This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
File:                     TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft (raw, json)
Hash identifier:          c388tx3xin3w/+07WiHpE6Yu6PKhmMu0ni+qEZvDCc4=
Subject key identifier:   64:9B:56:29:EB:29:24:8D:75:2B:1E:0A:2A:01:52:5D:E4:8C:69:30
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Certificate issuer:       /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial:       023F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
Manifest number:          0220
Signing time:             Sun 07 Dec 2025 01:01:10 +0000
Manifest this update:     Sun 07 Dec 2025 01:01:10 +0000
Manifest next update:     Sun 14 Dec 2025 01:01:10 +0000
Files and hashes:         1: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl (hash: uNowIBTOEPGPArDcRgHaDAhODT8Wm+TZcJ64+NFSmeo=)
                          2: B029CB28E36C11EF876EED6BC4F9AE02.roa (hash: V3tolroHRaGOLdSfU09EMMCLQ91f3/wTHDGeGETd7+4=)
                          3: AF4851DEE36C11EF876EED6BC4F9AE02.roa (hash: Wn369l93+2+aQnvi9l/DEYR+w0mxvVik1UUwZPt8oyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
                          rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
        Validity
            Not Before: Dec  7 01:01:10 2025 GMT
            Not After : Dec 14 01:01:10 2025 GMT
        Subject: CN=6934d1d6-1fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:7d:f6:b5:dc:11:db:0f:88:ca:21:13:5e:
                    32:7d:83:ef:e5:02:49:19:d7:e7:80:3e:72:4c:28:
                    5c:0b:70:f1:e9:9e:73:66:e1:89:2b:49:5e:4a:05:
                    45:52:f9:8e:31:ad:0d:ce:41:7e:9a:9a:f3:0d:52:
                    cc:6b:d2:a0:d2:04:8c:75:f9:5d:67:af:62:68:a3:
                    cb:16:d1:63:a6:b8:44:6c:03:ec:c2:62:0c:8d:83:
                    06:48:0d:05:56:44:3b:4e:7a:f4:e2:2a:34:8e:30:
                    9f:7a:8d:14:af:e2:d7:0f:2d:b2:7a:80:e3:c8:51:
                    ad:50:9c:23:ca:ee:07:d4:25:8b:44:99:c7:72:7f:
                    c6:7f:de:2b:e8:f7:27:27:cd:36:4b:c8:3c:ce:68:
                    c0:bf:e3:0b:73:cb:05:67:c0:f4:e6:1d:db:f0:4c:
                    ba:db:67:7b:8d:5b:11:57:26:55:5d:a7:b0:66:4b:
                    3f:b4:84:7a:9e:5e:0e:ba:2c:4d:93:38:a4:81:f8:
                    84:3a:d7:99:87:bb:7e:fe:c0:6f:fd:d3:b8:12:b7:
                    65:e1:ad:6a:95:82:b3:7f:e5:04:c9:44:82:13:47:
                    b6:b3:c9:08:b5:82:c4:f4:13:13:a1:38:51:9a:99:
                    c9:df:4d:8a:d4:07:b7:2e:e6:c2:b0:f3:26:e2:4d:
                    57:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9B:56:29:EB:29:24:8D:75:2B:1E:0A:2A:01:52:5D:E4:8C:69:30
            X509v3 Authority Key Identifier:
                keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:92:46:27:cd:e2:72:a8:d0:36:61:50:55:9d:10:b2:d4:85:
         a5:ad:33:52:89:48:5e:bb:e6:b5:d7:6d:01:79:11:83:25:c3:
         4d:ee:f7:29:9c:aa:b1:91:3d:93:70:ee:04:3d:c3:af:d0:b8:
         9e:3a:0f:63:19:63:9d:17:51:8b:df:0c:a8:23:08:d1:e4:0a:
         29:35:cc:2d:a8:6c:4a:2b:5b:33:30:6f:0d:df:ae:8e:2d:1a:
         49:d9:85:52:1d:bb:e4:c7:51:18:c0:24:e3:33:1e:b8:90:17:
         f9:11:3c:25:2b:ca:55:b8:d8:03:26:31:60:bd:39:c7:c3:20:
         3a:35:db:4a:25:8a:bf:5b:f2:a4:33:94:fa:ce:f5:20:16:2b:
         ed:41:6f:59:c3:2f:a9:30:20:7b:cc:52:b9:76:62:32:f3:53:
         92:cb:57:ae:49:f6:2c:b1:95:8d:4e:f8:dd:63:9f:19:fc:67:
         53:9e:93:bb:d3:38:df:1b:b0:23:b3:87:79:5d:26:45:47:3c:
         10:36:76:f4:3b:1b:ef:ec:31:2c:85:45:9d:80:7b:de:ad:68:
         9f:c5:e4:c6:6b:d4:91:6b:67:18:a2:d9:1d:c3:3a:b1:8a:da:
         2f:29:44:c5:c6:2e:3a:4d:41:c1:e3:83:1a:88:28:74:45:e7:
         22:27:73:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:35:01 2025 by rpki-client