This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
File:                     TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json)
Hash identifier:          YtfE1C7BfCjFvn1mEEYPyxr9cbiHAUfT8TgO3rNMWnI=
Subject key identifier:   65:E9:1D:B4:C3:91:C8:B0:6D:5B:26:79:B2:DE:D0:86:BF:4E:5A:F0
Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
Certificate issuer:       /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Certificate serial:       1118
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
Manifest number:          110E
Signing time:             Wed 24 Dec 2025 17:00:04 +0000
Manifest this update:     Wed 24 Dec 2025 17:00:04 +0000
Manifest next update:     Wed 31 Dec 2025 17:00:04 +0000
Files and hashes:         1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: 0ZsnPS+wbGaXKOFvlT3gYQuUHlO6ae7++RLEbDiVSV4=)
                          2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: 5meBlAmMOmT720cyEIa4c/tv1J4emStSE4Ky/WBp3tQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl
                          rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4376 (0x1118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
        Validity
            Not Before: Dec 24 17:00:04 2025 GMT
            Not After : Dec 31 17:00:04 2025 GMT
        Subject: CN=694c1c14-1e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:70:e6:6b:fb:90:54:76:c4:92:1f:31:a6:
                    7c:5a:3c:80:fe:b2:d6:1d:62:6d:d4:c3:4e:2e:2a:
                    4a:d3:7c:58:72:30:c2:8b:44:50:83:e7:d4:63:74:
                    16:6c:c2:4a:bb:a9:5b:c3:aa:89:70:25:a7:c5:dc:
                    ae:5c:bb:12:01:39:30:b1:3d:5f:ad:a2:8e:14:35:
                    61:d1:83:81:65:2c:d5:a9:4e:15:50:f8:90:42:3c:
                    a7:95:a9:81:8f:19:50:25:f4:4f:79:5c:e5:71:52:
                    ee:c8:a2:df:d5:95:19:07:4e:5b:d8:64:53:ef:fa:
                    af:71:39:48:8d:82:e2:b9:c3:1a:99:f7:4e:29:9a:
                    07:20:af:6a:69:04:b6:51:4d:32:cb:da:ad:48:e4:
                    50:d4:f0:09:dd:59:22:e6:b0:e8:20:e0:76:84:5a:
                    be:c4:88:dc:da:cd:0a:6f:b2:ca:e5:fa:b2:7d:e3:
                    1b:b8:02:74:45:cb:8f:ee:c2:2f:70:bd:52:8a:2a:
                    f9:42:7b:06:33:b0:29:aa:5f:98:36:f2:41:26:63:
                    36:8b:e1:5b:b7:75:d2:d2:2c:9c:dd:c8:60:46:a1:
                    34:ed:e0:a6:2e:1a:2f:23:75:5d:10:4f:6e:bb:5b:
                    54:58:8d:00:b3:4f:b5:15:91:39:e9:3a:26:1d:0c:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E9:1D:B4:C3:91:C8:B0:6D:5B:26:79:B2:DE:D0:86:BF:4E:5A:F0
            X509v3 Authority Key Identifier:
                keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c9:ca:46:7d:fb:87:07:2a:14:2a:65:97:91:a7:d0:f6:73:
         12:b6:42:79:c3:b6:14:34:b8:8d:51:79:52:e0:f5:0a:ef:55:
         f9:ec:56:29:4f:b7:31:25:b8:66:90:70:2b:c1:77:55:c9:8b:
         f5:95:e5:20:78:e7:ed:30:31:77:10:14:cf:c7:29:c1:df:ba:
         d5:8d:fe:cb:01:74:c3:98:f5:f9:5e:71:c8:9b:88:27:16:26:
         82:66:7d:a6:4d:26:e9:5e:39:87:ed:e5:b4:84:89:34:92:38:
         d7:c7:43:a4:72:70:57:f1:70:77:94:7b:74:72:08:ec:cf:15:
         57:c8:44:18:5c:38:0b:18:64:10:b3:46:89:d4:d2:c8:b3:f5:
         58:9b:a8:e2:f1:44:60:46:ac:19:bc:9c:bb:c5:65:06:d8:27:
         26:c3:9a:57:c0:47:94:a2:f8:f5:d3:85:23:18:8f:0e:8c:fe:
         73:aa:99:ad:89:35:1d:68:4d:be:44:2e:a2:be:22:ed:2d:41:
         05:51:61:6b:32:f6:bd:f7:68:c6:eb:56:38:7a:d2:48:10:8e:
         99:56:8f:96:1e:0d:21:bb:d2:ba:86:57:bd:07:ed:2d:65:9c:
         cb:0f:5e:1f:03:fc:11:0e:e1:a9:18:e7:f4:f0:7a:9c:fd:e6:
         a0:c9:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:56:10 2025 by rpki-client