This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
File:                     TeFRsMiiGEElxljjJzHNoaojRwA.mft (raw, json)
Hash identifier:          QnHZOwlNUdesmFc2xhdyeqN1kKjf26085xH01YapZnU=
Subject key identifier:   19:AF:34:89:61:1B:4B:35:BB:98:12:C8:15:04:04:E9:6C:F1:5C:C3
Authority key identifier: 4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
Certificate issuer:       /CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Certificate serial:       0423
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
Manifest number:          0413
Signing time:             Sat 06 Dec 2025 23:03:51 +0000
Manifest this update:     Sat 06 Dec 2025 23:03:50 +0000
Manifest next update:     Sat 13 Dec 2025 23:03:50 +0000
Files and hashes:         1: TeFRsMiiGEElxljjJzHNoaojRwA.crl (hash: hasZswqai0gNYPMc10rgeiGHSny0/6EMXYpaW1SltHU=)
                          2: 50A8AF54A1C311EC960A4D2BC4F9AE02.roa (hash: 2KtkkHGjYM6B4NJArJW7J81dwWOAgC3BbrS1q16b7zA=)
                          3: 4FED5C22A1C311EC960A4D2BC4F9AE02.roa (hash: o/h9t6dto3RR9iUYCBWuwk5m/sVDjVA7sDNry2jRXMM=)
                          4: E7AA9622DAFF11ECA67DA10BC4F9AE02.roa (hash: 23pzBzVb/LUnDvjs9zEX9C14poyur9Xh61CsW7xpwuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9FF, serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
        Validity
            Not Before: Dec  6 23:03:50 2025 GMT
            Not After : Dec 13 23:03:50 2025 GMT
        Subject: CN=6934b657-15a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:f2:cd:fa:28:70:d6:2f:33:0d:09:c4:44:
                    f0:63:6a:ef:57:55:d4:10:cd:71:76:86:5f:9a:47:
                    6f:b1:7d:97:80:ad:13:ae:ab:cd:82:cf:bd:2f:64:
                    88:0e:63:c9:6b:a8:00:64:63:41:55:5e:a2:93:7b:
                    76:49:18:fb:7b:1b:c0:b9:ff:a9:4a:06:e9:6d:cf:
                    48:94:7d:3c:b4:e8:13:f7:cd:80:66:b3:33:44:9d:
                    2c:fa:e4:e3:28:00:4e:ce:83:88:e2:01:14:77:2e:
                    22:16:70:40:a7:14:db:2a:b5:6b:72:26:e7:1d:9c:
                    85:e1:02:a1:e2:14:33:fd:88:7a:30:f2:2b:ba:87:
                    d6:11:a1:a0:a7:78:3e:fa:86:eb:38:78:09:d4:e5:
                    e2:88:83:ff:0a:72:63:f0:56:c5:60:9c:15:3c:0f:
                    ce:5b:62:7c:12:6f:21:ea:59:9d:d5:54:38:a7:f8:
                    74:c0:c7:15:20:37:2a:11:00:b2:02:eb:2c:6f:8d:
                    20:3d:fd:e3:f4:67:6d:0d:e5:69:66:75:a2:bd:4e:
                    8b:45:f2:31:7a:3a:40:62:c0:dd:22:3e:89:b3:a3:
                    af:8e:2c:ee:18:87:d3:3d:da:b7:b7:33:d6:eb:4d:
                    57:46:42:a0:7c:06:f1:38:ec:06:57:a7:91:83:e6:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AF:34:89:61:1B:4B:35:BB:98:12:C8:15:04:04:E9:6C:F1:5C:C3
            X509v3 Authority Key Identifier:
                keyid:4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:c3:8b:54:8c:2d:36:cd:a0:92:2b:27:ed:ba:7d:87:01:
         40:53:66:d1:37:d3:1f:63:60:3f:66:17:98:2f:ff:56:81:86:
         fe:af:92:2f:43:5d:46:30:68:5e:df:29:ec:f7:da:82:8f:5c:
         60:04:67:eb:b2:47:de:3a:79:33:b9:b5:af:da:e9:fd:37:63:
         83:a6:9d:3d:ae:ca:07:19:d9:92:39:3a:58:ac:e2:7a:b4:3b:
         3c:31:e6:8f:4b:1f:ee:c6:ee:b9:b1:13:d7:65:1e:3f:17:6b:
         d6:4d:08:b3:eb:2b:cb:b0:30:ae:eb:3b:b5:cf:ad:92:89:45:
         bb:69:e8:25:dd:8b:be:66:f8:21:72:08:fd:91:a9:e9:7e:55:
         25:f8:86:98:9d:87:a3:68:4a:2d:3b:41:5e:f9:12:44:71:c2:
         c8:bc:07:f4:01:10:1a:53:3d:27:05:2c:73:b6:a6:76:62:ae:
         8f:f0:5b:18:fc:3d:0f:27:7e:01:5e:cb:a8:79:f4:52:e6:9a:
         95:7a:d7:2c:6a:f0:bf:02:5d:71:75:fc:28:dd:2b:cd:bb:d4:
         3a:e1:80:fe:8e:cf:d0:96:4b:80:d7:1c:43:b3:e8:92:27:37:
         20:97:c3:ac:90:af:32:37:49:d6:9c:4b:ee:30:38:99:2c:04:
         43:52:a4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:52:43 2025 by rpki-client