This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
File:                     TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json)
Hash identifier:          PgcZmExnEZztrozuMTkBT7x5zfra4ZU+yQEuCeRb1z0=
Subject key identifier:   3F:01:E9:81:AB:7C:C5:53:C3:D0:D4:0E:C9:64:74:E9:9D:BE:D9:42
Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Certificate issuer:       /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
Manifest number:          65
Signing time:             Fri 05 Dec 2025 04:53:34 +0000
Manifest this update:     Fri 05 Dec 2025 04:53:33 +0000
Manifest next update:     Fri 12 Dec 2025 04:53:33 +0000
Files and hashes:         1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: oHJmvRXGx6WoU5WnhswcQUBieA4/befZeeEfUrvM/6Y=)
                          2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: Cosb+eMZxQ3sCZz6h4y2hYsraDJKDCIgjZyVYBFmpVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
        Validity
            Not Before: Dec  5 04:53:33 2025 GMT
            Not After : Dec 12 04:53:33 2025 GMT
        Subject: CN=6932654d-c504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0a:46:85:e6:d9:bc:1c:92:ef:72:7c:e1:19:
                    c4:a0:86:72:51:8f:3a:13:d1:38:4a:a8:69:56:29:
                    96:15:8c:94:c4:af:08:d2:19:13:1f:e6:3e:b9:72:
                    47:80:17:1f:9a:b1:66:f9:73:49:1b:29:7d:64:70:
                    a1:6b:24:4a:7d:0e:6b:69:b3:f5:22:3b:2d:02:e0:
                    8e:30:68:79:c1:72:28:cd:62:0e:12:d9:2f:6c:4c:
                    c9:52:97:21:f0:bc:9a:5f:45:ca:a3:62:c8:59:b8:
                    28:fe:cc:00:ba:d1:a0:7e:e2:c1:85:a2:7a:90:f4:
                    23:d9:63:1a:f6:94:d2:46:b0:e4:3f:5c:8e:c4:01:
                    41:37:f0:34:e5:91:7a:6b:3b:f2:a4:33:be:8e:f2:
                    e9:d3:f1:3a:e0:2f:4f:83:c2:66:8d:9c:17:9d:75:
                    67:5e:4a:57:d4:c4:85:76:fa:86:63:1b:7d:54:e5:
                    78:b5:25:e3:58:3d:62:cf:76:59:61:3b:a7:bf:1c:
                    52:f6:f5:9c:aa:73:4b:88:6e:a2:84:54:73:2d:09:
                    7c:bb:57:aa:0f:9f:77:d4:7d:8b:20:f9:16:df:ee:
                    bf:55:e8:f3:f9:04:5e:5f:11:08:94:2f:15:0b:c2:
                    43:f2:35:81:f4:d9:1c:f8:87:4c:05:6e:6e:6d:8f:
                    4c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:01:E9:81:AB:7C:C5:53:C3:D0:D4:0E:C9:64:74:E9:9D:BE:D9:42
            X509v3 Authority Key Identifier:
                keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:2a:52:d7:68:c0:24:ae:31:8a:9c:28:58:3c:6c:85:5c:ec:
         2f:cd:0e:97:39:11:65:41:ee:0a:86:72:07:f9:95:72:43:84:
         1f:aa:e3:e2:b7:a1:fe:b4:c3:f7:d7:8b:9e:b2:47:67:fe:c0:
         52:dd:01:45:b9:a5:0a:4b:25:2b:d9:47:76:4e:cf:0f:6e:e6:
         88:fc:07:a8:6e:88:32:bc:01:8a:a6:25:cb:f9:5f:2a:15:d1:
         ef:97:b8:bf:71:1f:e6:8d:35:08:0b:20:bc:c9:65:bb:9b:4a:
         8d:33:cc:0d:37:43:0b:29:84:3e:aa:c4:af:0d:2e:57:eb:4c:
         a8:4a:03:2b:a1:fb:10:dc:7d:ad:94:83:61:e3:ce:41:4a:8c:
         9c:64:a6:65:d9:11:80:1a:bc:7b:da:f3:84:db:16:98:e8:55:
         7c:d1:15:5a:f2:34:1e:74:39:04:0b:c8:bb:3d:db:4e:49:e7:
         5d:e0:52:e1:e2:32:b3:dd:fc:8f:6b:64:3e:b6:67:28:cc:99:
         5d:c5:30:17:20:cf:71:01:be:1b:51:48:a7:d6:e1:87:9f:11:
         ce:f4:fb:3a:aa:3b:96:4e:fa:e8:be:86:fb:55:ca:a8:bb:c6:
         a1:81:cc:8f:7e:6a:9f:1b:27:5e:0a:b0:70:7e:07:34:e0:eb:
         3b:4c:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:47:21 2025 by rpki-client