This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
File:                     TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json)
Hash identifier:          Y+M2WbetXDZ6A4U+I7PHbh2jXkugcyk9YA/SXxSY1mk=
Subject key identifier:   6F:25:C6:AD:87:0B:A5:81:32:AB:F4:C3:8A:8B:BB:75:07:2E:80:41
Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
Certificate issuer:       /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Certificate serial:       03B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
Manifest number:          05BD
Signing time:             Thu 04 Dec 2025 23:08:27 +0000
Manifest this update:     Thu 04 Dec 2025 23:08:26 +0000
Manifest next update:     Thu 11 Dec 2025 23:08:26 +0000
Files and hashes:         1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: wLxd9UABMyXh6BemgPiKTcyP5sTCLu5nRZKE1K2pAQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946 (0x3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA, serialNumber=4D39DE3E506068C3836A00548155413E682595B3
        Validity
            Not Before: Dec  4 23:08:26 2025 GMT
            Not After : Dec 11 23:08:26 2025 GMT
        Subject: CN=6932146b-6ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:b4:72:95:5f:33:7d:24:84:28:09:8d:ba:
                    a0:95:5d:f5:17:7c:76:91:15:04:17:b3:40:64:6a:
                    b7:ea:6d:7c:8e:38:f5:31:ad:48:f7:3e:1d:f3:f2:
                    58:4f:3c:ab:c8:72:70:fc:0b:83:31:db:63:10:fa:
                    15:8b:af:1b:6e:40:91:f0:27:9a:13:0b:0f:0b:44:
                    b8:75:62:c0:bd:ee:66:de:11:3e:a5:f3:05:75:d4:
                    e9:47:4f:74:79:6c:5b:36:8c:7b:f5:03:c1:e5:aa:
                    2e:24:9a:fe:38:88:e8:d1:33:f3:18:45:e1:d6:d3:
                    89:9a:34:1d:61:92:45:be:c5:b4:12:ac:4c:47:33:
                    fb:f8:77:c4:a7:37:fd:b0:9c:41:b1:21:ae:d0:69:
                    78:69:20:73:d2:9c:6c:04:4d:23:2a:6f:ac:90:c1:
                    4c:cc:8f:50:a3:48:79:06:cb:16:5b:36:ac:ec:46:
                    ca:c3:92:62:4e:bb:56:0d:ad:8f:3f:c6:19:5d:f8:
                    c4:eb:ba:b5:4b:ed:07:a1:ea:1c:e4:a2:b6:1c:19:
                    5f:d4:48:14:16:16:0b:c2:bf:e5:5a:2b:e7:37:26:
                    ae:80:81:3c:dd:eb:64:1e:37:a0:37:a0:7b:70:6e:
                    93:88:9c:91:77:db:f7:cf:0c:85:ad:ac:be:37:d3:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:25:C6:AD:87:0B:A5:81:32:AB:F4:C3:8A:8B:BB:75:07:2E:80:41
            X509v3 Authority Key Identifier:
                keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:08:ab:25:08:bc:3e:fd:09:5a:ad:5a:0f:db:1a:43:db:8d:
         77:3f:e4:3e:b0:4a:ff:e3:d5:b2:d3:da:f2:54:9f:b1:3a:28:
         15:3a:72:8e:d7:bb:c4:aa:3a:f5:b4:b4:62:2b:ae:ae:5c:3a:
         e1:12:68:14:a8:35:8c:54:2c:ee:f1:36:1f:aa:cd:99:58:93:
         a8:c5:26:f3:9c:81:98:4c:6a:d2:42:a0:2b:40:cd:10:4c:ff:
         7c:c6:1d:6c:bf:bc:da:67:e5:f4:a5:1a:2b:ba:7b:cb:f0:28:
         c8:bb:0d:aa:04:82:94:70:de:48:c0:ec:e6:8e:f9:a6:fd:d8:
         7d:00:73:02:e5:ca:f4:33:e5:be:38:1a:eb:c9:20:62:d9:1d:
         da:a4:3e:0c:d7:31:d6:85:e1:d8:1d:bd:82:b6:47:e0:6f:85:
         3a:80:f0:66:b3:67:95:4c:ee:39:24:97:50:4d:98:01:c2:32:
         de:e4:00:50:9e:e2:04:bd:53:61:9b:60:6d:cb:ba:8b:9a:76:
         b4:98:30:d7:2c:a3:b0:9c:05:0c:82:a9:7f:16:c9:97:7a:e7:
         7a:34:bd:8b:98:20:89:0c:0f:af:a8:80:b7:ea:83:5a:6c:6f:
         b6:e9:a1:bd:c1:f5:55:ee:5a:cd:dd:8b:59:39:08:d6:12:e4:
         88:a1:59:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM0RkExMTAvBgNVBAUTKDREMzlERTNFNTA2MDY4QzM4MzZBMDA1NDgxNTU0MTNF
NjgyNTk1QjMwHhcNMjUxMjA0MjMwODI2WhcNMjUxMjExMjMwODI2WjAYMRYwFAYD
VQQDEw02OTMyMTQ2Yi02ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsQ+0cpVfM30khCgJjbqglV31F3x2kRUEF7NAZGq36m18jjj1Ma1I9z4d8/JY
TzyryHJw/AuDMdtjEPoVi68bbkCR8CeaEwsPC0S4dWLAve5m3hE+pfMFddTpR090
eWxbNox79QPB5aouJJr+OIjo0TPzGEXh1tOJmjQdYZJFvsW0EqxMRzP7+HfEpzf9
sJxBsSGu0Gl4aSBz0pxsBE0jKm+skMFMzI9Qo0h5BssWWzas7EbKw5JiTrtWDa2P
P8YZXfjE67q1S+0Hoeoc5KK2HBlf1EgUFhYLwr/lWivnNyaugIE83etkHjegN6B7
cG6TiJyRd9v3zwyFray+N9Pd0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8lxq2H
C6WBMqv0w4qLu3UHLoBBMB8GA1UdIwQYMBaAFE053j5QYGjDg2oAVIFVQT5oJZWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRGQS9CODlCQ0JGNEJB
NkExMUVDODJBQzA3ODdDNEY5QUUwMi9UVG5lUGxCZ2FNT0RhZ0JVZ1ZWQlBtZ2xs
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RUbmVQbEJnYU1PRGFnQlVnVlZCUG1nbGxiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzRGQS9CODlCQ0JGNEJBNkExMUVDODJBQzA3ODdDNEY5QUUwMi9UVG5lUGxCZ2FN
T0RhZ0JVZ1ZWQlBtZ2xsYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqCKslCLw+/QlarVoP2xpD2413P+Q+sEr/49Wy09ryVJ+xOigVOnKO
17vEqjr1tLRiK66uXDrhEmgUqDWMVCzu8TYfqs2ZWJOoxSbznIGYTGrSQqArQM0Q
TP98xh1sv7zaZ+X0pRorunvL8CjIuw2qBIKUcN5IwOzmjvmm/dh9AHMC5cr0M+W+
OBrrySBi2R3apD4M1zHWheHYHb2Ctkfgb4U6gPBms2eVTO45JJdQTZgBwjLe5ABQ
nuIEvVNhm2Bty7qLmna0mDDXLKOwnAUMgql/FsmXeud6NL2LmCCJDA+vqIC36oNa
bG+26aG9wfVV7lrN3YtZOQjWEuSIoVmV
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:59:39 2025 by rpki-client