This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E696/71227DA23E8B11EF81138A59C4F9AE02/TEVBIN8yQkG8D2WWW7xefL7j1tY.mft
File:                     TEVBIN8yQkG8D2WWW7xefL7j1tY.mft (raw, json)
Hash identifier:          Bv+iSCeUqWetdhYN3OZ8sqd3LYgUhoktKld5Eqi1lyA=
Subject key identifier:   EF:6C:72:59:B9:EC:A1:E9:E2:08:05:42:AF:6E:ED:07:9E:F4:48:73
Authority key identifier: 4C:45:41:20:DF:32:42:41:BC:0F:65:96:5B:BC:5E:7C:BE:E3:D6:D6
Certificate issuer:       /CN=A911E696/serialNumber=4C454120DF324241BC0F65965BBC5E7CBEE3D6D6
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TEVBIN8yQkG8D2WWW7xefL7j1tY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E696/71227DA23E8B11EF81138A59C4F9AE02/TEVBIN8yQkG8D2WWW7xefL7j1tY.mft
Manifest number:          0110
Signing time:             Tue 23 Dec 2025 03:54:25 +0000
Manifest this update:     Tue 23 Dec 2025 03:54:24 +0000
Manifest next update:     Tue 30 Dec 2025 03:54:24 +0000
Files and hashes:         1: TEVBIN8yQkG8D2WWW7xefL7j1tY.crl (hash: ru4InLH0/QfMSS7Jm91MISCHGz5j/GHwQa+zxJKRlpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E696/71227DA23E8B11EF81138A59C4F9AE02/TEVBIN8yQkG8D2WWW7xefL7j1tY.crl
                          rsync://rpki.apnic.net/member_repository/A911E696/71227DA23E8B11EF81138A59C4F9AE02/TEVBIN8yQkG8D2WWW7xefL7j1tY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TEVBIN8yQkG8D2WWW7xefL7j1tY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E696, serialNumber=4C454120DF324241BC0F65965BBC5E7CBEE3D6D6
        Validity
            Not Before: Dec 23 03:54:24 2025 GMT
            Not After : Dec 30 03:54:24 2025 GMT
        Subject: CN=694a1271-e0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:b8:e8:2d:9a:02:96:24:b3:98:99:12:b8:
                    38:18:d1:52:8c:0f:2e:a0:59:e3:1b:21:ff:b9:5b:
                    88:83:fe:df:28:a5:aa:e0:08:c8:5c:d5:04:52:5d:
                    f2:03:09:83:5f:91:9b:a5:49:c5:8e:d3:86:84:59:
                    76:10:1a:2d:a1:0e:92:fa:54:44:5c:4b:d5:f7:26:
                    34:95:79:95:93:e9:d8:03:9a:99:05:6c:c3:5b:8d:
                    4c:67:76:de:77:57:a8:22:64:da:05:bc:34:cd:71:
                    33:9c:31:b2:59:5b:43:c5:3c:8a:25:f8:41:a5:d5:
                    0e:37:50:f5:9f:68:85:d4:c5:43:b5:61:c9:7d:3b:
                    25:fe:a9:1a:b8:02:0c:48:5a:57:73:fd:28:88:84:
                    05:94:a3:d2:e0:94:c0:a3:0d:54:33:56:81:c2:b6:
                    c1:f4:33:1d:4a:d1:96:bc:c6:2a:3e:bb:a3:c7:1f:
                    1a:61:80:0d:3c:7f:a2:56:39:61:e5:45:81:c3:14:
                    11:bc:a8:47:92:40:f4:d3:69:e9:9c:62:0b:38:f9:
                    b2:35:43:80:64:77:bc:53:8d:43:68:91:9a:e5:f7:
                    c1:4b:42:7e:94:a1:b7:b4:af:43:e1:22:40:d1:ec:
                    bc:90:0c:5a:96:22:07:27:44:c1:f7:58:f1:ab:02:
                    f0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6C:72:59:B9:EC:A1:E9:E2:08:05:42:AF:6E:ED:07:9E:F4:48:73
            X509v3 Authority Key Identifier:
                keyid:4C:45:41:20:DF:32:42:41:BC:0F:65:96:5B:BC:5E:7C:BE:E3:D6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E696/71227DA23E8B11EF81138A59C4F9AE02/TEVBIN8yQkG8D2WWW7xefL7j1tY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TEVBIN8yQkG8D2WWW7xefL7j1tY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E696/71227DA23E8B11EF81138A59C4F9AE02/TEVBIN8yQkG8D2WWW7xefL7j1tY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:64:77:1b:32:af:02:c3:e8:94:af:2b:87:78:29:ba:22:f6:
         9b:8c:2a:17:16:f8:fe:fa:d4:10:06:c2:94:4b:dc:b3:aa:4b:
         96:b6:8e:82:a8:da:e2:8a:c3:9f:98:a7:85:0d:5e:f9:a7:49:
         68:a3:b1:5b:56:9f:d9:d3:28:4c:f6:43:bf:ea:87:08:f1:77:
         55:8d:f4:45:c5:04:01:36:4e:bc:62:b3:83:7c:aa:49:3d:85:
         43:3a:1d:e1:3c:56:00:12:b6:ec:11:08:b5:0a:8f:02:cd:00:
         60:ec:03:8c:f5:5e:1b:2f:4f:e7:1b:73:37:9b:14:53:79:be:
         26:e3:db:67:71:4f:7b:4b:59:53:5d:98:79:76:fa:1b:c7:59:
         e6:79:bf:29:5b:c9:0d:b8:18:9d:7c:b4:63:d8:17:7b:14:c8:
         a7:e1:70:ac:4b:43:46:93:50:f9:93:74:58:a7:34:df:65:42:
         dd:ae:d8:df:b4:56:02:80:27:f8:31:84:92:18:91:bc:89:7d:
         7d:a4:0e:5d:f9:2a:d6:6d:a6:2e:b5:f1:55:af:7d:b1:8b:d9:
         20:dc:d3:f0:32:68:1f:2d:f8:dd:1f:5f:7e:6f:bb:e5:0c:a2:
         53:2a:f7:b7:4c:c2:b3:29:2a:b1:a3:d8:7b:77:dd:27:a4:aa:
         78:c9:61:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:32:23 2025 by rpki-client