This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
File:                     tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json)
Hash identifier:          XFOOcsl67gDlHXBBeLRJUVivGElBLwBLRWszXOxI000=
Subject key identifier:   E9:73:0F:85:7B:D9:6C:25:BC:98:BB:E9:5D:07:59:C9:A7:CE:76:B8
Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
Certificate issuer:       /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Certificate serial:       0AD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
Manifest number:          0AC4
Signing time:             Sat 06 Dec 2025 18:44:29 +0000
Manifest this update:     Sat 06 Dec 2025 18:44:28 +0000
Manifest next update:     Sat 13 Dec 2025 18:44:28 +0000
Files and hashes:         1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: bDj7/qZPqmJPjl+yfM6GEmgETykskSf4Ga2mEnXd8+0=)
                          2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: yEtb/oBRu+Pt3DfxSeSuNm69CyCHMTAD09+IpcdOyrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
                          rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2773 (0xad5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
        Validity
            Not Before: Dec  6 18:44:28 2025 GMT
            Not After : Dec 13 18:44:28 2025 GMT
        Subject: CN=6934798c-c28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:db:b8:ed:e1:07:39:0d:e9:6f:78:58:58:
                    9e:0d:cd:2f:80:ab:69:28:ca:4e:da:20:7d:e9:dc:
                    a0:cf:94:1c:12:48:39:38:9c:d3:e3:11:91:05:1a:
                    88:23:d4:04:cf:30:5e:9f:26:d5:4c:a8:5a:28:05:
                    3f:d1:f2:34:87:48:56:f0:82:72:7c:bc:89:90:79:
                    40:40:6a:48:f2:23:ae:79:e4:97:16:01:ee:78:4a:
                    1b:b9:d4:5f:f8:f4:5b:88:9e:b2:c2:27:25:86:f8:
                    9f:df:fe:46:4c:8e:59:08:76:27:5d:64:99:95:5d:
                    56:f9:ef:63:83:bf:59:b2:2a:b7:fb:f8:8f:44:85:
                    a2:fa:1a:93:24:e8:02:15:dc:a6:90:7a:05:8d:3c:
                    0b:c1:5d:fd:05:d8:1b:b3:03:30:f3:cb:11:1c:f9:
                    93:b8:6f:52:19:00:43:96:8d:a1:11:e7:27:19:68:
                    5a:33:de:03:7c:61:49:45:9f:95:ca:ca:fd:87:fd:
                    61:18:c0:5b:c7:81:4c:6a:66:ca:14:8c:49:b3:e6:
                    10:bd:20:b2:95:a3:14:dd:69:eb:ae:c4:e0:6c:71:
                    39:0d:13:ed:ba:60:4b:2d:50:aa:c2:06:18:45:2d:
                    0c:94:cf:b5:a0:44:06:00:80:fc:f6:a1:b8:43:c6:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:73:0F:85:7B:D9:6C:25:BC:98:BB:E9:5D:07:59:C9:A7:CE:76:B8
            X509v3 Authority Key Identifier:
                keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:21:f7:a3:0c:24:12:bc:7f:c1:f8:b0:a3:5d:c2:75:ca:4f:
         35:c1:08:ae:d4:f2:17:11:08:eb:14:62:f0:b8:e5:97:7b:ab:
         37:11:80:3d:fc:4e:4c:26:83:4e:d6:fe:08:13:42:a3:47:b2:
         78:13:e7:bf:56:ba:67:82:2c:e0:fb:af:ac:67:7f:19:0a:40:
         f4:34:86:9e:c6:02:af:d1:74:4e:86:85:ac:a9:19:1b:55:21:
         a9:61:9d:04:54:28:88:cf:8c:b1:75:49:17:f8:57:01:8c:92:
         9d:86:cb:ae:b1:d7:70:94:53:84:42:79:d6:ee:32:92:47:3c:
         9b:d8:30:94:34:eb:ce:15:45:8b:9b:e6:54:c1:b5:e6:a9:cb:
         b4:7b:91:c4:35:8f:29:27:64:8f:88:3e:d6:72:0e:62:af:7b:
         1e:03:c0:b6:dc:11:49:b0:38:56:51:8a:ba:57:7a:4e:51:ab:
         dc:64:07:ff:7b:66:f3:68:83:5f:0a:3c:a8:aa:12:a2:aa:d9:
         69:7c:2e:79:44:a8:5c:7e:f8:60:a3:28:1c:bc:8b:86:1a:6e:
         f3:30:bb:08:f0:4b:78:e7:74:a0:3f:90:8c:cd:87:a7:52:7d:
         44:3a:b1:53:44:62:e5:e1:3f:c0:eb:5a:6f:9f:70:04:ab:75:
         15:c6:55:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:32 2025 by rpki-client