This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File:                     tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier:          JQsQjVty5++nioU7hZY50iJMCCQtXwhjuS1rGtuRXpQ=
Subject key identifier:   D3:DE:F9:CC:96:4F:F4:1C:7B:20:8F:69:C6:24:C7:F5:94:EE:32:95
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer:       /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial:       02B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number:          02A9
Signing time:             Mon 08 Dec 2025 23:48:43 +0000
Manifest this update:     Mon 08 Dec 2025 23:48:42 +0000
Manifest next update:     Mon 15 Dec 2025 23:48:42 +0000
Files and hashes:         1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: +3LuZBW5Dvzs5rtqbEiPVfx/mMbo5p05EZMvsGgSthQ=)
                          2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: OtRh1Fk7TwGNS5hIMmXvDQHTwbUcw1dj3fxKTgn60lw=)
                          3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: 9mymLiXCRjtr+TlJsGmOLAO7c7q7H4q9/GmJLFOK+K4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
                          rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 23:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691 (0x2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
        Validity
            Not Before: Dec  8 23:48:42 2025 GMT
            Not After : Dec 15 23:48:42 2025 GMT
        Subject: CN=693763db-d8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:7a:db:a3:3b:50:2c:4f:40:d0:36:f4:db:
                    9a:d1:01:8c:7b:16:30:4d:36:39:f5:09:68:ec:ab:
                    2e:58:53:ec:26:56:3a:ef:82:93:fd:7f:ce:15:63:
                    bd:3c:6f:b1:97:5a:c8:e3:c0:ee:ec:57:ea:be:74:
                    cb:de:34:76:79:3a:ea:ae:78:f0:cc:32:d0:34:9f:
                    8f:0e:97:f8:f1:d0:84:15:e3:bf:ea:47:38:31:09:
                    96:c3:22:ed:74:a1:bd:bf:9d:2c:86:e1:9f:be:fe:
                    e7:94:c1:86:f2:7a:58:7f:f5:e1:9a:2b:9d:6a:c8:
                    5f:a1:c6:20:02:4e:77:b9:f3:14:5d:bd:1a:2f:62:
                    07:16:3e:38:a9:50:c8:7a:32:db:56:a0:1a:c1:9d:
                    6f:40:5b:4a:8b:5d:bc:28:56:f1:bf:9e:21:9c:f7:
                    07:c7:0e:71:7b:2b:b7:b3:1a:0d:9e:d4:47:42:32:
                    c6:15:30:a9:98:a8:ac:53:8b:30:a5:4e:1e:81:f7:
                    de:67:0a:b5:a3:3a:d9:e3:4c:11:13:c0:9b:45:c4:
                    61:fb:84:23:82:b6:1b:2e:aa:97:87:e0:88:30:1e:
                    ec:86:f7:ef:ac:6c:36:fd:e5:20:de:9a:53:a3:91:
                    ff:b3:c7:d2:18:41:d7:03:bd:6e:d1:5f:12:c7:fb:
                    71:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DE:F9:CC:96:4F:F4:1C:7B:20:8F:69:C6:24:C7:F5:94:EE:32:95
            X509v3 Authority Key Identifier:
                keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:72:54:6a:07:fe:70:7f:29:bf:25:8a:bf:09:18:40:a9:d1:
         b9:32:8f:6f:a4:f8:2b:ad:6b:dd:f9:8d:f1:03:22:da:fb:8b:
         33:78:1c:a8:be:d4:8c:54:11:9a:4f:e6:c3:75:30:c0:3d:72:
         8d:db:b1:a0:0d:1e:8e:0a:76:ab:30:53:04:67:d1:e7:31:f4:
         75:40:4d:b2:00:fd:96:d5:c8:e1:3d:ef:fb:af:26:c1:b1:df:
         ac:81:7e:2d:ef:c6:fc:c0:dd:89:29:7d:56:0e:52:c9:a3:a3:
         f8:39:07:a5:34:a6:3a:10:a6:e2:50:a3:88:91:b9:71:e7:b5:
         ff:74:47:1e:a6:f6:cb:f8:d9:12:51:c0:5d:45:31:85:67:7a:
         73:a3:06:cf:92:62:21:70:6e:4e:bd:dc:bd:7d:4e:1e:74:61:
         85:cf:cb:67:68:2e:e5:84:8d:8c:09:eb:14:5b:ad:c9:f0:4f:
         fd:39:8a:ec:94:57:f5:91:9b:38:53:0a:27:ae:63:2b:34:1e:
         2b:c6:af:00:27:a5:f4:43:e4:4b:92:8b:6d:4e:02:5b:ba:34:
         c1:e5:17:1e:e2:31:16:7f:cd:95:86:bb:5f:ef:d6:a0:41:3b:
         90:d9:c2:6c:5d:a2:06:b8:7a:ca:a3:16:e5:43:b5:45:3b:a6:
         aa:55:02:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:39:35 2025 by rpki-client