This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File:                     TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier:          YGAjtnHsxqJZfPURan6wD/KQh4LBqlFhERmPkM82hHA=
Subject key identifier:   32:36:13:86:81:5D:E1:3D:0F:7D:DB:30:89:20:A2:46:1A:C0:C2:E2
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       1A13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number:          1800
Signing time:             Mon 08 Dec 2025 16:36:52 +0000
Manifest this update:     Mon 08 Dec 2025 16:36:51 +0000
Manifest next update:     Mon 15 Dec 2025 16:36:51 +0000
Files and hashes:         1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: 85CqWS1vGd9h22F+irR/GTSnUFqamrsUNGb2B3PuppU=)
                          2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
                          3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
                          4: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
                          5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
                          6: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
                          7: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: a50VCxDM+rD8Ar8TkJi367BRkd8ietONIDl/hmG93rs=)
                          8: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 16:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6675 (0x1a13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
        Validity
            Not Before: Dec  8 16:36:51 2025 GMT
            Not After : Dec 15 16:36:51 2025 GMT
        Subject: CN=6936fea3-f25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:96:33:09:f4:1f:27:6e:66:91:36:f2:51:
                    65:7c:0c:62:91:0d:26:92:76:a7:c2:f5:5b:bd:bf:
                    51:72:4d:1f:f7:c6:d7:e8:05:b2:bd:02:20:03:29:
                    90:cb:81:88:c3:64:67:b9:2a:aa:93:05:58:ec:19:
                    2d:ea:22:e3:37:7e:97:3a:65:2f:bc:70:ff:5e:38:
                    12:3e:a0:cd:3d:7e:40:cf:dd:c1:49:25:9d:bd:72:
                    89:5a:95:84:b1:1f:9d:af:d7:1e:64:5a:c0:22:74:
                    df:ce:1d:be:95:e6:c5:69:b2:f7:6e:26:f2:aa:43:
                    43:1e:39:93:6d:c6:ea:20:79:ba:4c:4e:9e:3b:46:
                    af:0c:86:16:75:7e:6f:46:3e:4d:f6:3f:1b:79:45:
                    12:6d:4d:08:6b:92:44:4b:d0:b1:b5:77:c6:b3:76:
                    ea:fe:cc:5d:01:d1:dd:5d:41:08:42:48:13:68:b4:
                    44:26:c4:fa:3f:0f:ad:bf:48:a8:96:43:f9:8a:ef:
                    f2:93:92:38:dc:a3:38:20:74:24:78:33:77:8e:07:
                    45:ac:cc:6c:9c:c9:27:a8:51:ea:8a:3f:53:9c:61:
                    a3:1f:c1:1f:26:27:53:20:fa:67:10:7e:24:1c:27:
                    87:97:54:c1:50:10:80:e4:69:e9:8a:66:80:6c:02:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:36:13:86:81:5D:E1:3D:0F:7D:DB:30:89:20:A2:46:1A:C0:C2:E2
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:22:84:a1:fb:ac:8b:b1:c8:a6:b0:b8:56:3d:ed:c1:f5:79:
         c8:c2:73:37:63:5a:cb:60:23:64:c7:e6:e1:44:08:98:66:dd:
         b3:6c:86:f5:72:72:a7:86:ec:07:58:fb:8a:53:4c:81:5e:c1:
         e2:c1:e7:e1:be:db:fe:94:01:dc:a0:f2:ed:1c:4f:14:d8:8d:
         02:01:e5:b5:ca:27:68:06:84:2a:1e:5c:83:c6:fb:2e:2c:f0:
         ac:0d:9c:c9:47:df:ef:22:a0:99:d6:93:b2:2b:6e:83:c2:23:
         dd:12:76:de:b9:45:e1:59:db:9d:47:b6:50:f8:b0:79:f9:55:
         f1:62:e3:03:eb:c3:a9:f2:3a:46:34:52:2e:1b:78:c0:8e:99:
         a7:dd:73:dc:14:3f:61:b4:2b:ca:71:18:5f:c7:55:fb:e1:6e:
         ea:de:1f:f9:c0:f1:ef:7e:a2:93:bf:1a:fd:6e:1b:81:5a:fd:
         01:4c:5b:35:86:7c:55:af:e4:33:c6:24:4f:ec:de:98:69:b3:
         34:e4:67:43:d8:68:51:0d:f6:1a:c9:b0:6f:b4:5a:40:bf:da:
         9d:f4:fe:62:b7:a1:d3:aa:ca:69:8e:e4:83:b3:64:5b:c6:91:
         96:f9:8a:35:eb:e5:5c:30:2a:48:58:e1:66:1f:39:97:29:61:
         82:a2:3e:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2
NDI5RDg4QjgwHhcNMjUxMjA4MTYzNjUxWhcNMjUxMjE1MTYzNjUxWjAYMRYwFAYD
VQQDEw02OTM2ZmVhMy1mMjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+yWMwn0HyduZpE28lFlfAxikQ0mknanwvVbvb9Rck0f98bX6AWyvQIgAymQ
y4GIw2RnuSqqkwVY7Bkt6iLjN36XOmUvvHD/XjgSPqDNPX5Az93BSSWdvXKJWpWE
sR+dr9ceZFrAInTfzh2+lebFabL3bibyqkNDHjmTbcbqIHm6TE6eO0avDIYWdX5v
Rj5N9j8beUUSbU0Ia5JES9CxtXfGs3bq/sxdAdHdXUEIQkgTaLREJsT6Pw+tv0io
lkP5iu/yk5I43KM4IHQkeDN3jgdFrMxsnMknqFHqij9TnGGjH8EfJidTIPpnEH4k
HCeHl1TBUBCA5GnpimaAbALuXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDI2E4aB
XeE9D33bMIkgokYawMLiMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5
NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp
TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT
em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfIoSh+6yLscimsLhWPe3B9XnIwnM3Y1rLYCNkx+bhRAiYZt2zbIb1
cnKnhuwHWPuKU0yBXsHiwefhvtv+lAHcoPLtHE8U2I0CAeW1yidoBoQqHlyDxvsu
LPCsDZzJR9/vIqCZ1pOyK26DwiPdEnbeuUXhWdudR7ZQ+LB5+VXxYuMD68Op8jpG
NFIuG3jAjpmn3XPcFD9htCvKcRhfx1X74W7q3h/5wPHvfqKTvxr9bhuBWv0BTFs1
hnxVr+QzxiRP7N6YabM05GdD2GhRDfYaybBvtFpAv9qd9P5it6HTqsppjuSDs2Rb
xpGW+Yo16+VcMCpIWOFmHzmXKWGCoj6N
-----END CERTIFICATE-----
Generated at Tue Dec 9 13:52:27 2025 by rpki-client