This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
File:                     TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json)
Hash identifier:          M3/Y4EPELXJZdUrVM0iMeXcg7QxUbk5CwkkpCHeXjXo=
Subject key identifier:   19:A6:42:6B:2D:1F:83:59:AD:91:F2:18:81:A3:98:F7:D6:19:A3:02
Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
Certificate issuer:       /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
Manifest number:          01B5
Signing time:             Tue 23 Dec 2025 02:08:32 +0000
Manifest this update:     Tue 23 Dec 2025 02:08:31 +0000
Manifest next update:     Tue 30 Dec 2025 02:08:31 +0000
Files and hashes:         1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: kUYidG40ijnaaiTF6b89Eo44dbyPWMzLEG7Z7qVY7Oc=)
                          2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: c8xC2gX2VG0WPWJTP0Tr0I6LdHRsTfIm5z3hVzO25VA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
                          rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
        Validity
            Not Before: Dec 23 02:08:31 2025 GMT
            Not After : Dec 30 02:08:31 2025 GMT
        Subject: CN=6949f9a0-0e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4e:2a:e1:f8:e9:62:ae:88:cb:a6:37:0b:4a:
                    cf:b7:9e:7c:51:5a:49:1b:aa:14:71:e0:f8:c1:1c:
                    90:36:e4:df:e1:93:05:95:3c:50:3d:3b:d0:62:7d:
                    73:3d:af:f4:45:12:a9:99:f7:ab:9b:cd:31:1a:23:
                    8f:54:72:86:61:af:44:96:39:32:2c:2f:aa:36:5f:
                    1e:94:da:94:9d:07:1e:02:a9:92:0e:89:d8:0b:bd:
                    3f:ca:19:eb:6e:6c:9b:bb:1c:e5:21:1a:f4:33:62:
                    0d:66:af:84:0c:19:e9:7a:fd:a4:f1:3e:8c:3f:2f:
                    15:14:1c:80:09:ad:f3:cf:94:ca:83:99:5e:f9:ed:
                    74:3e:06:0d:8f:62:74:64:ef:94:29:69:7a:52:21:
                    87:24:0e:0d:ac:88:86:b9:70:6b:09:9b:27:92:bf:
                    6a:9c:cc:74:28:e6:ca:50:36:31:3a:48:ec:54:74:
                    80:b0:bc:81:2d:39:21:bc:37:32:14:07:09:0a:4a:
                    3c:ac:ce:a8:c2:c8:23:d8:66:a6:d9:d7:27:89:ba:
                    a9:b9:e1:b9:0d:fe:ba:9b:82:89:1b:bb:42:07:e6:
                    59:97:99:08:19:6d:f7:3e:e1:8b:12:1c:4e:e2:c9:
                    3d:a5:60:21:71:8c:7b:fa:a7:39:20:0d:b8:0e:d6:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A6:42:6B:2D:1F:83:59:AD:91:F2:18:81:A3:98:F7:D6:19:A3:02
            X509v3 Authority Key Identifier:
                keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:46:68:de:7b:83:20:c7:73:f2:e8:82:9f:7f:ad:b2:04:e8:
         46:1d:98:2e:49:54:f6:d4:5b:52:75:fd:fd:cb:6d:a7:51:19:
         b3:2f:2d:4f:72:0c:c2:03:bc:91:a2:7c:36:d7:1c:57:95:9d:
         2d:ae:21:c5:f0:fa:c7:59:ea:e9:79:50:cf:0f:0d:f8:b2:b1:
         cd:6b:89:06:01:93:04:4c:58:68:ea:b6:50:0b:6f:34:e4:92:
         08:5b:19:68:b9:ea:c5:3a:3c:d6:af:67:c9:f4:66:13:68:8e:
         41:63:4b:2d:e3:5e:7d:8e:3f:33:5d:3a:37:fa:70:fc:9b:07:
         a9:71:e3:ef:8c:fc:25:9b:af:b2:02:87:09:6c:9f:07:be:22:
         81:72:3f:4c:c1:6e:27:d6:13:c9:af:55:e3:de:35:3a:8b:bb:
         ac:36:69:4a:d5:32:45:51:b1:c5:04:1b:4d:4f:4f:f3:e3:d4:
         e4:36:8f:90:24:c1:77:b3:d2:1f:63:26:00:88:06:e0:b8:3c:
         6f:07:66:60:ad:89:bb:36:9e:0b:38:f7:9a:ab:43:f0:81:e1:
         17:ae:85:04:3d:73:68:8e:b0:82:e3:a1:e8:57:be:b8:13:a0:
         37:25:8d:16:54:78:fe:ee:1a:0d:71:c3:2f:31:fb:f6:0e:6a:
         1d:de:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:34 2025 by rpki-client