This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
File:                     Tky0uRUee64RK-xTWcMclVgO4DE.mft (raw, json)
Hash identifier:          1blk0465Q/Nzqg6MfGVwkCeGkXgxoa2+lh5pNiVZvc4=
Subject key identifier:   F4:E2:09:07:82:68:E3:98:B1:87:C5:EB:9C:1F:34:5C:B3:67:18:3B
Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31
Certificate issuer:       /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
Certificate serial:       04C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
Manifest number:          04C0
Signing time:             Thu 04 Dec 2025 22:25:02 +0000
Manifest this update:     Thu 04 Dec 2025 22:25:01 +0000
Manifest next update:     Thu 11 Dec 2025 22:25:01 +0000
Files and hashes:         1: Tky0uRUee64RK-xTWcMclVgO4DE.crl (hash: BDUmq7xkOgDGlVD/ZqrZqyNEZiOiB7F+F4rToch+9ac=)
                          2: 7B0E744E994111F09D282143C4F9AE02.roa (hash: Cd7XZiHe1qVaHcpx6zxYlqRsLTSHLcGFR7Jjk7pxmLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl
                          rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609E6, serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
        Validity
            Not Before: Dec  4 22:25:01 2025 GMT
            Not After : Dec 11 22:25:01 2025 GMT
        Subject: CN=69320a3d-4f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:14:71:b9:89:3c:2c:49:3d:f8:17:46:7d:fd:
                    ab:2e:8c:5e:1f:d7:2e:43:2c:31:f1:e5:73:5c:13:
                    fb:2a:b2:1e:e7:23:a5:bb:50:e9:7c:cb:0d:e5:2e:
                    dc:11:33:52:63:db:36:08:53:83:d9:6b:7f:af:c9:
                    c6:56:be:a5:e8:4d:6d:92:56:ec:b9:57:8e:47:fa:
                    d0:ee:51:04:b2:0f:d0:f0:2c:02:32:1f:6b:7d:cd:
                    82:84:b1:f4:d5:b2:2a:5b:2d:b5:2b:90:62:21:02:
                    3c:f8:8b:af:c8:3c:20:7f:af:2d:89:f7:46:0d:33:
                    a6:59:d8:91:a0:58:0e:80:71:a1:b9:4e:a2:e2:1f:
                    70:42:a5:c3:23:81:4f:05:3b:0b:28:2a:75:86:7c:
                    1e:b6:89:6d:e4:0c:1d:97:28:fb:56:a2:42:68:ba:
                    22:71:45:32:09:53:92:dc:f0:66:0d:bb:fb:b0:cf:
                    66:ab:a6:7f:c0:56:06:30:c8:c5:59:c5:a4:cd:dc:
                    13:ae:e5:cf:67:97:bb:54:8d:d5:88:19:ed:2f:cd:
                    b4:17:fd:29:9b:77:67:51:8e:53:d1:3b:5f:07:b7:
                    f9:ef:fd:75:be:da:40:ff:67:97:b8:9b:43:58:ed:
                    2b:e8:b5:10:80:0d:c4:b9:6a:a3:71:fe:72:f5:8a:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E2:09:07:82:68:E3:98:B1:87:C5:EB:9C:1F:34:5C:B3:67:18:3B
            X509v3 Authority Key Identifier:
                keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:4a:03:57:3d:c4:22:f9:e5:9d:cb:58:ab:a6:ad:a1:0f:21:
         dd:36:3a:3b:cd:78:69:87:25:83:ba:3a:b3:7f:6b:5e:a5:5a:
         d4:78:37:b2:33:72:7e:cc:9d:87:8f:7f:b9:2d:e0:08:b9:d5:
         75:61:25:c8:cc:41:c3:62:f5:a7:95:27:2a:28:6c:2a:12:da:
         d5:67:85:6b:c2:ef:00:e0:23:3a:82:fe:85:ea:08:18:52:fe:
         5c:ab:a0:b6:f2:bf:01:6a:f8:96:0f:d6:89:5c:17:ca:19:d5:
         e0:ea:0e:bf:72:df:55:a7:f4:6d:bc:fa:6b:b3:31:f2:76:5c:
         9c:f6:4d:89:95:74:9d:35:5e:8c:c9:ad:fd:b6:9c:99:01:6d:
         20:22:e1:90:bf:c6:1b:4d:65:36:5c:35:a0:7c:1e:08:39:86:
         70:1c:af:c1:14:38:f8:02:e6:86:07:46:50:0c:96:d3:d4:46:
         87:a3:79:1a:af:0f:61:b5:1a:e9:e7:82:85:13:eb:7c:e7:e6:
         67:b9:c3:2b:7f:70:30:25:3f:ca:fc:94:a3:d1:e9:12:eb:3f:
         cf:91:3d:25:d3:bd:56:eb:15:ce:62:f6:12:87:f6:a8:7a:8f:
         12:96:7a:92:1c:c1:04:e3:c3:fa:22:20:b1:87:65:e3:5b:61:
         c7:d6:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:15 2025 by rpki-client