This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
File:                     tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json)
Hash identifier:          hCbKWWyeazeQoACKF0KD3LDNUiQT4sWyG35it0YZOQs=
Subject key identifier:   8D:A4:7F:DF:E9:ED:8F:53:52:26:A6:56:ED:FD:E8:F8:01:98:50:D6
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Certificate issuer:       /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial:       0798
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
Manifest number:          0720
Signing time:             Sat 06 Dec 2025 21:20:53 +0000
Manifest this update:     Sat 06 Dec 2025 21:20:53 +0000
Manifest next update:     Sat 13 Dec 2025 21:20:53 +0000
Files and hashes:         1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: Ry9RTmxWwuatAIpnar+fQdIoVqQvKWaydI/j1cD0hBc=)
                          2: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: nVi2F1h98I6eFhDtm7NoIpz9Is13r6Zxvgjimh4KJP0=)
                          3: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: Ybb2csXFZo9W1XG+GRQhzLexAF28aEoPNkvLGKQiexs=)
                          4: DEB93E12828F11EF9E87BB73C4F9AE02.roa (hash: 4/7UnX5ze5wrjMqFOLuyIDjnmWsUK84zcdUUtFoXAm8=)
                          5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: uZyAHanV/dsvce0LE5DxDJIkDTak4REE2s1BDI3t2SM=)
                          6: A716CA94954611EC9B320352C4F9AE02.roa (hash: 29eINthckTF8RKNey1Kdeos3g3mQUi6TqxaM8+tcS1o=)
                          7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: JkA2VjRkGVaoGTtSe3EFAkpmSjP2mBiftG09Gd2raHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
                          rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1944 (0x798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
        Validity
            Not Before: Dec  6 21:20:53 2025 GMT
            Not After : Dec 13 21:20:53 2025 GMT
        Subject: CN=69349e35-f559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:d1:7f:9b:7f:01:60:c0:f2:9a:c7:74:ea:
                    f6:8d:84:95:2f:fd:a3:0c:b1:69:81:ab:73:78:76:
                    b4:6a:b0:9f:90:6b:c8:33:2e:36:88:d9:25:68:a1:
                    42:bb:83:ea:4a:36:12:80:f2:06:a0:03:39:95:66:
                    ac:de:cf:d9:b4:3f:3c:cd:8e:60:8d:8b:3f:37:f5:
                    0b:a5:26:66:f6:7c:5b:a7:74:b5:75:0e:bf:95:29:
                    8e:d0:50:bb:ad:bf:96:9f:50:dd:61:6f:e7:ff:ce:
                    3a:8b:9e:73:20:bc:83:c5:a1:f7:b2:ad:64:a9:da:
                    93:de:8d:0b:81:a9:f5:6f:5b:ed:f3:17:aa:d9:62:
                    31:a8:41:5f:fc:d4:fb:17:23:ca:f4:74:f4:60:39:
                    44:24:82:f2:6e:59:df:72:79:8c:5d:b2:9e:09:46:
                    8d:f2:62:61:89:0e:fe:5e:b5:73:15:2a:f4:f2:98:
                    c9:5c:5d:7f:37:28:59:fd:4f:c6:ee:96:a1:ac:3e:
                    12:3a:14:f8:40:0d:11:2c:49:b7:c1:8c:f8:64:a3:
                    c4:2f:d2:41:f6:4c:fa:cd:5f:13:b1:6f:f9:d6:4d:
                    6b:be:87:1e:ff:e4:7e:df:3e:ea:7f:79:6a:65:07:
                    88:95:a9:c2:34:d3:43:30:a8:3f:61:a0:5d:e4:52:
                    c7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A4:7F:DF:E9:ED:8F:53:52:26:A6:56:ED:FD:E8:F8:01:98:50:D6
            X509v3 Authority Key Identifier:
                keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:15:79:50:ff:08:40:11:0e:1b:96:d5:be:bb:aa:ab:84:a7:
         19:52:05:5a:c2:3d:fc:84:a1:39:8c:0a:a7:d4:fe:0e:d1:f4:
         0a:f7:75:a5:27:58:d5:0d:6d:4a:74:7a:a8:43:83:ea:6c:c1:
         04:c4:30:03:9f:f9:83:e3:8b:7c:50:a9:c7:57:92:78:86:8a:
         68:8c:08:68:54:52:ab:54:ba:ec:c2:54:b0:fa:90:af:ef:c4:
         9c:de:31:0c:54:00:14:ef:83:f9:60:1e:7e:5e:47:88:7a:80:
         dc:b9:f6:b2:60:8f:e0:fa:83:c5:08:aa:cb:2f:6b:91:aa:ed:
         f4:c4:0b:73:11:55:c4:50:8c:28:7f:ce:be:f2:58:76:c5:c2:
         b2:0f:97:c5:68:ab:c9:21:07:94:5c:b5:2d:22:9e:53:ef:1f:
         d2:8e:9e:3b:9a:62:f4:f7:9f:16:dc:f4:f7:56:c0:20:11:66:
         7d:d4:4c:a4:3e:36:2e:f7:31:0e:f6:b6:22:63:ce:d3:aa:ae:
         a0:cc:28:35:74:9d:1b:1c:3c:46:2c:8f:6a:eb:64:87:68:04:
         f4:9c:48:8b:ac:d7:04:55:2d:7a:51:17:53:63:2e:50:03:a1:
         eb:33:45:7b:2a:66:99:ba:d1:62:92:db:4c:0f:b0:97:53:9c:
         8c:a1:ef:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw
OTQ5NERCQzgwHhcNMjUxMjA2MjEyMDUzWhcNMjUxMjEzMjEyMDUzWjAYMRYwFAYD
VQQDEw02OTM0OWUzNS1mNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwVbRf5t/AWDA8prHdOr2jYSVL/2jDLFpgatzeHa0arCfkGvIMy42iNklaKFC
u4PqSjYSgPIGoAM5lWas3s/ZtD88zY5gjYs/N/ULpSZm9nxbp3S1dQ6/lSmO0FC7
rb+Wn1DdYW/n/846i55zILyDxaH3sq1kqdqT3o0Lgan1b1vt8xeq2WIxqEFf/NT7
FyPK9HT0YDlEJILyblnfcnmMXbKeCUaN8mJhiQ7+XrVzFSr08pjJXF1/NyhZ/U/G
7pahrD4SOhT4QA0RLEm3wYz4ZKPEL9JB9kz6zV8TsW/51k1rvoce/+R+3z7qf3lq
ZQeIlanCNNNDMKg/YaBd5FLHywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2kf9/p
7Y9TUiamVu396PgBmFDWMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4
MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy
OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz
UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWFXlQ/whAEQ4bltW+u6qrhKcZUgVawj38hKE5jAqn1P4O0fQK93Wl
J1jVDW1KdHqoQ4PqbMEExDADn/mD44t8UKnHV5J4hopojAhoVFKrVLrswlSw+pCv
78Sc3jEMVAAU74P5YB5+XkeIeoDcufayYI/g+oPFCKrLL2uRqu30xAtzEVXEUIwo
f86+8lh2xcKyD5fFaKvJIQeUXLUtIp5T7x/Sjp47mmL0958W3PT3VsAgEWZ91Eyk
PjYu9zEO9rYiY87Tqq6gzCg1dJ0bHDxGLI9q62SHaAT0nEiLrNcEVS16URdTYy5Q
A6HrM0V7KmaZutFikttMD7CXU5yMoe+P
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:36:58 2025 by rpki-client