This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
File:                     Teu44SIr4OPyOu23UkXg-XuHx00.mft (raw, json)
Hash identifier:          0TIJ7o2tdXiz3/s42k4nqQvqrKTnlpJxZ+heUe+5rzI=
Subject key identifier:   C2:7F:48:F1:68:17:86:1B:36:A1:49:ED:8D:C0:37:D3:B7:87:C4:76
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Certificate issuer:       /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial:       3500
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
Manifest number:          34F6
Signing time:             Mon 22 Dec 2025 14:33:28 +0000
Manifest this update:     Mon 22 Dec 2025 14:33:28 +0000
Manifest next update:     Mon 29 Dec 2025 14:33:28 +0000
Files and hashes:         1: Teu44SIr4OPyOu23UkXg-XuHx00.crl (hash: DzvmabDE73L5lVlgnUWx5oQ8B1lyyvmCROo6bIyuXyY=)
                          2: 67AFCD36F73911EE8BEC0A76C4F9AE02.roa (hash: VVrcitZ2B7U6+APe/mOfl0d7tYYMkpvIARKDnYAu3Cs=)
                          3: A2E40A5C3AA511EFA73B8885C4F9AE02.roa (hash: QLCxOEmWgCa369miIkbLMZGjORq6IjjCOA26AQZ1+A8=)
                          4: 673E7D66F73911EE8BEC0A76C4F9AE02.roa (hash: yf+DtpQHK15DsIR7hfI9Gbc6iXm71Iwwp13I2Suk7Rw=)
                          5: 66BD8F9EF73911EE8BEC0A76C4F9AE02.roa (hash: 69INgpKoMOy/gwg7BVvVMfejSm+vv8+6md6SESKON5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
                          rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 14:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13568 (0x3500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA76, serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
        Validity
            Not Before: Dec 22 14:33:28 2025 GMT
            Not After : Dec 29 14:33:28 2025 GMT
        Subject: CN=694956b8-2fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:73:c0:52:19:7a:d1:6e:e2:51:9d:f2:2d:
                    3b:31:88:24:1e:7d:0a:21:1c:68:c5:2d:0f:68:1b:
                    5b:e4:2b:e8:d9:82:54:2c:bc:c3:f8:08:3e:20:fd:
                    ed:33:d6:63:34:9e:df:1b:d9:23:98:f0:bb:cd:e3:
                    27:86:11:67:22:16:65:a4:56:85:f8:48:e8:73:83:
                    3b:46:3d:ca:07:67:4b:2b:e4:cf:e2:c0:09:43:2d:
                    32:e9:3d:7d:80:56:64:da:88:5d:38:46:6a:18:0e:
                    04:df:09:79:09:11:18:8a:30:15:b9:c8:45:1b:e2:
                    c5:c5:a6:b1:0b:f2:5a:9a:98:73:69:fa:80:42:9b:
                    96:0b:84:40:3c:04:5a:48:cd:51:40:ca:67:38:5c:
                    64:87:63:5e:26:84:30:6e:e4:70:9e:3d:c6:50:72:
                    66:70:80:f8:92:20:17:40:68:1e:90:8d:8a:95:9a:
                    d3:e3:1e:2e:a1:3b:5c:81:c9:09:11:57:a5:d9:27:
                    2e:c0:e7:de:d3:b8:1c:99:f1:33:f3:3e:1b:fe:f7:
                    49:7e:53:39:0b:86:f9:d6:1d:80:47:c2:f3:05:49:
                    23:ac:8a:a5:69:84:d8:6b:4a:a6:38:db:ce:7c:05:
                    96:9b:6e:0c:43:13:0a:ee:5f:53:b5:dc:22:43:cb:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7F:48:F1:68:17:86:1B:36:A1:49:ED:8D:C0:37:D3:B7:87:C4:76
            X509v3 Authority Key Identifier:
                keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:44:52:a1:b2:6c:a9:15:a7:8a:b0:e4:00:8b:c7:36:23:5f:
         00:68:4e:61:82:a1:6a:5b:7f:bf:00:6a:27:6b:75:94:0b:67:
         f7:2c:cf:a9:8e:c6:17:45:fe:46:b2:f6:e0:40:02:dd:5d:51:
         d1:92:cc:b7:0c:3f:36:15:4a:88:35:16:0f:43:6b:57:3c:4d:
         96:07:9b:af:08:5b:9e:ed:74:fc:f6:22:20:54:18:38:74:4c:
         9b:7a:4c:8a:fd:87:46:f9:32:ac:49:ae:0e:e6:61:5f:6c:76:
         59:a8:51:0b:c5:f1:86:6c:89:0b:05:06:32:ed:ce:21:ba:f4:
         c5:c2:42:3e:23:ff:48:af:3d:f7:50:d5:75:6d:30:c9:48:23:
         fe:a4:06:15:86:dd:ba:b2:e6:04:87:e4:c1:08:63:b4:7d:88:
         b1:ec:08:f1:f2:2f:f4:6c:04:c5:ad:63:ee:d3:32:fd:43:8a:
         5c:15:3a:a9:ec:dd:4f:7d:a6:97:f4:b2:e0:1d:b2:c8:38:9c:
         fe:c1:67:c1:00:bd:b8:b5:22:72:85:cb:6b:e8:b4:21:9c:6e:
         9d:34:85:cd:ab:60:4d:a4:5f:39:42:53:a1:f0:1d:58:09:2c:
         51:2c:e9:c0:dd:73:f9:9e:80:dc:f3:27:e7:0c:2c:9c:4e:e4:
         f3:ab:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 16:12:32 2025 by rpki-client