This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
File:                     TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json)
Hash identifier:          kqxHqlSY1PqK5ZmihoV0dKPNsI5E7/KCDR2d+256fWo=
Subject key identifier:   38:89:C1:03:5A:2B:B2:65:AA:E6:1F:1D:61:99:62:0D:79:7B:55:31
Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74
Certificate issuer:       /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
Certificate serial:       0E77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
Manifest number:          0E6B
Signing time:             Sat 06 Dec 2025 17:11:15 +0000
Manifest this update:     Sat 06 Dec 2025 17:11:14 +0000
Manifest next update:     Sat 13 Dec 2025 17:11:14 +0000
Files and hashes:         1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: I5OavBvxL4W40caeGexB0GYgHqJG9+G0NvXIv0XbUiY=)
                          2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: Kmbnqjt+FsbQjmxP1orKor9zYnpCPWPxfhoKQqbWYu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl
                          rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3703 (0xe77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
        Validity
            Not Before: Dec  6 17:11:14 2025 GMT
            Not After : Dec 13 17:11:14 2025 GMT
        Subject: CN=693463b3-5031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:14:9e:b8:c2:ca:41:43:a7:87:c9:5b:1c:
                    20:dd:47:af:4c:7f:e9:ab:56:ab:07:b2:f9:bc:02:
                    51:54:b2:70:60:b1:17:6b:88:e1:56:30:01:54:d8:
                    92:74:05:01:7a:6a:a6:b2:4f:dc:cc:09:89:fe:ce:
                    bc:a7:7c:40:33:2a:59:98:4b:d5:de:d2:90:9d:35:
                    89:e0:e4:e2:f3:a2:8d:11:af:69:e1:e2:3e:6c:93:
                    fa:97:5f:97:10:15:51:71:eb:d3:71:b3:59:21:28:
                    f4:f0:34:0a:a2:9e:57:80:d0:c3:8a:95:94:cd:a0:
                    01:42:8b:8a:9e:45:7c:7c:97:4f:78:29:6e:43:82:
                    d6:c8:b2:84:ae:23:9b:e5:69:31:b1:6b:25:3a:48:
                    66:5b:2f:9d:b2:aa:52:b3:38:35:a6:b0:3c:7d:ce:
                    6e:a9:1f:37:7d:0d:a7:cf:77:a9:a2:24:1c:9b:17:
                    ba:eb:a8:0e:af:27:b4:8a:b5:b4:e0:cc:ce:04:0a:
                    5f:7a:2c:5b:c4:ff:c8:54:ff:d6:7a:31:13:24:e0:
                    e6:8f:96:21:de:1f:f6:96:65:8a:33:cc:1e:c2:28:
                    b5:f4:8c:1c:30:89:93:0e:16:49:de:08:a8:fc:0c:
                    22:4e:c1:96:b8:9c:04:54:37:91:90:dc:14:7c:5f:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:89:C1:03:5A:2B:B2:65:AA:E6:1F:1D:61:99:62:0D:79:7B:55:31
            X509v3 Authority Key Identifier:
                keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:51:2e:ec:87:95:05:be:35:e7:e1:1a:d5:79:c5:8e:f8:75:
         c9:f4:e0:d0:4f:5d:01:0b:82:1f:30:f9:c8:63:c8:15:39:b4:
         ae:c0:1a:a2:b6:d7:8f:14:c1:60:85:e4:46:78:a9:eb:57:31:
         9b:86:9e:9e:b3:b4:c5:cd:e4:91:5d:09:d6:ec:1a:3a:cd:7f:
         26:12:6e:dc:31:b0:3e:c2:f0:c1:aa:90:86:c7:fb:d6:f0:6e:
         b1:d6:2c:d9:50:3d:da:b3:5a:42:26:f3:82:65:67:75:fa:8a:
         98:3c:8a:d2:ad:d0:20:b5:8b:08:55:49:1c:0f:1b:63:90:ce:
         0e:6c:c2:66:30:12:d1:02:80:c6:20:48:69:bd:d0:cc:6c:64:
         0e:bd:72:ef:81:1e:61:31:2a:de:a3:59:e5:be:93:bd:dc:0e:
         50:e2:33:f5:ec:4a:54:13:fe:bb:45:88:81:81:92:26:e3:76:
         e2:e5:f1:d0:fe:a4:4b:cd:f7:92:50:5f:2d:3b:4c:96:2b:1b:
         32:0c:ad:75:1f:2f:fb:d2:04:07:8c:ed:04:39:4d:78:f2:f8:
         2f:e4:f9:ec:8b:5f:be:ec:43:10:4a:52:a1:a1:86:f8:69:a5:
         88:37:35:4d:65:c5:37:62:78:d1:4d:91:0c:dc:c5:6e:71:9d:
         1b:42:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:13:31 2025 by rpki-client