This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File:                     tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier:          +PEOzHS6q+sVTccALplthl4yqhAI9GpXJjSOA0rPKXA=
Subject key identifier:   73:D7:88:44:30:D1:37:0D:58:20:6D:62:15:1C:4A:BD:DD:2D:04:43
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer:       /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial:       02B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number:          02A7
Signing time:             Thu 04 Dec 2025 23:51:16 +0000
Manifest this update:     Thu 04 Dec 2025 23:51:15 +0000
Manifest next update:     Thu 11 Dec 2025 23:51:15 +0000
Files and hashes:         1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: O1TtwzFikjtMmlB1p9aPyXcW+bejgskyp4339YSL9T0=)
                          2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: OtRh1Fk7TwGNS5hIMmXvDQHTwbUcw1dj3fxKTgn60lw=)
                          3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: 9mymLiXCRjtr+TlJsGmOLAO7c7q7H4q9/GmJLFOK+K4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
                          rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
        Validity
            Not Before: Dec  4 23:51:15 2025 GMT
            Not After : Dec 11 23:51:15 2025 GMT
        Subject: CN=69321e73-9035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:db:26:ab:53:b9:61:e9:86:b3:5b:fd:88:
                    d9:8f:4a:46:26:4e:1a:24:7c:ef:68:60:0e:1a:fb:
                    c7:22:d1:8d:4b:43:bf:04:e9:1c:e6:43:79:a1:4b:
                    07:8d:d0:43:ab:eb:ac:48:61:ca:d2:95:5f:4f:99:
                    8a:88:ad:8d:06:57:c2:7e:e0:44:d2:50:d9:ff:b7:
                    95:23:7d:07:d5:96:6a:6a:66:f2:39:23:c0:ae:65:
                    68:9a:98:3a:4d:ef:d6:38:e8:fb:ae:b2:cc:a6:03:
                    ed:24:b4:e4:21:e3:a8:03:91:98:a4:f4:c3:3a:be:
                    71:0d:fa:55:ba:e4:db:d8:43:86:2b:39:55:0f:12:
                    70:80:0b:2e:e8:07:31:51:07:e8:45:55:e8:fe:63:
                    ed:4b:29:99:a5:23:04:f4:cb:d0:23:62:02:83:9f:
                    23:1f:70:72:d3:8b:08:d6:1f:45:b1:4b:19:78:39:
                    6e:37:b1:17:e4:17:05:91:fd:b2:8e:40:ae:87:6f:
                    7b:8f:6b:1f:99:dc:ad:46:56:2d:cd:8b:af:37:78:
                    ef:c2:d4:94:79:9e:5d:eb:51:6f:00:b8:7c:95:70:
                    78:ad:d4:6c:fc:47:36:7b:49:6f:25:11:ad:0f:cf:
                    b9:16:31:42:c6:fd:06:0e:fe:48:b5:f7:a7:26:07:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D7:88:44:30:D1:37:0D:58:20:6D:62:15:1C:4A:BD:DD:2D:04:43
            X509v3 Authority Key Identifier:
                keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:99:80:1a:c1:a8:c8:ea:da:69:3d:5b:54:67:51:4c:01:8e:
         1b:c6:38:71:b6:44:aa:34:82:b1:0c:e0:13:9c:7d:50:88:15:
         f7:c6:14:27:da:5c:5f:ad:10:04:da:c1:4b:c2:a8:12:8e:bd:
         51:8e:d8:34:8f:5c:56:30:59:ca:39:1e:cf:4c:47:06:a2:6f:
         fd:83:31:f3:5a:44:2e:e9:13:d9:59:b6:bd:d5:19:03:20:e5:
         bd:a8:af:4b:4c:d9:c9:62:ca:c6:59:15:e3:fb:e5:33:f4:ab:
         67:f0:fe:c8:be:19:bc:ed:2f:28:7f:20:dc:a5:3b:98:f9:f7:
         a5:c9:41:84:37:af:55:b2:f0:aa:a2:89:de:40:43:a1:bf:d3:
         e9:92:52:06:31:bb:8a:cc:d4:72:4a:ae:ca:94:72:0d:da:3c:
         2f:a1:9a:ed:b8:b0:3e:22:3d:18:6e:34:4c:ef:ab:7e:10:e3:
         b4:b8:b3:c2:f5:3b:47:5c:a9:e1:7a:9c:ac:5a:c0:70:5d:d3:
         fc:93:d7:e7:20:39:25:0a:54:ee:b4:34:3f:ac:5c:83:85:1e:
         37:26:9a:36:7f:54:d4:19:21:33:98:cc:f3:f5:25:1c:7e:34:
         be:9d:4d:e8:c5:6b:d8:81:ad:b4:28:9d:5a:0b:88:e7:53:84:
         1b:f4:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:29:07 2025 by rpki-client