This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
File:                     TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json)
Hash identifier:          fOAqtSCrLKkxWKFvNMVotymEXnx53iGO5djToMXLs+A=
Subject key identifier:   F3:56:C4:BE:EE:E8:6C:A6:E9:06:DB:78:7B:38:E3:FF:F9:41:E0:EB
Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
Certificate issuer:       /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
Manifest number:          AF
Signing time:             Sun 21 Dec 2025 05:14:58 +0000
Manifest this update:     Sun 21 Dec 2025 05:14:58 +0000
Manifest next update:     Sun 28 Dec 2025 05:14:58 +0000
Files and hashes:         1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: zdBBwL+gV9zEpfLfl9M7Kyf+MgRoL2mwRisWmvA8z+E=)
                          2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: JjJCce1zF9qiD7rlQJmvV1gpbHE3mN8ttiQOSid+Fl4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
                          rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 05:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
        Validity
            Not Before: Dec 21 05:14:58 2025 GMT
            Not After : Dec 28 05:14:58 2025 GMT
        Subject: CN=69478252-fa21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:af:58:15:2d:50:cd:6e:0a:fb:8d:2d:03:d7:
                    53:cc:d9:8c:f8:04:dc:02:88:9a:2f:ad:1a:5c:77:
                    df:27:a5:fc:08:61:7a:9d:aa:18:c0:d2:e7:37:22:
                    14:0d:ca:81:e0:4a:9c:5e:bb:cb:42:83:9c:f6:39:
                    7f:2f:4d:a5:1c:7d:4f:cf:10:c2:b5:54:19:88:7b:
                    7a:b8:3f:93:80:99:09:0a:4c:ae:3f:55:12:bc:f1:
                    3a:37:1b:3d:b8:71:13:26:6f:90:35:2a:45:f7:6a:
                    22:5c:61:1e:97:d9:71:27:78:83:65:c6:0e:a2:c2:
                    04:14:49:dd:b0:40:a4:ce:07:c1:da:c2:29:43:e4:
                    bc:29:5e:29:d8:5f:27:fa:99:ac:f1:43:6c:a4:94:
                    6a:60:da:a1:eb:4c:8f:24:ac:04:7c:ac:09:79:f9:
                    c9:8e:27:c7:86:80:ad:11:e2:64:2f:05:33:54:07:
                    cf:73:8b:4e:e4:45:07:8e:ed:47:a7:07:7f:89:96:
                    c1:b4:28:23:8c:84:59:fe:64:d0:25:64:20:0c:94:
                    59:0f:3e:e1:b5:7c:0a:b3:a9:9b:b7:7a:ce:b5:14:
                    18:49:34:cc:a8:30:97:74:98:b5:41:3e:2a:5a:60:
                    bd:12:9e:6f:d4:f4:38:34:fe:5e:0c:f4:cb:bd:09:
                    fa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:56:C4:BE:EE:E8:6C:A6:E9:06:DB:78:7B:38:E3:FF:F9:41:E0:EB
            X509v3 Authority Key Identifier:
                keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:63:74:d8:b2:e5:82:13:05:95:a8:6a:91:0b:31:ce:61:c2:
         54:46:da:1c:b9:20:40:25:c8:1e:e9:a9:da:e5:ae:ba:50:ec:
         5f:c5:f3:8e:86:8e:8b:37:79:1e:2d:5b:8a:b9:5a:83:5a:ef:
         3e:35:73:6e:0c:aa:b6:4c:8e:58:6b:1b:35:28:9d:80:9c:e7:
         b9:4e:cb:9f:35:5e:01:3f:52:ce:6c:4a:26:85:3d:e3:27:62:
         39:74:d3:43:3a:c9:8d:f3:0a:f9:d5:49:25:66:ae:5f:b6:cb:
         9f:0b:17:ab:99:67:0d:20:b9:91:d2:c3:dd:52:52:e2:6c:3b:
         48:56:32:a1:33:23:83:85:c1:92:22:ec:6a:eb:aa:60:44:08:
         46:f8:01:79:99:47:fb:54:85:6d:58:fe:a2:75:64:c8:a8:dd:
         d9:cd:fe:dc:82:a9:19:66:f6:d5:b7:db:85:c1:41:de:a4:b5:
         95:72:62:c4:51:5b:13:6b:5f:c0:5e:5b:22:86:03:b9:8a:14:
         18:84:f9:80:04:ec:62:37:a5:7d:c3:8a:b3:85:2b:3d:1c:b9:
         cd:3a:e9:35:4f:63:50:8c:9c:92:38:26:97:9f:0a:86:da:22:
         86:99:ba:f7:50:dd:27:aa:fa:0d:f8:97:d6:1f:fb:bc:6d:e8:
         99:13:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:34:12 2025 by rpki-client