This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
File:                     0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft (raw, json)
Hash identifier:          FepEh1ffGPi8VzzZptxKHjAzm0QO3Whyp9oLo8PUWlM=
Subject key identifier:   5B:74:14:11:E6:6C:6A:FB:0B:52:53:79:AC:1A:AC:DB:4C:FD:15:2F
Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
Certificate issuer:       /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Certificate serial:       1127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
Manifest number:          110C
Signing time:             Sat 06 Dec 2025 16:46:45 +0000
Manifest this update:     Sat 06 Dec 2025 16:46:44 +0000
Manifest next update:     Sat 13 Dec 2025 16:46:44 +0000
Files and hashes:         1: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl (hash: 74U8M8+EGQ6RFzDyCcF4QGJfbu3Nlpb2sQN+EnnFrBg=)
                          2: 0E17B1AE78F511EC83E56014C4F9AE02.roa (hash: lCmO2moRnEyFjHn2T0RrSpJHfoRMsDo8flibJ/q1im8=)
                          3: 0D0B79E478F511EC83E56014C4F9AE02.roa (hash: tpKBG2KlXfT/Zt122B62y1RWSYubHmXeyHELnt2EtS4=)
                          4: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (hash: IHi+IFG70AY+pGCPcqa0F+qxqcr2LZY1LLXZfYW/jkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
                          rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4391 (0x1127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
        Validity
            Not Before: Dec  6 16:46:44 2025 GMT
            Not After : Dec 13 16:46:44 2025 GMT
        Subject: CN=69345df5-ed7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9f:15:8f:ed:47:80:62:de:bd:2c:1d:90:00:
                    3e:f1:a0:c7:6c:4e:d1:ca:10:9c:bf:ed:c6:b8:28:
                    80:40:04:f5:8b:fd:af:33:be:d0:74:0a:fe:a0:bb:
                    8b:96:60:ca:1f:be:be:87:33:9b:f5:4f:f4:34:19:
                    f2:12:c0:b3:3a:36:ef:d2:f3:95:98:12:40:a7:70:
                    3d:6b:93:76:0f:45:5e:af:b2:ef:b0:40:74:eb:25:
                    a1:b6:36:07:8c:98:7f:1d:ef:89:0d:23:0b:7c:e7:
                    5a:e6:60:bc:67:c1:b9:9c:4b:a7:3f:8c:fd:a1:1f:
                    37:ba:ce:dd:5f:6b:69:7f:00:37:76:46:e5:d7:55:
                    fb:fd:11:7b:a9:fe:f4:b2:58:c6:7d:c1:4e:1c:57:
                    08:1f:05:a7:4c:39:ef:fe:e9:6a:fa:71:e5:20:27:
                    36:d0:4e:5c:c8:e3:48:d9:45:d8:dc:64:b4:57:2c:
                    ba:8b:3b:1f:c6:87:17:4d:5f:ed:65:45:a0:0e:92:
                    7c:04:b2:03:09:08:e1:50:af:2f:3a:c3:cc:75:c9:
                    8d:f1:51:bb:02:0a:2f:3f:41:7e:52:55:c5:99:9b:
                    dc:61:4d:22:0b:df:55:d8:b4:cf:13:d2:bc:54:4f:
                    90:d3:fb:53:aa:1a:32:7c:f0:6f:88:3f:5c:2e:58:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:74:14:11:E6:6C:6A:FB:0B:52:53:79:AC:1A:AC:DB:4C:FD:15:2F
            X509v3 Authority Key Identifier:
                keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e8:96:9a:a5:97:70:05:88:66:ec:e5:fa:1e:93:fd:d8:da:
         74:41:97:67:f4:3a:38:a0:9c:03:60:0d:2c:f9:47:08:56:cd:
         e9:ef:a2:ed:1c:fc:6f:b8:5a:dc:85:32:e5:70:ef:59:58:58:
         01:42:1d:91:c8:3a:ba:7f:a7:2d:28:26:ad:64:5a:9b:5c:03:
         c6:ad:02:f2:85:37:05:c0:b0:e1:ab:90:f1:54:81:68:50:18:
         0d:a6:32:48:40:01:3e:03:6c:63:f2:a6:c3:46:db:0f:69:84:
         ea:fa:50:cf:49:e0:46:f9:8c:5c:9e:20:c7:4c:82:34:84:a2:
         07:38:28:fc:8d:ab:f8:09:63:21:1f:5b:02:72:c5:83:7a:00:
         84:96:63:dc:a6:e5:c4:f6:02:23:43:9e:1d:0b:83:eb:c2:bb:
         cc:e9:d5:d8:13:df:11:80:9e:5f:f6:f8:29:06:58:db:7a:fb:
         68:a4:88:5b:67:b4:4d:67:05:8a:a4:01:e2:f3:fd:0f:37:8f:
         7d:8d:d2:d0:64:38:2e:12:66:0d:75:31:0b:09:2c:29:09:85:
         16:bd:9d:9e:5c:f9:13:7e:1b:90:f8:79:43:84:ad:f3:71:41:
         a9:f9:2f:61:49:67:96:f6:98:5d:84:45:a1:6b:6a:49:54:9c:
         10:13:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:19:42 2025 by rpki-client