This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
File:                     8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json)
Hash identifier:          tzyoNy77/nptVSwoQ0d+s7/7lreKULVN9vQrGypVVVM=
Subject key identifier:   69:DB:B3:7D:37:55:83:F5:18:20:2A:A0:B6:A7:61:37:3C:05:47:2F
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Certificate issuer:       /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial:       04A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
Manifest number:          0493
Signing time:             Sat 06 Dec 2025 22:45:13 +0000
Manifest this update:     Sat 06 Dec 2025 22:45:12 +0000
Manifest next update:     Sat 13 Dec 2025 22:45:12 +0000
Files and hashes:         1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: iEn1F5d9HM2qcsf8bP+xYYDi3xgKhyKcYJy9C6Nn9P0=)
                          2: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: shUyL0T+nIZClfZrL/H8TAF10vSCmqRMW+JFhYiGjJU=)
                          3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: PInFHi+DRZ/0Ub/EKAgjN1FIJnedDnHONJpIq7oTfD8=)
                          4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: vkj3SfiZ1waq+IfpcqocmD4VCDj2+bbKheOVyJpVYTY=)
                          5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: VaOofZOdoeXB+ROUfhfuam0fJhFDWk1WoiIImzNsQ8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
                          rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1190 (0x4a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
        Validity
            Not Before: Dec  6 22:45:12 2025 GMT
            Not After : Dec 13 22:45:12 2025 GMT
        Subject: CN=6934b1f9-bc16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:ac:b9:f6:1d:b9:16:7d:8e:ff:48:ba:9a:
                    e5:8e:bb:f9:29:c2:5c:44:5c:e5:dd:60:ef:6f:01:
                    98:bf:f2:6c:c5:9a:d7:ee:f2:1b:0c:66:6f:53:fc:
                    09:54:d0:3a:27:73:94:df:00:18:82:ca:e5:90:c6:
                    7a:df:a9:2e:21:a8:a1:56:c8:0d:a6:87:b8:ad:62:
                    17:8c:72:c4:3a:49:fd:0e:b2:d7:b8:cd:84:4e:1a:
                    97:03:ac:4a:10:cf:a1:b2:17:95:60:88:19:87:8a:
                    b5:64:04:7c:97:f1:c8:01:14:ef:1b:f7:f0:89:84:
                    88:e3:47:04:76:4e:ad:52:e6:f3:93:c4:f0:8c:d4:
                    de:74:11:93:77:54:57:ac:7d:54:76:49:f0:74:a2:
                    e5:aa:13:2c:d1:ef:b8:22:ab:54:66:ef:05:5c:af:
                    6d:65:f8:96:8e:0b:f0:85:13:a3:f1:af:f5:83:08:
                    a2:5f:5a:bd:eb:06:58:b8:f1:2e:d3:78:8c:94:e5:
                    6d:d7:47:07:18:80:62:c9:e2:c7:aa:b3:2f:78:31:
                    a7:51:69:64:07:7c:ef:3f:73:65:ca:a0:40:fd:bf:
                    41:bb:90:f1:5c:d2:80:6e:4d:d7:ce:f1:59:aa:12:
                    73:07:09:88:52:d1:e1:54:11:71:67:b2:47:6b:7d:
                    59:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DB:B3:7D:37:55:83:F5:18:20:2A:A0:B6:A7:61:37:3C:05:47:2F
            X509v3 Authority Key Identifier:
                keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:51:aa:0f:1d:f7:29:9f:9b:bd:c6:54:de:39:90:21:a2:db:
         f9:3e:64:96:e6:a8:d7:25:47:5d:84:80:29:8e:ed:e6:42:2c:
         e1:88:f6:a3:c0:d3:b4:af:f3:2e:0c:52:a3:76:59:62:7c:73:
         8f:df:f8:40:0f:49:49:75:ab:74:21:8b:4b:65:db:73:11:25:
         d0:7b:ed:5a:49:3e:39:e2:14:70:78:94:f4:68:ee:6d:c0:6a:
         9b:5d:85:5c:0c:4a:57:5b:6e:27:69:6c:86:17:8a:2c:a9:35:
         db:c5:9d:ec:2c:79:14:78:1b:34:0f:49:8a:34:ac:23:68:a5:
         ca:03:64:66:a5:67:0b:d4:2f:70:06:56:9d:3f:a1:57:74:d0:
         3c:ad:7a:54:fd:df:c9:c5:3e:13:52:8a:c9:bb:80:23:4a:f5:
         3c:48:38:97:a3:ad:75:54:c5:82:8c:60:e0:51:0e:6f:2a:79:
         fb:36:d5:33:b6:3c:16:c0:29:17:e5:48:f5:a5:3c:1c:ff:01:
         6b:69:c6:bb:53:3c:39:4a:6a:6b:4f:57:a2:7e:55:8e:1b:00:
         ef:ed:d3:f5:57:a4:dd:44:e8:59:a3:d6:e7:96:0f:60:4c:76:
         b6:ec:46:6d:87:ba:a4:24:e6:49:b2:ac:31:e5:7e:c9:79:e9:
         ac:85:8d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 04:00:09 2025 by rpki-client