This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
File:                     rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json)
Hash identifier:          6Gen2Kdb+Si7lSZzDH8cPpOIgX8m8S8DLQa/lxy2yRk=
Subject key identifier:   BA:E4:3C:15:6A:14:4B:FC:AD:C2:E7:E1:87:53:99:4D:02:1F:67:0A
Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
Certificate issuer:       /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
Manifest number:          DB
Signing time:             Fri 05 Dec 2025 03:36:04 +0000
Manifest this update:     Fri 05 Dec 2025 03:36:04 +0000
Manifest next update:     Fri 12 Dec 2025 03:36:04 +0000
Files and hashes:         1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: GKi3iFTNkKf7mmx9ToFOPMKtvUFrglAqZg6vY+PtAbk=)
                          2: 029673283B9E11F0AA109D6CC4F9AE02.roa (hash: 441G8b4LgkMuxEvi6rr2h+MeNX8DO9NZrdStvzuDXU8=)
                          3: C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa (hash: RbKkyjXke83zBAWzSPfYjpUNrMECuKEikKXztzGqzuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
                          rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
        Validity
            Not Before: Dec  5 03:36:04 2025 GMT
            Not After : Dec 12 03:36:04 2025 GMT
        Subject: CN=69325324-b47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d0:31:d8:13:fa:59:45:17:40:cc:32:98:de:
                    2d:90:c0:65:09:3c:fa:70:ad:aa:26:86:18:ab:11:
                    90:a9:07:f8:65:29:29:bb:31:86:e8:90:bf:80:7f:
                    94:c6:85:7e:73:fa:37:9f:98:33:c1:32:8c:b9:34:
                    92:1c:cf:51:f3:01:23:30:c8:85:7b:22:85:92:3d:
                    6c:8d:6f:72:13:e6:66:75:61:7f:5e:4e:8d:ef:a8:
                    0b:13:9f:e7:da:fc:3d:dd:c3:ca:d2:30:f0:54:2a:
                    6e:da:7e:ac:c3:be:07:8b:d3:cb:a0:73:67:9d:05:
                    ec:42:a6:4d:60:33:39:20:71:86:e9:7a:ea:a1:d5:
                    8b:91:c5:76:d8:e5:e7:73:b7:f6:10:a2:50:0f:ca:
                    a7:41:6b:2c:ed:a6:2d:67:ce:d7:b6:3d:7d:2d:ad:
                    6d:0c:5e:0a:1b:b5:d0:a4:17:4e:a7:3f:ff:95:66:
                    6b:ac:05:0b:34:4a:1b:4a:b0:dc:68:50:87:7d:19:
                    58:30:41:60:bc:f9:bc:ac:e0:3c:c4:9e:4b:1f:73:
                    02:0e:66:7f:73:2c:a2:af:65:b8:ff:2c:47:09:81:
                    31:10:1e:f1:37:ea:ac:d1:0d:0e:ca:8e:36:ef:5e:
                    74:0e:2f:db:3f:7a:5d:41:3a:48:3e:04:2d:aa:6f:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E4:3C:15:6A:14:4B:FC:AD:C2:E7:E1:87:53:99:4D:02:1F:67:0A
            X509v3 Authority Key Identifier:
                keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2a:54:e0:53:48:1d:6c:fb:37:29:85:bb:e6:0b:6f:38:e6:
         4d:39:f4:26:a0:c0:7f:03:64:8a:5a:fa:5c:2f:12:27:8c:82:
         34:d5:e7:49:bf:c1:7f:57:a9:b8:c2:eb:2a:61:5a:13:65:17:
         c4:1f:ec:7f:99:45:d5:5f:80:3d:01:0e:0d:24:62:8a:a0:be:
         29:74:3a:9f:4d:f2:75:5c:00:75:28:36:14:bb:af:1d:6f:54:
         80:a9:8a:bb:e4:c7:4d:55:30:ad:db:12:bc:63:80:15:da:83:
         3a:dd:51:5e:d1:85:5b:35:5a:86:f2:31:ce:ea:d4:0e:5f:cb:
         69:c5:e0:67:ac:61:f7:bf:93:a3:76:f9:ac:56:de:be:be:3f:
         51:94:59:c3:f9:02:23:17:14:1e:b0:3b:93:19:cf:21:2c:8a:
         eb:21:c6:03:57:24:63:5a:30:bb:b4:d9:c3:7b:64:0a:0a:bb:
         26:55:fb:77:08:7f:e1:6a:f8:ad:e4:04:bc:42:36:10:9b:f9:
         45:a8:31:28:28:e4:f6:05:c6:52:29:df:7c:eb:8c:35:5f:4e:
         ab:e3:50:db:53:86:f9:e6:ca:e2:d8:af:82:61:69:8c:7a:a3:
         94:43:54:c9:fd:e0:71:7b:93:1c:84:b3:76:1f:a0:8d:4c:a9:
         8c:09:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:46 2025 by rpki-client