This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
File:                     tRT6pSOY594ly7jXeUObHjA3Rw4.mft (raw, json)
Hash identifier:          dwpfdPMYA010ROTXIzXE+Jai/YtCAX5GGTqtTF++OOM=
Subject key identifier:   19:88:1F:26:6F:B5:7E:09:79:E6:9F:27:39:D5:27:C7:55:2D:4D:F8
Authority key identifier: B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E
Certificate issuer:       /CN=A919874A/serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
Manifest number:          98
Signing time:             Fri 05 Dec 2025 04:23:59 +0000
Manifest this update:     Fri 05 Dec 2025 04:23:59 +0000
Manifest next update:     Fri 12 Dec 2025 04:23:59 +0000
Files and hashes:         1: tRT6pSOY594ly7jXeUObHjA3Rw4.crl (hash: asFG7r654ewf7z7rct3z9uaDfzVGBmkqAADuoxI3RsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl
                          rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919874A, serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E
        Validity
            Not Before: Dec  5 04:23:59 2025 GMT
            Not After : Dec 12 04:23:59 2025 GMT
        Subject: CN=69325e5f-cb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:13:76:29:45:5f:e1:87:1d:54:bf:e9:27:
                    4d:9a:c9:4d:70:67:19:b5:5d:50:b9:4b:88:2d:5d:
                    e5:9f:72:de:8b:c1:0d:90:77:b3:e0:4c:75:bf:68:
                    4e:ec:13:d3:38:98:6c:6c:cc:d0:93:d0:50:92:46:
                    a0:df:e4:32:95:cd:82:01:35:af:13:f4:d0:69:46:
                    04:02:52:8d:a2:54:e6:a1:e8:b7:37:a4:d9:f4:cf:
                    17:e8:92:cc:c1:94:43:1a:d4:71:ab:31:68:ab:14:
                    a0:d2:1a:ad:84:fa:83:ea:2c:bc:64:a9:ec:94:c7:
                    80:a6:d0:ba:ed:68:bb:4b:ef:ab:0a:8e:c2:4d:db:
                    d4:bb:c6:0b:4a:b4:3e:03:bd:1c:05:47:69:9d:12:
                    b3:51:51:29:87:f0:ef:11:60:b0:84:29:14:aa:72:
                    91:50:74:82:78:b8:e3:30:c2:a2:4b:2a:2b:2d:ba:
                    2f:f4:bf:e0:50:f6:b7:f0:c6:00:b7:db:df:2f:c0:
                    f7:22:a3:8e:60:e1:ff:68:90:13:e1:13:b1:50:f9:
                    69:7e:4e:90:38:75:1a:7b:5e:00:d0:f0:c3:27:4a:
                    13:81:dc:45:51:69:37:9f:1f:a2:46:0a:93:88:f7:
                    af:ce:1f:ca:82:de:e2:ea:bd:be:c5:e4:4a:45:d8:
                    8f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:88:1F:26:6F:B5:7E:09:79:E6:9F:27:39:D5:27:C7:55:2D:4D:F8
            X509v3 Authority Key Identifier:
                keyid:B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e3:cb:d8:8a:22:55:a9:9c:a5:f9:35:c3:5e:8e:5d:0b:c2:
         6b:e9:17:2f:cc:db:4a:0d:ce:15:a8:51:95:7b:94:02:6f:13:
         70:98:5a:80:66:f2:57:7c:6a:d8:d7:33:b2:4a:13:b2:96:6b:
         e0:67:95:81:90:1c:a5:cf:cf:4b:93:c7:50:82:55:b3:0a:19:
         4a:4c:b0:b7:70:f7:ec:45:b4:da:3a:ae:6b:6d:40:4c:65:2f:
         37:4c:b1:7c:7a:33:0f:e6:50:13:bd:4f:07:4e:89:b9:2a:8b:
         74:5a:25:14:dd:32:fa:a0:06:06:b9:4e:cc:59:6a:da:9b:26:
         56:09:b1:9e:92:cd:a6:9c:b4:8d:01:3f:2d:bb:01:d6:cc:02:
         39:f3:84:19:a0:7f:f5:eb:c1:34:d1:ff:87:2b:ae:41:3e:90:
         71:e2:fe:6b:9e:f3:8f:f9:e3:fa:10:4b:8b:4c:66:cb:11:a7:
         6a:ce:84:22:a5:9c:aa:e7:69:e3:a4:7b:ed:a4:fa:fa:88:6d:
         2a:9b:52:80:62:f9:65:1d:e4:3e:1f:e1:b4:6c:25:7f:ed:e2:
         24:9c:2e:b0:5a:ab:5b:49:97:77:cf:11:20:2d:71:14:45:ee:
         34:c7:88:15:5e:f2:bc:75:38:5f:38:96:60:04:2a:55:ed:cc:
         f0:f0:34:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg3NEExMTAvBgNVBAUTKEI1MTRGQUE1MjM5OEU3REUyNUNCQjhENzc5NDM5QjFF
MzAzNzQ3MEUwHhcNMjUxMjA1MDQyMzU5WhcNMjUxMjEyMDQyMzU5WjAYMRYwFAYD
VQQDEw02OTMyNWU1Zi1jYjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxHYTdilFX+GHHVS/6SdNmslNcGcZtV1QuUuILV3ln3Lei8ENkHez4Ex1v2hO
7BPTOJhsbMzQk9BQkkag3+Qylc2CATWvE/TQaUYEAlKNolTmoei3N6TZ9M8X6JLM
wZRDGtRxqzFoqxSg0hqthPqD6iy8ZKnslMeAptC67Wi7S++rCo7CTdvUu8YLSrQ+
A70cBUdpnRKzUVEph/DvEWCwhCkUqnKRUHSCeLjjMMKiSyorLbov9L/gUPa38MYA
t9vfL8D3IqOOYOH/aJAT4ROxUPlpfk6QOHUae14A0PDDJ0oTgdxFUWk3nx+iRgqT
iPevzh/Kgt7i6r2+xeRKRdiPPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmIHyZv
tX4JeeafJznVJ8dVLU34MB8GA1UdIwQYMBaAFLUU+qUjmOfeJcu413lDmx4wN0cO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc0QS9GNjFEODlDNkVB
RDMxMUVGQjFDNENDNTVDNEY5QUUwMi90UlQ2cFNPWTU5NGx5N2pYZVVPYkhqQTNS
dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RSVDZwU09ZNTk0bHk3alhlVU9iSGpBM1J3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODc0QS9GNjFEODlDNkVBRDMxMUVGQjFDNENDNTVDNEY5QUUwMi90UlQ2cFNPWTU5
NGx5N2pYZVVPYkhqQTNSdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBx48vYiiJVqZyl+TXDXo5dC8Jr6RcvzNtKDc4VqFGVe5QCbxNwmFqA
ZvJXfGrY1zOyShOylmvgZ5WBkBylz89Lk8dQglWzChlKTLC3cPfsRbTaOq5rbUBM
ZS83TLF8ejMP5lATvU8HTom5Kot0WiUU3TL6oAYGuU7MWWramyZWCbGeks2mnLSN
AT8tuwHWzAI584QZoH/168E00f+HK65BPpBx4v5rnvOP+eP6EEuLTGbLEadqzoQi
pZyq52njpHvtpPr6iG0qm1KAYvllHeQ+H+G0bCV/7eIknC6wWqtbSZd3zxEgLXEU
Re40x4gVXvK8dThfOJZgBCpV7czw8DR+
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:01:34 2025 by rpki-client