmFD8vDTB2DhG2dJOeU2QViXOeUk8=)
                          3: 0E171AA850D511F0B4943476C4F9AE02.roa (hash: 9AflqGyFKx05qIN4kyuCqzbSR97xKUg46U/Rr1tuz0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
                          rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5477 (0x1565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
        Validity
            Not Before: Dec  4 16:28:42 2025 GMT
            Not After : Dec 11 16:28:42 2025 GMT
        Subject: CN=6931b6ba-e5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:17:f5:ab:ae:07:db:ba:90:49:59:77:13:
                    6d:0a:67:93:6a:f3:63:6b:0d:4c:e0:36:e1:5d:bb:
                    f5:f7:6f:00:b2:59:42:9a:60:eb:be:b3:ab:86:63:
                    85:51:43:e5:6a:48:23:54:3d:55:48:aa:0b:6f:2b:
                    89:9b:f8:a2:c3:d7:19:9b:fe:75:0b:ba:f5:2b:5b:
                    e7:05:f3:57:b8:bb:9f:ae:ce:31:c3:3f:b4:89:6e:
                    f3:45:06:56:7b:8f:ba:9f:fd:ab:15:71:e5:20:32:
                    96:5a:4d:79:02:ba:db:5f:4d:0a:b3:9c:c5:f5:ef:
                    8f:a0:29:2d:7e:fd:a2:cc:1f:22:e6:ca:df:fa:0f:
                    3e:9e:03:87:f1:c4:9a:14:b4:fb:f4:7a:e5:d9:9a:
                    6e:dc:ca:93:4f:b5:9d:72:9b:c2:13:3d:f1:9b:6c:
                    41:a1:01:6c:43:7e:ae:23:7e:f9:3d:d8:64:30:9c:
                    a8:67:b4:42:e1:2d:e9:d5:63:56:08:30:34:51:01:
                    f7:69:69:45:1c:3e:69:19:c2:89:66:5a:93:b4:21:
                    3a:52:cd:e2:7b:99:5f:a6:13:e4:3a:98:24:d0:02:
                    2a:f0:a1:c6:43:2c:cc:b4:2c:86:ef:37:f1:19:7a:
                    8a:7a:5a:56:21:c8:42:df:de:1c:8b:b2:bc:4d:cd:
                    ce:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E0:11:A0:2C:2C:A2:F4:64:C9:4E:F7:0B:07:A0:D6:13:C2:45:6F
            X509v3 Authority Key Identifier:
                keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c7:d0:24:bc:77:aa:b0:da:18:d8:bd:08:f1:b1:df:49:f0:
         1e:f9:fa:37:ee:95:48:2a:5d:bf:14:0f:fb:a7:da:66:b9:81:
         6b:5f:63:34:ae:33:14:40:d5:36:cd:ce:a2:3f:ab:37:4a:e3:
         b4:aa:d6:85:1e:da:e0:ff:93:79:e8:d3:62:f2:04:bd:74:13:
         31:33:27:8c:36:98:f0:c8:45:72:45:59:22:5c:4e:3a:69:78:
         17:a9:1b:a0:64:0e:fa:15:10:ca:cc:c6:fe:53:56:c7:c8:b6:
         4d:a0:b4:b9:7d:25:16:24:54:ee:7e:fe:60:91:09:de:52:f2:
         a9:ba:30:4d:8c:2f:e0:77:36:55:c9:c2:4f:5f:e9:67:30:5b:
         ed:ab:96:a0:15:91:43:5e:4a:f9:98:8a:e8:48:85:aa:e8:de:
         e5:6b:7b:ac:2f:59:5a:ca:03:39:5d:c1:1b:d9:6d:a9:12:0e:
         bb:69:2a:ad:ac:7b:a9:e8:cc:ba:73:40:75:2a:67:06:42:af:
         ba:55:8f:da:63:e1:6d:ce:4d:21:8f:a8:d0:75:4c:9f:ec:52:
         d0:6a:af:38:63:28:ac:53:5b:16:01:24:ec:f3:07:ac:87:88:
         cf:44:cd:10:93:f5:e8:a3:eb:76:93:4f:9f:4e:aa:47:c6:8a:
         5b:e6:f0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:37 2025 by rpki-client