This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
File:                     TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json)
Hash identifier:          QkuCG1ApY2GDVzAPBpTQIPgGbKD17Ew40SK5Tv6xbco=
Subject key identifier:   05:CD:3B:37:61:F7:CE:9F:4B:40:B3:07:D8:A8:C8:6E:A0:0D:CC:B5
Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4
Certificate issuer:       /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
Certificate serial:       0841
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
Manifest number:          0834
Signing time:             Sat 06 Dec 2025 19:56:59 +0000
Manifest this update:     Sat 06 Dec 2025 19:56:58 +0000
Manifest next update:     Sat 13 Dec 2025 19:56:58 +0000
Files and hashes:         1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: 9LBHYQj28mZKRnXdhUuPz7JPEk6DKr/OXLLexMNeCL0=)
                          2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: bzpB4F0T2MqsBH0+3JDYXD2F08B9kqYao9uCf8JDtL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2113 (0x841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
        Validity
            Not Before: Dec  6 19:56:58 2025 GMT
            Not After : Dec 13 19:56:58 2025 GMT
        Subject: CN=69348a8b-e138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5d:6b:ab:2e:4b:5b:af:4e:ed:00:51:87:bc:
                    4d:ce:dc:b6:56:e7:50:90:7f:2f:a5:47:e7:dc:0b:
                    bc:66:2c:c3:29:74:57:af:92:50:fd:a9:61:7e:9e:
                    cf:2f:bb:26:46:f2:c3:33:c2:ca:b6:67:ab:95:19:
                    a1:af:57:db:fa:df:43:7e:f2:61:06:68:3a:c2:d8:
                    9e:a5:47:75:58:ba:08:57:e5:e2:9d:a5:84:48:6a:
                    96:64:cf:60:fd:41:b9:d9:77:f9:6f:a3:2c:83:e9:
                    53:19:11:36:eb:2b:dd:b6:61:51:2b:ed:2e:dd:ba:
                    d7:1a:16:93:69:d1:c6:3a:60:ad:a9:13:65:a7:9c:
                    4c:07:0d:e2:58:48:a4:b9:92:b1:4a:f2:fd:c9:76:
                    30:a6:ac:aa:a0:56:ac:1e:32:2d:d7:e1:12:66:fc:
                    4d:31:68:e2:a8:dc:5c:a3:32:8a:4e:47:ff:22:1c:
                    a6:e9:89:2c:35:b0:9c:b1:aa:ff:82:3c:17:cb:33:
                    42:b0:7e:37:69:b2:c3:0d:76:8e:3d:95:2b:a3:45:
                    98:47:48:97:e8:40:fa:7a:f4:e8:f2:ea:d9:04:8d:
                    43:b5:2e:4b:49:05:3a:ad:49:38:06:97:72:7e:bd:
                    21:bc:7f:1a:15:ab:d5:ed:13:93:00:8f:a1:79:e6:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CD:3B:37:61:F7:CE:9F:4B:40:B3:07:D8:A8:C8:6E:A0:0D:CC:B5
            X509v3 Authority Key Identifier:
                keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2e:06:6d:88:0b:8e:31:be:7b:4b:59:26:f8:af:67:5f:73:
         35:b5:b4:38:36:6b:01:4a:6a:17:b3:e8:0f:f5:36:5e:39:3a:
         a9:59:f4:7d:df:38:39:46:6e:4e:2f:ef:18:20:5a:05:20:d5:
         90:6a:b4:56:64:7f:38:8f:6b:af:ad:fa:e1:68:0a:4b:77:32:
         a6:9b:a3:9e:4c:72:a0:b3:95:06:26:f8:97:25:2a:22:85:76:
         fc:c7:ae:1c:ba:04:86:df:69:81:f7:d2:f4:ed:d0:c5:fa:0f:
         f2:33:03:c0:ed:6a:5e:65:64:8e:83:75:00:48:5e:37:64:cf:
         17:4d:2d:04:1e:96:92:78:3d:6c:00:13:79:a2:af:36:d8:87:
         30:d7:97:8e:3d:1a:06:0e:37:66:49:94:c4:2a:6e:58:6e:99:
         74:db:69:26:18:72:d8:cb:00:dd:f3:aa:45:86:97:f2:86:53:
         22:e0:88:ef:96:de:a8:de:7a:1a:93:b1:9f:bd:09:a6:d8:4c:
         17:4d:86:5d:67:aa:2d:b5:8e:8c:20:a0:04:18:1c:61:8d:95:
         03:99:78:d5:5a:b7:78:33:68:7a:1a:04:e9:f9:69:21:28:c3:
         69:f1:7e:41:4d:e2:e1:f4:9b:f5:2e:dc:15:0d:66:af:12:54:
         3a:c4:36:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgyQzQxMTAvBgNVBAUTKDRFQUJENkUwNUNBMEU0QTZBODE1RjlCNjQ2OTRCM0NG
ODkyQUY4RjQwHhcNMjUxMjA2MTk1NjU4WhcNMjUxMjEzMTk1NjU4WjAYMRYwFAYD
VQQDEw02OTM0OGE4Yi1lMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8F1rqy5LW69O7QBRh7xNzty2VudQkH8vpUfn3Au8ZizDKXRXr5JQ/alhfp7P
L7smRvLDM8LKtmerlRmhr1fb+t9DfvJhBmg6wtiepUd1WLoIV+XinaWESGqWZM9g
/UG52Xf5b6Msg+lTGRE26yvdtmFRK+0u3brXGhaTadHGOmCtqRNlp5xMBw3iWEik
uZKxSvL9yXYwpqyqoFasHjIt1+ESZvxNMWjiqNxcozKKTkf/Ihym6YksNbCcsar/
gjwXyzNCsH43abLDDXaOPZUro0WYR0iX6ED6evTo8urZBI1DtS5LSQU6rUk4Bpdy
fr0hvH8aFavV7ROTAI+heeZjHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXNOzdh
986fS0CzB9ioyG6gDcy1MB8GA1UdIwQYMBaAFE6r1uBcoOSmqBX5tkaUs8+JKvj0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJDNC84MUYwRDU0Q0Y1
RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVLYW9GZm0yUnBTeno0a3Et
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Rxdlc0RnlnNUthb0ZmbTJScFN6ejRrcS1QUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODJDNC84MUYwRDU0Q0Y1RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVL
YW9GZm0yUnBTeno0a3EtUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFLgZtiAuOMb57S1km+K9nX3M1tbQ4NmsBSmoXs+gP9TZeOTqpWfR9
3zg5Rm5OL+8YIFoFINWQarRWZH84j2uvrfrhaApLdzKmm6OeTHKgs5UGJviXJSoi
hXb8x64cugSG32mB99L07dDF+g/yMwPA7WpeZWSOg3UASF43ZM8XTS0EHpaSeD1s
ABN5oq822Icw15eOPRoGDjdmSZTEKm5Ybpl022kmGHLYywDd86pFhpfyhlMi4Ijv
lt6o3noak7GfvQmm2EwXTYZdZ6ottY6MIKAEGBxhjZUDmXjVWrd4M2h6GgTp+Wkh
KMNp8X5BTeLh9Jv1LtwVDWavElQ6xDYy
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:58:54 2025 by rpki-client