This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
File:                     tPvjSrdmEqnSCuUrCttB_PgKEv8.mft (raw, json)
Hash identifier:          yaY8StPQkXVmqCNGkTymNPQrOy7fzUw8qxVu9jpYuB8=
Subject key identifier:   CE:38:FC:1D:9C:A4:5E:D8:59:6F:8A:0B:1A:53:AE:89:E2:6B:4D:2F
Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF
Certificate issuer:       /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
Manifest number:          34
Signing time:             Fri 05 Dec 2025 05:22:14 +0000
Manifest this update:     Fri 05 Dec 2025 05:22:14 +0000
Manifest next update:     Fri 12 Dec 2025 05:22:14 +0000
Files and hashes:         1: tPvjSrdmEqnSCuUrCttB_PgKEv8.crl (hash: vkWeyhilaJp+8/s23SS3zL16vLwpQtCmdcLHS3XumGQ=)
                          2: 3E1ABB8C816E11F0A5992F28C4F9AE02.roa (hash: 4bcnfZJKTPDDeyNdHgj7RafzwnOWjUaA8+FGoC8oOtU=)
                          3: 3E99E81C816E11F0A5992F28C4F9AE02.roa (hash: l8LhCuq+T1sKUB7SQKQReUgSY0Aj/z/i1GPpIkc0AeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl
                          rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
        Validity
            Not Before: Dec  5 05:22:14 2025 GMT
            Not After : Dec 12 05:22:14 2025 GMT
        Subject: CN=69326c06-e277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:6e:31:36:a3:49:29:d3:90:7e:24:fd:d1:
                    23:bc:12:7e:3d:3a:d7:ad:f5:53:70:8a:80:50:c7:
                    b8:42:28:5b:8e:18:a1:8b:5c:0a:a3:0f:55:b1:0b:
                    94:c7:cd:9b:12:4c:3b:51:42:79:d3:f4:ca:89:db:
                    63:b8:c2:7a:6a:e6:ea:52:37:38:70:c9:16:9d:08:
                    d3:4a:f0:e4:91:73:7f:2c:e7:48:12:38:82:79:23:
                    6f:f6:78:93:36:c2:23:2c:1d:ce:13:aa:e9:bd:6d:
                    57:8c:7b:15:07:73:e3:6e:3c:2d:9c:47:8c:d4:39:
                    bb:29:c7:90:79:cd:59:d6:09:da:4b:2f:07:54:ca:
                    f9:7b:d6:63:b3:7b:e5:ac:8e:2c:b9:4d:3f:81:62:
                    51:ac:66:23:9b:75:35:ab:53:c9:e7:ff:73:8e:73:
                    4e:23:3a:9f:d0:3c:e0:cc:c8:d4:1c:f2:c3:9b:4b:
                    15:03:a2:d0:05:5c:5f:e5:af:5e:40:3b:a4:f5:76:
                    2f:c3:29:e0:6a:26:54:52:eb:35:be:6b:10:5a:37:
                    ca:89:c9:78:33:a9:10:aa:9f:51:fa:c8:92:76:df:
                    e5:34:49:49:14:82:83:b0:63:80:e6:80:5a:77:b4:
                    90:92:5a:fb:a2:4b:95:71:66:c8:d6:76:e8:19:15:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:38:FC:1D:9C:A4:5E:D8:59:6F:8A:0B:1A:53:AE:89:E2:6B:4D:2F
            X509v3 Authority Key Identifier:
                keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:0e:4a:3d:87:f4:81:0b:83:89:a1:5e:81:18:d8:08:4d:4e:
         f3:40:34:09:a3:f2:73:27:56:9a:51:24:f6:09:94:95:d3:4f:
         c6:19:ec:89:8f:24:bf:be:be:f2:b6:d3:c7:7f:85:ef:b6:b9:
         e4:ca:f9:fc:6f:45:88:8e:51:ed:ee:e6:b3:d6:b9:eb:a6:97:
         dd:03:84:49:ce:f1:d7:ed:74:3b:4d:f5:7c:c3:ef:ee:c3:ab:
         6d:d0:85:a0:97:a1:e7:f0:fa:63:ff:b5:d4:5e:35:cd:0d:2e:
         2f:a0:57:9b:8e:50:7c:b8:58:db:b4:3b:77:79:30:26:a0:b6:
         cd:81:6a:57:92:19:67:09:08:19:8f:cb:ac:6d:80:35:8b:32:
         c0:e9:24:24:87:73:22:a0:94:f9:7d:d7:a9:b0:0f:2e:21:61:
         94:b7:99:4d:28:9e:57:6a:7e:a6:a0:1d:47:46:c3:f8:41:c5:
         f2:f6:80:20:ca:db:da:74:61:9e:a5:16:37:3a:40:47:fc:e3:
         4e:c4:42:72:5c:b2:23:c7:d9:45:36:17:47:b7:4a:54:69:32:
         39:22:99:73:64:c1:ba:7c:49:71:22:93:4b:87:77:04:39:40:
         3e:18:62:93:ab:86:ae:cb:59:34:8a:f9:72:2c:5f:21:21:79:
         07:0d:05:29
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RjZDRDExMC8GA1UEBRMoQjRGQkUzNEFCNzY2MTJBOUQyMEFFNTJCMEFEQjQxRkNG
ODBBMTJGRjAeFw0yNTEyMDUwNTIyMTRaFw0yNTEyMTIwNTIyMTRaMBgxFjAUBgNV
BAMTDTY5MzI2YzA2LWUyNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwGW4xNqNJKdOQfiT90SO8En49Otet9VNwioBQx7hCKFuOGKGLXAqjD1WxC5TH
zZsSTDtRQnnT9MqJ22O4wnpq5upSNzhwyRadCNNK8OSRc38s50gSOIJ5I2/2eJM2
wiMsHc4Tqum9bVeMexUHc+NuPC2cR4zUObspx5B5zVnWCdpLLwdUyvl71mOze+Ws
jiy5TT+BYlGsZiObdTWrU8nn/3OOc04jOp/QPODMyNQc8sObSxUDotAFXF/lr15A
O6T1di/DKeBqJlRS6zW+axBaN8qJyXgzqRCqn1H6yJJ23+U0SUkUgoOwY4DmgFp3
tJCSWvuiS5VxZsjWdugZFZZjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzjj8HZyk
XthZb4oLGlOuieJrTS8wHwYDVR0jBBgwFoAUtPvjSrdmEqnSCuUrCttB/PgKEv8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGNkNELzMzM0JDNjA4ODE2
RDExRjBBOTA2NkQyNUM0RjlBRTAyL3RQdmpTcmRtRXFuU0N1VXJDdHRCX1BnS0V2
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdFB2alNyZG1FcW5TQ3VVckN0dEJfUGdLRXY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG
NkNELzMzM0JDNjA4ODE2RDExRjBBOTA2NkQyNUM0RjlBRTAyL3RQdmpTcmRtRXFu
U0N1VXJDdHRCX1BnS0V2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAL8OSj2H9IELg4mhXoEY2AhNTvNANAmj8nMnVppRJPYJlJXTT8YZ7ImP
JL++vvK208d/he+2ueTK+fxvRYiOUe3u5rPWueuml90DhEnO8dftdDtN9XzD7+7D
q23QhaCXoefw+mP/tdReNc0NLi+gV5uOUHy4WNu0O3d5MCagts2BaleSGWcJCBmP
y6xtgDWLMsDpJCSHcyKglPl916mwDy4hYZS3mU0onldqfqagHUdGw/hBxfL2gCDK
29p0YZ6lFjc6QEf8407EQnJcsiPH2UU2F0e3SlRpMjkimXNkwbp8SXEik0uHdwQ5
QD4YYpOrhq7LWTSK+XIsXyEheQcNBSk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:46 2025 by rpki-client