This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          ezaCK0KdK0dyLRm+MgzYH24h/rHXauvE4C7XeDZkuL8=
Subject key identifier:   D9:3A:54:E8:B7:8B:7B:37:4E:B2:15:51:87:77:B3:DB:F9:CC:A9:41
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0CB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0C21
Signing time:             Fri 05 Dec 2025 02:59:27 +0000
Manifest this update:     Fri 05 Dec 2025 02:59:26 +0000
Manifest next update:     Fri 12 Dec 2025 02:59:26 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: k8cX3HztyfDprtT3h1Si4p8NiVCodJFCKt2LCpp+HR4=)
                          2: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tT6wpY26Z4BuIfJge3UrKFFEij5wdhpGksDHGEKyueE=)
                          3: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: KHyJIG6frQiFoPJvg1lo79fhG8UBhK1qYbLoHf3tBMY=)
                          4: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: 2c2fswoHtuwwjSDYm9YL0aP4fxZNIBHz0gEM3XmMKGw=)
                          5: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 4baJUQaJ57JlaoSVexNlINX3qHBtfZSmHXr0z4zuVeE=)
                          6: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: FuJ+0zC5emsysfIUM1yM5haaZPmnTrgVqP1fYVReGjo=)
                          7: 6CAE0142092E11F094B4703FC4F9AE02.roa (hash: dAr5iBEgksscApG/hnOmTYygVomN/E/w8I2tDgWWF54=)
                          8: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: ooq2bu31wjS1Rlog7R+YEobBS9ZrxCNKrBAe2LcHIzo=)
                          9: 52636904771911F083181320C4F9AE02.roa (hash: /N8Je2h9Ml0PEQGrFc9NWTNF1W+nc4xwFKtdjj8nfho=)
                          10: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: +TOxSpRoRW2I9XopVwh23lFg21DxkxtxNdO0jJ89lXM=)
                          11: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: IWHAsp5GSTIoMqNKo0F2rFXfmQxpgUta2Oi8tYKu1uo=)
                          12: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: ec9OX9UoLwyn7wN5VObF9v2iz3RI0N5kTbWroMU/2/c=)
                          13: B43088B457F311F099129754C4F9AE02.roa (hash: G/js9Bvm1ldv3EUjoboyUhcQNgg/29Bat68H2Q8xFls=)
                          14: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: EDVStKKxG06lw8JN0F9X4jCTKiN0LdF9zVSZbm6YceU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3249 (0xcb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Dec  5 02:59:26 2025 GMT
            Not After : Dec 12 02:59:26 2025 GMT
        Subject: CN=69324a8f-2a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c6:0d:f5:c3:aa:86:74:79:49:29:69:ca:74:
                    e4:c1:93:3f:90:15:f4:db:df:5f:c2:60:b1:85:01:
                    55:d6:2d:be:01:c0:05:7e:cc:80:02:1b:45:18:d6:
                    a8:9d:5e:21:f3:3e:d0:40:02:06:cf:e1:29:ce:b3:
                    d0:6f:34:1e:34:15:75:67:4d:a8:d6:be:5c:0f:18:
                    fd:0f:30:94:6e:84:d6:b9:d1:22:77:ef:d6:ec:11:
                    3b:91:dd:97:5a:4e:26:db:63:71:80:bb:2c:b9:73:
                    3c:c6:85:f6:66:eb:52:07:ca:69:bf:96:f6:18:0d:
                    3b:d3:92:32:9b:ab:c8:d3:e7:f9:58:87:a5:32:84:
                    70:78:48:5e:33:42:b8:f7:1e:af:67:1d:b9:d5:ec:
                    38:3d:5e:b4:fd:85:67:55:a3:a3:22:73:9e:97:51:
                    03:9b:3d:91:68:69:dd:32:77:5d:ae:e6:c4:0d:a4:
                    1d:48:95:cc:bf:1c:a8:bd:83:4c:55:7e:2a:17:5c:
                    c1:1f:f0:01:61:48:01:69:d1:81:dd:95:56:52:f1:
                    9c:a8:a2:48:9b:0a:fd:8d:d4:cd:8a:ad:68:4b:e2:
                    08:10:79:30:70:ff:5f:12:e3:5f:b5:f1:1a:e6:7a:
                    5c:f7:25:a1:8e:60:be:94:ab:08:d7:20:40:9f:0c:
                    fc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3A:54:E8:B7:8B:7B:37:4E:B2:15:51:87:77:B3:DB:F9:CC:A9:41
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2a:7f:c7:d1:7e:91:60:0e:85:0b:d5:8e:f3:c1:a1:72:98:
         aa:79:ba:4e:e2:47:66:32:ea:11:e6:a6:1f:53:3d:75:ac:d3:
         be:1c:17:4f:ba:40:c7:d5:92:43:f7:27:45:2a:3e:f0:2a:3a:
         96:fe:42:e1:1a:c5:fd:b6:45:8f:87:bb:f2:a8:32:b4:d0:a4:
         80:fa:58:df:dd:b3:75:0c:88:47:ff:41:66:83:e7:d3:ba:4d:
         24:93:4c:7b:c2:91:27:23:31:37:99:9a:f3:ec:05:51:16:f0:
         41:2b:02:52:ff:0b:f0:ec:af:ed:34:7c:57:93:59:6f:86:50:
         24:d6:c6:b6:af:a8:37:fe:12:41:73:15:55:b1:1b:29:0f:f2:
         c0:19:b3:c5:53:e3:3b:b3:d5:ca:6b:11:d1:f5:66:01:83:21:
         5f:dd:da:87:2b:23:8c:dd:38:23:7b:87:6f:f9:40:08:a9:17:
         67:7a:23:0c:a3:0c:f9:cf:de:5c:16:9c:6e:5e:98:39:57:11:
         e8:c9:9c:86:ff:de:a5:a1:89:5b:f6:a4:fa:56:21:a4:b0:66:
         b3:b0:5d:80:ce:ec:0a:10:9e:07:b4:da:9d:90:5f:39:67:cf:
         29:d4:9c:9e:c5:0a:45:65:bd:09:ad:7e:c4:1d:7f:c7:b8:55:
         cb:e5:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:31:21 2025 by rpki-client