This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
File:                     tendxr8J-JRYVWCHRC2UjEQDRTA.mft (raw, json)
Hash identifier:          HaeFoj6wSL2P85bziUo8nVyTKcUBvyyauyUknPlMpq0=
Subject key identifier:   71:56:85:4B:3C:AC:D8:8A:C5:CA:C9:73:EF:95:CD:F2:23:BA:BC:96
Authority key identifier: B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30
Certificate issuer:       /CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
Certificate serial:       0211
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
Manifest number:          020B
Signing time:             Tue 23 Dec 2025 01:22:52 +0000
Manifest this update:     Tue 23 Dec 2025 01:22:51 +0000
Manifest next update:     Tue 30 Dec 2025 01:22:51 +0000
Files and hashes:         1: tendxr8J-JRYVWCHRC2UjEQDRTA.crl (hash: FVmBd7VPZnsSMj54pq56T4RwDxJ2xRVd4IRI9AbZ3sw=)
                          2: 4FD4AF70C39511ED99703D2AC4F9AE02.roa (hash: 9/AcvjliR95434ywgMrtXlXwFBmsQrBKTnsFFaaHZi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl
                          rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915568B, serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
        Validity
            Not Before: Dec 23 01:22:51 2025 GMT
            Not After : Dec 30 01:22:51 2025 GMT
        Subject: CN=6949eeec-96d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:4e:f8:2e:6a:e7:34:5e:69:7b:f4:0e:15:
                    3d:3f:dd:ba:63:8f:2d:50:cd:76:82:31:9e:b6:bc:
                    c9:d6:1b:21:68:65:5c:f8:fc:92:be:f2:39:bf:4b:
                    35:38:7b:76:4a:12:90:97:e9:47:ac:9e:a1:5b:95:
                    f9:e6:37:04:72:a7:bb:a1:e1:53:63:7c:b2:6a:f8:
                    68:2b:aa:ff:ee:d6:63:94:b9:23:f8:ec:99:d0:54:
                    25:28:49:a6:45:75:3c:d6:8d:09:a7:24:b2:3c:fa:
                    1a:39:f4:ac:c8:c5:4d:60:85:c2:c8:56:52:fe:98:
                    c4:14:14:e6:cf:40:85:84:83:17:06:ce:2f:45:a6:
                    82:f4:e3:6e:84:d7:69:cd:56:eb:be:00:f3:5d:d3:
                    ae:4a:5c:92:87:7a:8c:b5:29:e7:ff:80:e9:83:79:
                    dd:9d:65:b8:91:58:1c:20:5a:77:1e:d8:30:3d:dc:
                    d6:19:04:5f:da:df:fa:a9:6d:1a:64:68:85:09:32:
                    f3:73:a4:88:d0:d8:a7:79:a5:93:a5:2f:dd:a6:da:
                    3b:92:16:d4:20:a8:d6:c2:d5:85:b8:42:7e:4e:ff:
                    16:89:17:03:23:9e:25:a8:34:7c:73:67:b3:71:8a:
                    b9:2b:74:a9:4c:d5:bf:51:36:dd:e8:ee:1c:3a:ae:
                    8e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:56:85:4B:3C:AC:D8:8A:C5:CA:C9:73:EF:95:CD:F2:23:BA:BC:96
            X509v3 Authority Key Identifier:
                keyid:B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:09:d9:ee:a2:c7:73:ae:56:32:8e:a2:64:58:d3:e0:5c:6d:
         09:71:ea:cb:b0:ab:33:13:f7:32:e6:5c:44:86:c7:2e:e8:69:
         4e:0c:e4:bf:8d:43:80:7b:e5:a3:cd:f1:0d:45:34:93:50:34:
         41:ee:1b:b1:82:29:5f:4e:b6:a6:5d:4a:cf:e3:87:24:e3:90:
         06:50:db:dd:7c:df:f2:38:b3:28:83:20:11:89:31:cb:0c:7e:
         a1:51:84:ac:c8:3f:de:7e:88:7a:66:a6:2c:dd:22:35:94:0e:
         20:d2:60:7a:1d:f1:73:d4:03:10:59:a0:06:0e:7e:1c:26:e6:
         27:d4:9c:c0:48:b4:84:b6:6a:ad:91:eb:16:86:18:9e:1e:41:
         96:c5:d5:5e:5f:29:2c:f7:77:7c:cc:75:48:92:1e:86:12:47:
         48:25:5d:4c:2f:91:25:57:60:d5:88:40:b4:d5:45:ce:84:d3:
         55:ca:14:4e:2f:13:42:b4:9a:14:d0:51:83:93:00:33:df:26:
         11:66:3f:2b:55:0c:7b:51:a7:f9:01:fe:78:99:52:aa:a1:f6:
         4f:89:7d:b3:50:82:dc:18:18:41:21:80:f8:ab:cb:b0:f6:28:
         d8:57:ca:5e:36:6a:6e:ee:62:78:f2:3d:6a:57:d3:21:4f:dd:
         2e:1a:d4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:32 2025 by rpki-client