This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File:                     TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier:          elcMT6tkok17wZbIZm0L9+q8TZaq50phR4NVu4gA6TQ=
Subject key identifier:   F6:E9:94:47:B2:C7:CF:2A:53:62:9D:C2:E4:1A:3F:CB:A7:DA:48:12
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       1A16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number:          1803
Signing time:             Sun 14 Dec 2025 16:42:17 +0000
Manifest this update:     Sun 14 Dec 2025 16:42:17 +0000
Manifest next update:     Sun 21 Dec 2025 16:42:17 +0000
Files and hashes:         1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: L+JOiTdyUnRp0D2LGwXbs6L6ilDSwOJTve3VUbJiQLM=)
                          2: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: a50VCxDM+rD8Ar8TkJi367BRkd8ietONIDl/hmG93rs=)
                          3: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
                          4: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
                          5: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
                          6: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
                          7: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
                          8: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 16:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6678 (0x1a16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
        Validity
            Not Before: Dec 14 16:42:17 2025 GMT
            Not After : Dec 21 16:42:17 2025 GMT
        Subject: CN=693ee8e9-16c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b1:8d:17:47:09:a1:2a:bc:1a:82:d8:22:ee:
                    76:ab:35:cd:a7:9e:48:56:4d:08:07:cd:c4:96:3c:
                    42:10:1c:7f:f5:85:f6:1e:2f:33:0e:ba:e0:97:55:
                    69:16:38:f1:7f:b5:5b:36:70:ae:e0:c6:68:d1:af:
                    7f:7a:c1:be:9e:38:9f:56:90:40:19:1c:6f:53:b9:
                    73:f9:c5:50:da:b1:5b:f6:18:5c:35:98:e5:3a:48:
                    c9:be:ab:39:dd:85:e7:21:aa:1a:38:85:fe:32:4e:
                    12:1c:fd:1c:83:ef:70:fa:c0:10:81:52:f2:c4:a0:
                    95:fa:4f:8f:a7:ea:4f:a3:96:0a:0e:d7:eb:b8:ef:
                    05:44:fd:be:03:79:3b:a2:f7:ae:12:39:f5:70:93:
                    e0:92:63:13:70:e0:fa:14:22:6c:5b:3b:65:51:a6:
                    5f:59:36:22:cb:04:e6:3b:01:93:72:7a:f2:df:ef:
                    4b:87:13:35:bb:29:5e:dd:29:20:ae:d3:47:00:a8:
                    e9:02:19:80:7a:63:f3:26:a3:16:3a:b7:68:18:76:
                    8b:b1:ca:cf:06:55:42:30:41:e0:c5:3b:d2:10:5b:
                    43:45:5d:90:f8:17:46:fe:df:46:d1:94:ba:4a:fc:
                    e9:45:e2:7e:88:90:a0:1c:1e:49:7c:fd:10:6d:9b:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E9:94:47:B2:C7:CF:2A:53:62:9D:C2:E4:1A:3F:CB:A7:DA:48:12
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:29:c7:e5:8c:af:b2:13:81:9c:bd:9b:ec:71:47:5d:c2:04:
         bd:b4:21:7e:e0:37:fd:af:89:08:10:5b:0e:83:bc:92:0b:23:
         10:c3:7e:ac:41:e5:fc:37:b0:c5:c1:ce:d8:42:ba:38:3d:22:
         2d:90:9b:26:2a:a4:ef:56:84:ed:64:7a:7d:8d:30:1d:7e:c7:
         6c:57:51:46:3a:fa:83:e8:88:51:93:c1:ad:2e:d7:a7:14:5f:
         ec:9b:c6:58:47:d5:f2:3e:61:8a:2c:bb:e4:fe:ef:66:cc:da:
         4b:38:4e:e0:c6:d6:b5:60:37:46:e0:50:ce:56:97:cb:ba:36:
         1c:38:1f:44:4a:6b:23:2b:f1:4f:ab:3a:4a:a4:6a:0d:16:d9:
         cf:2e:ca:66:16:e3:b1:47:ec:2e:59:b0:2c:fc:e2:2e:71:0f:
         1c:a2:b1:04:68:70:7c:ce:5a:bd:4b:88:a5:df:09:56:78:61:
         c3:b9:6c:dc:13:fb:51:8d:b3:f5:5f:b5:f6:8a:98:cc:b8:b1:
         3d:d2:26:4b:a8:03:e6:a6:a1:bf:37:4f:a6:48:0c:30:19:b1:
         d8:a4:2a:c9:f0:60:c4:45:16:66:3f:2e:4c:5e:71:64:21:ec:
         25:46:91:3a:c3:07:32:31:11:7b:bc:27:db:a8:00:53:4c:7c:
         94:88:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 15:18:12 2025 by rpki-client