This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          CFvUx2TzizShzhqNp1pxXx6eD0g30n2qIBnDWyAw3O0=
Subject key identifier:   3D:D7:DC:EC:78:8A:AE:84:0B:22:C6:00:FF:84:7B:B8:9D:B7:E6:EE
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0CB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0C22
Signing time:             Sat 06 Dec 2025 18:20:06 +0000
Manifest this update:     Sat 06 Dec 2025 18:20:06 +0000
Manifest next update:     Sat 13 Dec 2025 18:20:06 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: BS1rnDDsmdzfoZzYvv78XFOgpRkH17Y3O0+x2awGWU4=)
                          2: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tT6wpY26Z4BuIfJge3UrKFFEij5wdhpGksDHGEKyueE=)
                          3: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: KHyJIG6frQiFoPJvg1lo79fhG8UBhK1qYbLoHf3tBMY=)
                          4: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: 2c2fswoHtuwwjSDYm9YL0aP4fxZNIBHz0gEM3XmMKGw=)
                          5: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 4baJUQaJ57JlaoSVexNlINX3qHBtfZSmHXr0z4zuVeE=)
                          6: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: FuJ+0zC5emsysfIUM1yM5haaZPmnTrgVqP1fYVReGjo=)
                          7: 6CAE0142092E11F094B4703FC4F9AE02.roa (hash: dAr5iBEgksscApG/hnOmTYygVomN/E/w8I2tDgWWF54=)
                          8: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: ooq2bu31wjS1Rlog7R+YEobBS9ZrxCNKrBAe2LcHIzo=)
                          9: 52636904771911F083181320C4F9AE02.roa (hash: /N8Je2h9Ml0PEQGrFc9NWTNF1W+nc4xwFKtdjj8nfho=)
                          10: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: +TOxSpRoRW2I9XopVwh23lFg21DxkxtxNdO0jJ89lXM=)
                          11: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: IWHAsp5GSTIoMqNKo0F2rFXfmQxpgUta2Oi8tYKu1uo=)
                          12: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: ec9OX9UoLwyn7wN5VObF9v2iz3RI0N5kTbWroMU/2/c=)
                          13: B43088B457F311F099129754C4F9AE02.roa (hash: G/js9Bvm1ldv3EUjoboyUhcQNgg/29Bat68H2Q8xFls=)
                          14: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: EDVStKKxG06lw8JN0F9X4jCTKiN0LdF9zVSZbm6YceU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3250 (0xcb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Dec  6 18:20:06 2025 GMT
            Not After : Dec 13 18:20:06 2025 GMT
        Subject: CN=693473d6-ee21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:51:8d:08:1a:7d:68:af:82:a7:73:af:d9:
                    d4:63:68:c7:1a:16:6b:36:7a:23:74:9e:70:06:f5:
                    67:c2:62:1f:ff:9d:83:9a:12:31:a5:85:5a:2a:9e:
                    26:52:3d:a1:36:14:5e:f8:52:d1:4a:38:21:d5:7f:
                    46:81:15:c1:07:77:65:8e:36:21:b1:a8:7c:51:5a:
                    ba:2c:dd:13:b7:09:8b:3b:f3:d8:1b:6f:6e:83:39:
                    e2:af:6c:00:e5:4e:fb:62:50:a2:e8:b4:3c:a9:c2:
                    35:f9:c4:44:5a:9a:21:ae:e0:57:f0:a1:20:9d:84:
                    05:3b:e1:3f:00:c7:7d:37:20:fc:1f:cf:ed:c2:10:
                    59:d6:16:70:74:3f:4c:0b:c9:16:2c:f1:1f:2e:51:
                    5f:bb:93:86:28:12:9d:80:ba:2c:66:63:3f:7f:de:
                    b9:43:7a:dc:02:23:bf:4e:39:78:ba:bc:3d:90:a2:
                    ca:90:d6:1e:69:d8:78:cb:e6:8c:66:e2:81:13:e4:
                    5a:77:15:d4:6c:ae:85:29:c8:00:b1:7a:64:53:80:
                    95:2a:2d:da:c9:12:fc:02:44:a7:10:7a:4f:30:5c:
                    61:28:11:4e:b8:7c:8b:e1:ca:d0:56:2a:dd:84:aa:
                    45:04:e0:01:5e:b2:5e:5b:49:2f:d2:e1:51:2a:ad:
                    d4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D7:DC:EC:78:8A:AE:84:0B:22:C6:00:FF:84:7B:B8:9D:B7:E6:EE
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:65:95:28:08:56:ac:da:87:3b:f4:3d:3d:82:de:b6:ea:53:
         8d:06:ad:a7:20:50:ff:ee:33:1b:e6:87:8d:af:a9:ef:59:c2:
         83:3d:a2:16:c4:87:c4:de:6e:a3:be:5e:84:b1:84:33:02:6c:
         ad:e2:96:74:18:c3:5d:53:63:af:56:de:6d:0c:24:7d:2e:e5:
         a5:65:f1:32:05:74:a3:6a:a6:10:67:48:47:49:d3:eb:6a:2f:
         0d:af:03:40:77:7a:25:c7:e9:a8:38:a3:14:ab:5f:df:c7:7c:
         10:f9:b6:d7:27:11:6d:f3:b7:db:0a:b8:f6:43:b2:80:5a:e5:
         73:1a:f4:a6:1f:25:13:93:1e:23:ef:10:6e:c5:1d:ec:93:bd:
         97:bf:5e:bd:89:d0:5c:e8:ed:81:01:5d:23:50:56:2c:2b:f8:
         0a:dc:62:e5:46:1a:b3:13:7b:7a:bb:f2:04:6d:d7:af:f7:55:
         b0:d4:be:b3:11:99:82:f9:ff:86:e6:34:53:74:1d:58:e6:16:
         9d:b0:d8:0d:88:a9:4f:b2:81:62:72:9b:2a:fc:e5:4b:c8:78:
         da:9d:21:36:d4:35:a1:dc:a6:f7:01:98:c8:34:f9:ec:8b:7f:
         34:b8:6a:8f:0c:39:98:dd:6e:36:9a:71:83:3c:26:83:2b:95:
         d9:d6:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:30:17 2025 by rpki-client