This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
File:                     TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json)
Hash identifier:          sqzaljS9uPVBRnfpw/MRtj9M7XXhsjoGUdaBHITHlic=
Subject key identifier:   43:A0:A4:05:09:FD:78:3B:8D:A0:BE:B9:69:1A:D0:DD:05:66:DB:2E
Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
Certificate issuer:       /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Certificate serial:       03BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
Manifest number:          05CF
Signing time:             Mon 22 Dec 2025 23:42:45 +0000
Manifest this update:     Mon 22 Dec 2025 23:42:45 +0000
Manifest next update:     Mon 29 Dec 2025 23:42:45 +0000
Files and hashes:         1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: AOk/8WCKGwXW8pFXvq1xQg0CA16joKlMm5BAj39ca4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955 (0x3bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA, serialNumber=4D39DE3E506068C3836A00548155413E682595B3
        Validity
            Not Before: Dec 22 23:42:45 2025 GMT
            Not After : Dec 29 23:42:45 2025 GMT
        Subject: CN=6949d775-d1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:ba:a6:3d:f9:38:92:36:df:94:9a:0d:eb:
                    99:f0:d1:84:bf:18:8c:e6:47:c2:05:fd:4d:8c:b2:
                    37:24:b8:dc:dc:45:70:a3:23:a9:d4:dd:b0:11:72:
                    88:15:c3:3c:b3:87:39:52:58:b1:7c:23:c6:00:9c:
                    73:62:22:c3:99:86:13:ca:ad:14:94:3c:89:2c:91:
                    a5:9b:ec:63:a9:ac:0a:a7:6e:91:71:e9:c4:2c:09:
                    c9:2b:2c:0a:76:02:bd:30:32:eb:2f:dc:be:8f:52:
                    e5:aa:94:07:bc:04:a0:cc:dc:d0:c8:a9:4e:04:b8:
                    8f:37:e7:c4:82:78:e6:27:c6:4f:35:69:01:91:34:
                    b3:13:81:d1:6c:28:ed:c1:47:0b:9e:16:86:37:69:
                    ee:4b:20:2b:16:c3:c6:28:4c:43:59:01:78:bb:73:
                    73:7a:1d:26:7a:fc:4b:6a:93:01:b9:e0:92:c0:59:
                    41:37:cc:a3:80:e5:58:c8:81:47:62:03:53:75:51:
                    e9:e0:83:9b:14:50:7a:52:13:b1:1f:b0:b1:ff:d1:
                    6c:e7:9c:60:28:53:e1:2f:d1:e3:44:ad:c3:a0:df:
                    30:5c:ea:8a:20:af:20:23:21:ca:69:6b:36:7b:ae:
                    4c:f5:81:3d:b7:32:7f:7e:b3:81:ee:be:d4:9b:75:
                    53:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A0:A4:05:09:FD:78:3B:8D:A0:BE:B9:69:1A:D0:DD:05:66:DB:2E
            X509v3 Authority Key Identifier:
                keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:25:53:22:dc:e3:5a:b6:72:31:ad:76:ee:e8:a3:8f:e3:
         c6:d7:1e:18:69:ee:96:09:40:6b:5d:49:84:29:cb:91:c1:65:
         9a:97:93:e2:8c:72:65:b3:60:d8:4a:c7:48:3d:79:b4:93:86:
         d3:86:3d:95:54:ee:8d:e7:92:3c:e6:fc:d8:34:0b:07:f6:67:
         94:53:d9:4c:51:4e:3e:09:27:2e:eb:7b:e3:4a:ba:67:e1:31:
         f7:5c:8b:dc:0e:b8:43:b2:e7:ef:84:36:ac:19:8b:72:34:8c:
         8a:98:8d:e1:b5:f9:97:63:f9:53:97:89:ae:27:3f:8e:76:d0:
         69:9d:b2:34:aa:6a:a6:00:48:c7:f5:ac:10:9a:30:18:ae:51:
         07:37:a9:41:75:05:b2:66:2a:41:ab:e7:6e:0a:1e:a0:bf:41:
         b5:e3:d1:01:77:d5:2d:de:b3:27:fc:e3:bc:51:63:77:b6:db:
         f2:da:6d:fe:76:bf:f2:45:92:a5:38:7c:6e:bc:0e:81:85:62:
         b2:05:92:2d:04:7e:4d:91:69:68:3c:ac:da:84:78:98:15:b9:
         ee:27:1c:76:7a:6e:38:e1:c1:75:83:37:09:81:ee:41:de:7e:
         f6:cf:37:18:c5:68:10:5e:c7:cc:ab:75:5f:3d:70:9d:79:48:
         0b:d4:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:19 2025 by rpki-client