This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
File:                     tqxYfsJ9U17PTY_eFxF2V52vTU8.mft (raw, json)
Hash identifier:          S0NZt2Y30UmK8lBlxQw4jyAcw0tfMHuIPPhXVtXQAsk=
Subject key identifier:   B8:D3:2F:DC:1B:91:2E:7A:C9:2B:5D:F6:D9:2E:1D:65:75:3F:3B:FC
Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
Certificate issuer:       /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
Manifest number:          6A
Signing time:             Wed 03 Dec 2025 05:10:54 +0000
Manifest this update:     Wed 03 Dec 2025 05:10:53 +0000
Manifest next update:     Wed 10 Dec 2025 05:10:53 +0000
Files and hashes:         1: tqxYfsJ9U17PTY_eFxF2V52vTU8.crl (hash: Ub7ZscXpO96C6/P1jOLpWahhXf9kNK6X6H6CqIzz77g=)
                          2: EDADA2842BD911F0BD5FC622C4F9AE02.roa (hash: EbKDh3m7E8KIWacScwgzzTIeUCwyZGPRJhI5B+4pFX0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl
                          rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 05:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
        Validity
            Not Before: Dec  3 05:10:53 2025 GMT
            Not After : Dec 10 05:10:53 2025 GMT
        Subject: CN=692fc65e-bb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:7c:83:69:94:57:68:a6:f2:fe:36:e8:37:
                    61:76:a0:74:82:e2:14:84:26:0b:60:dd:cf:82:d0:
                    2c:0a:d4:aa:72:3b:cd:bc:5e:ee:e6:31:40:0a:05:
                    7e:6d:02:af:bb:12:e9:c8:47:6b:e1:4f:80:b3:39:
                    61:f4:d1:71:fa:d0:0e:57:a1:76:a4:67:2d:a0:1b:
                    b1:4a:0d:e7:d1:58:d5:42:27:5e:36:17:a4:82:c6:
                    d0:f1:36:e9:75:31:19:d0:67:0b:e0:51:f5:9d:5c:
                    70:d4:f5:01:c3:16:4b:c5:0a:a1:5a:86:92:a2:8f:
                    90:a0:2d:38:55:ef:74:9a:68:8b:39:6b:0a:31:a1:
                    c2:ac:b3:81:29:38:ac:1d:1e:50:d9:82:ac:ca:67:
                    d3:1c:b0:70:22:69:b0:23:46:5e:78:2b:22:53:5e:
                    ca:50:b6:6c:5c:78:e7:5e:ed:f2:14:66:f5:d8:a6:
                    d6:2e:43:bd:8f:4f:ad:7a:7e:77:9c:24:5d:ae:4a:
                    65:80:39:f7:20:f5:b6:1b:46:f8:d3:e4:c8:1c:d8:
                    4d:86:69:4b:28:38:ff:01:9b:a6:58:c6:df:f3:5b:
                    4f:18:9b:2f:ae:98:be:2a:26:27:0b:f5:59:9f:ec:
                    eb:e6:b3:8e:5d:d3:10:76:9a:29:67:0d:9c:73:f2:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D3:2F:DC:1B:91:2E:7A:C9:2B:5D:F6:D9:2E:1D:65:75:3F:3B:FC
            X509v3 Authority Key Identifier:
                keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:29:55:ba:bf:37:a6:93:a7:16:82:0d:f2:41:61:7c:85:bf:
         3f:fa:aa:64:86:61:5d:ad:34:94:93:50:63:08:4e:2e:24:89:
         f6:c5:94:a5:37:53:04:b9:b3:cd:8f:35:3a:e7:3a:5b:2b:88:
         66:33:b2:98:5a:82:00:0c:b6:83:14:40:cf:83:fe:63:7d:4b:
         65:ce:44:5f:cf:d9:67:12:88:0c:c2:7a:d1:5a:b1:d3:b8:61:
         ae:81:57:9f:ba:82:84:44:94:6b:4f:e6:c5:01:34:31:72:68:
         da:fd:18:2f:b9:09:94:d7:f8:50:a3:e8:ce:f8:0c:e4:42:dc:
         22:ee:38:08:98:e9:5a:59:fb:2a:5f:63:d2:4e:0f:ef:4c:56:
         39:79:55:f0:e6:cc:3d:fe:88:99:c2:3b:82:74:52:f8:7d:02:
         ff:25:8b:d0:31:7d:df:d7:f3:e6:fe:1c:ca:82:ed:80:91:43:
         91:60:11:99:02:98:92:72:92:6e:3b:95:c4:cd:4d:cf:41:89:
         7a:ce:93:5d:d4:90:35:94:fc:5a:5f:b1:8b:85:99:85:ab:97:
         4e:45:57:c2:22:93:4f:a5:03:5c:0c:8b:e8:a0:e4:64:bd:b1:
         a3:e7:8c:44:24:1c:58:c7:71:fe:b9:f7:3a:03:f6:2f:b4:fe:
         ad:71:4e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:26 2025 by rpki-client