This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
File:                     tr-xkXvTGlViMihYRudjoUMyymg.mft (raw, json)
Hash identifier:          6gXWOcOfiLudwQU3yQGov9fKT08whTCDpRFJGfxQGzk=
Subject key identifier:   1E:4E:29:61:C4:C4:A1:0B:23:A6:AD:C1:16:F6:87:00:77:43:5A:45
Authority key identifier: B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68
Certificate issuer:       /CN=A91A6E4D/serialNumber=B6BFB1917BD31A556232285846E763A14332CA68
Certificate serial:       058A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
Manifest number:          058A
Signing time:             Thu 04 Dec 2025 21:52:44 +0000
Manifest this update:     Thu 04 Dec 2025 21:52:43 +0000
Manifest next update:     Thu 11 Dec 2025 21:52:43 +0000
Files and hashes:         1: tr-xkXvTGlViMihYRudjoUMyymg.crl (hash: mGaLEePsTL+9dJ+j+18HsY4WOPkSPOQX4oCqPjz3dRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl
                          rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6E4D, serialNumber=B6BFB1917BD31A556232285846E763A14332CA68
        Validity
            Not Before: Dec  4 21:52:43 2025 GMT
            Not After : Dec 11 21:52:43 2025 GMT
        Subject: CN=693202ac-398c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:a7:47:d5:19:f6:68:8f:fb:2e:ce:73:d3:
                    51:2b:d8:7e:85:78:dc:7a:61:f0:9d:c4:ae:3c:c2:
                    9f:d7:09:c5:14:95:0a:31:e1:74:3c:d4:6a:22:b4:
                    54:91:66:86:ee:ee:75:8d:ee:42:19:9c:14:64:6e:
                    8c:16:0f:fb:39:eb:de:6f:ac:93:c1:db:8e:94:b3:
                    c2:6b:d1:65:b8:5f:bd:b4:72:ec:26:17:03:54:df:
                    6d:fe:9f:fd:1b:c9:7f:65:83:f6:30:dc:b7:05:0e:
                    4b:95:09:7a:d7:d5:21:7c:8a:58:80:44:8f:1f:39:
                    d7:1c:90:d5:f0:35:cb:b4:98:7e:15:6c:7b:06:15:
                    f6:ad:c6:b7:3e:95:2f:26:34:1e:df:0d:a1:af:bb:
                    a3:44:49:98:30:a8:7d:ad:7d:b6:76:3a:4c:f9:84:
                    01:af:07:d6:16:c1:f1:26:87:d6:b3:74:a2:d9:df:
                    56:3e:fc:61:a1:67:8b:b2:2d:d4:91:28:62:d2:81:
                    02:ab:fb:86:60:a0:6d:64:bf:fc:cb:85:23:8f:9b:
                    2f:41:f1:6e:e8:33:2b:26:ea:fa:90:b8:ad:42:01:
                    28:ee:a4:33:db:3c:d7:b4:88:a6:95:f0:93:91:50:
                    d9:69:45:b0:f1:ca:16:c2:62:d6:e8:f1:6b:c2:68:
                    4c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4E:29:61:C4:C4:A1:0B:23:A6:AD:C1:16:F6:87:00:77:43:5A:45
            X509v3 Authority Key Identifier:
                keyid:B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d0:7f:17:f3:45:a3:20:03:4d:33:ce:08:22:d5:38:82:ed:
         18:5b:99:77:ff:8e:0e:22:71:60:ac:d1:23:ca:95:89:3f:5a:
         2e:b6:4b:b6:8c:bc:cd:ef:13:9a:5a:97:01:c6:2c:cd:54:9b:
         55:ba:19:1e:80:26:dd:1f:bd:f7:02:6a:47:d2:ee:e4:f4:b7:
         4c:d0:e8:c5:11:97:33:02:b1:15:f1:25:bc:7d:a2:d9:42:48:
         a0:46:b0:db:a1:83:99:98:2d:f3:6e:38:7f:e6:5c:ad:40:25:
         a1:20:53:6c:74:ee:d4:4e:37:f1:88:e3:55:d1:da:a9:d6:0d:
         53:ae:96:7f:eb:a2:8c:b0:22:14:bf:d6:2e:6f:71:1a:d2:4b:
         fe:81:95:15:df:61:8d:85:0b:b7:58:50:34:e1:59:87:b6:4f:
         85:9a:85:bd:98:1a:07:b5:4d:a1:ca:c2:75:36:d6:9e:5d:f7:
         4f:e5:fe:d5:51:d7:9a:47:d4:66:78:b4:c7:06:96:97:e2:86:
         4b:ad:bc:c7:c7:d1:47:8d:d9:84:08:24:46:23:28:77:9c:e0:
         60:4b:e0:c0:9d:7f:92:40:1b:5c:38:66:a4:2e:3f:85:c0:00:
         ee:a7:19:72:15:10:62:b7:f0:e9:ba:23:71:57:f1:d4:c1:ef:
         21:bb:d1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:37:11 2025 by rpki-client