This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File:                     tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier:          mEknt45wIXLCBGhSHJ6A/MSr8q2GXTZoBCrGDEJ876U=
Subject key identifier:   57:0F:47:D0:6D:11:1C:F7:48:70:44:ED:9C:72:38:7C:99:FB:44:0A
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer:       /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial:       016E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number:          015E
Signing time:             Tue 23 Dec 2025 03:18:21 +0000
Manifest this update:     Tue 23 Dec 2025 03:18:20 +0000
Manifest next update:     Tue 30 Dec 2025 03:18:20 +0000
Files and hashes:         1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: fFe8tooB6WOjZhjBJ2voYnWbpsb7SEH1IRBE4Ki3Mv0=)
                          2: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: YJ4UnxpzDCCzQhrx6wFr1GrzFRiuwNVyQ4kIp3p0jlQ=)
                          3: 4CF8923058BC11F09869AC87C4F9AE02.roa (hash: zY90zo/xojHjF1wecs/HwesdG3vMHXP6Ku/hhTPUGd8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
                          rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
        Validity
            Not Before: Dec 23 03:18:20 2025 GMT
            Not After : Dec 30 03:18:20 2025 GMT
        Subject: CN=694a09fc-b9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:46:5b:bc:a4:b1:52:e9:15:d9:2b:2d:a4:
                    a6:25:1d:7f:e6:71:a9:fa:bd:ff:09:d8:0f:f4:1a:
                    c3:b6:b9:0d:4c:ee:bb:2c:df:98:a8:0d:04:d8:ec:
                    5f:fa:8e:e1:ff:bd:27:93:86:f0:80:6e:fc:4a:b0:
                    a6:11:fc:96:61:66:f1:a9:1e:13:83:c0:b6:1f:88:
                    49:b5:cc:ca:b3:f3:18:02:5c:e8:3d:76:10:3b:c9:
                    c7:4c:19:42:48:5a:0b:41:c6:a8:ac:51:48:fa:ef:
                    9d:34:50:cc:77:f8:a9:a6:47:a1:cd:50:92:53:b8:
                    12:35:83:70:53:87:33:da:c9:42:12:9d:36:ba:02:
                    04:67:85:20:7a:ba:17:d9:53:e3:9d:b6:59:70:d4:
                    0c:02:4a:8b:9f:4e:95:51:d3:59:70:be:51:ee:c6:
                    23:93:30:b9:09:44:26:69:41:27:d2:2a:05:7f:d0:
                    f7:6e:9f:8d:cd:3d:c2:da:0a:ba:52:0c:7c:6e:90:
                    58:f0:5a:69:9d:5f:c9:0b:fe:4e:27:1e:29:de:59:
                    e7:a5:2e:3d:19:e1:39:30:65:e5:bf:41:ea:a9:bc:
                    1a:7d:22:17:50:f5:62:89:01:4f:88:fc:1f:3c:e3:
                    fd:52:30:b7:81:fe:05:48:70:bd:04:83:ba:73:c3:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0F:47:D0:6D:11:1C:F7:48:70:44:ED:9C:72:38:7C:99:FB:44:0A
            X509v3 Authority Key Identifier:
                keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5c:00:91:1d:13:e8:9d:a0:f0:74:a6:33:bd:b3:06:82:58:
         12:0e:54:7b:75:2d:64:39:ad:c8:1f:d8:d2:13:3b:d2:fb:b9:
         89:52:4a:c6:7b:1a:82:7d:b4:13:ec:e8:6e:1e:d7:4a:e2:13:
         c7:28:50:e9:6c:d5:fd:c4:70:8d:d9:df:02:57:7d:13:d9:0a:
         70:3c:cd:9a:e7:be:40:da:fe:14:51:7b:00:4c:80:2f:7b:4f:
         6d:8d:6e:82:2d:c3:1e:62:ba:df:38:d0:7a:8f:ca:b9:cb:23:
         6a:e8:ac:90:8b:0e:8f:36:93:5f:c6:6b:9f:81:51:d3:37:5d:
         6e:7b:17:78:0e:e9:ff:7a:98:c8:32:dd:26:32:74:43:70:b0:
         81:53:51:21:df:d1:95:91:95:5e:5a:37:6e:68:a6:d1:37:d8:
         55:f0:6d:d0:93:d3:96:fa:8c:d8:5f:ef:fe:a0:01:ed:d3:c9:
         1f:dc:0b:c2:00:4a:69:20:c9:5b:85:95:9b:fe:41:76:7d:ec:
         30:50:5c:60:67:50:30:0c:26:37:fc:3b:0d:60:bf:fa:32:e3:
         83:b5:71:84:72:ff:41:be:b1:87:4c:54:33:91:ff:73:b0:a7:
         6c:1e:25:7e:41:ae:c9:01:9b:2f:ca:7e:30:bb:ed:64:04:a3:
         40:e1:0e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:12:13 2025 by rpki-client