This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft
File:                     pTalTbQeRB3nTDP29zbFrXpmhcY.mft (raw, json)
Hash identifier:          a/M4Bq2XAOjyCopHvKHTwJ953nApgleE606j+ftGgp8=
Subject key identifier:   30:31:D1:9D:6A:DE:FB:20:AB:8A:CE:E1:5A:5D:A8:D8:6B:8F:ED:A8
Authority key identifier: A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6
Certificate issuer:       /CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6
Certificate serial:       0494
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft
Manifest number:          048B
Signing time:             Mon 22 Dec 2025 23:08:40 +0000
Manifest this update:     Mon 22 Dec 2025 23:08:40 +0000
Manifest next update:     Mon 29 Dec 2025 23:08:40 +0000
Files and hashes:         1: pTalTbQeRB3nTDP29zbFrXpmhcY.crl (hash: r8QvJnJ5yVHKmOZCXUAOQVDY7lsX3I7qzWO40dSLeXw=)
                          2: 50992BCE687511ECB6E9CC6FC4F9AE02.roa (hash: rNQ7TBOm+03fUlBnIQ19FSSPOo9O/7pALLtCkZYt8x0=)
                          3: 2CB0D29E211411EE82DE6110C4F9AE02.roa (hash: ZxuEm2Wd5fAEoiVfZalrPIP42EJY5+D/pXPR0pxQEC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC75C, serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6
        Validity
            Not Before: Dec 22 23:08:40 2025 GMT
            Not After : Dec 29 23:08:40 2025 GMT
        Subject: CN=6949cf78-c372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:67:98:88:a3:c0:83:f3:a3:4c:61:d3:e2:
                    26:3f:ca:78:e3:a2:14:b0:2e:20:2f:db:b1:ac:bf:
                    00:d8:d3:be:8d:8d:a7:49:84:c9:94:3e:97:d5:ef:
                    86:24:65:9c:c7:fd:cf:9d:39:21:71:c2:dd:b5:1c:
                    b4:4c:c5:bb:69:f0:16:1e:7a:59:b8:07:3d:f7:72:
                    3b:c2:c5:3b:1f:f1:35:96:31:36:44:52:ad:16:c3:
                    d9:ef:2f:03:2b:43:4f:65:17:cc:17:9e:fc:77:6e:
                    2e:d8:5b:ff:c8:2b:67:9c:47:97:bb:3c:98:cb:23:
                    77:86:5d:a2:b1:ca:8b:e8:77:8e:e2:cc:04:61:5e:
                    be:13:d4:73:18:d6:55:a8:ae:9e:6e:24:c9:82:78:
                    49:12:61:7d:f3:c0:e4:31:06:54:5d:2e:1b:ee:3a:
                    ec:4e:ce:6c:93:17:05:32:6f:8a:65:71:5e:ff:6a:
                    1e:c1:64:38:1a:ab:69:f6:72:a8:2d:7f:b5:28:aa:
                    e5:5b:8e:8e:75:6e:7a:90:41:a0:a7:a0:fd:44:3a:
                    c6:d9:8d:87:b1:0c:9b:de:21:e1:08:03:c9:18:96:
                    e5:04:ac:aa:20:c8:33:1a:fc:cd:38:92:42:82:54:
                    d3:df:7f:ad:ad:7c:c2:f3:8a:c6:a1:56:c5:18:76:
                    04:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:31:D1:9D:6A:DE:FB:20:AB:8A:CE:E1:5A:5D:A8:D8:6B:8F:ED:A8
            X509v3 Authority Key Identifier:
                keyid:A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9f:29:69:61:59:f5:0c:d4:0e:21:e0:a3:ba:2d:e4:0c:7c:
         eb:86:37:c7:a6:9f:ee:0a:b9:1d:84:24:fc:91:30:e3:d2:ed:
         c0:51:75:b3:5d:2a:d8:3a:3b:aa:a2:c3:72:69:f7:6e:f9:23:
         08:86:cc:e8:a0:9c:b7:2f:69:b9:cb:9e:61:21:11:06:89:fa:
         45:ad:03:d7:08:62:ec:e6:cf:3e:57:c8:23:64:72:00:65:c5:
         b9:3d:64:ff:d3:5c:b3:08:35:1b:9a:11:e6:bf:8c:32:96:6f:
         db:d2:f5:d0:e6:fd:f5:0f:b4:bd:01:11:0e:f0:c7:8e:bd:c7:
         92:49:7e:1b:1b:47:48:06:71:ae:85:10:4e:e8:fe:51:f4:c0:
         c3:6b:96:a2:3c:17:7e:d5:31:59:c1:1a:65:f6:7c:1c:88:d9:
         d6:a8:3b:a1:df:74:2f:04:0a:1f:93:94:70:6a:7e:2e:d1:1b:
         db:c4:62:b6:44:6c:2b:4a:b3:2f:62:08:a1:ba:23:56:4d:72:
         8d:40:cb:05:66:14:54:32:a3:9b:80:57:74:31:d7:1c:74:f0:
         a5:96:84:be:f5:79:3c:ec:c2:fa:90:b2:5f:b3:bc:a7:3a:93:
         d2:33:ee:ab:79:87:04:14:03:8e:a7:aa:78:54:46:2a:17:af:
         c4:e1:2c:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM3NUMxMTAvBgNVBAUTKEE1MzZBNTREQjQxRTQ0MURFNzRDMzNGNkY3MzZDNUFE
N0E2Njg1QzYwHhcNMjUxMjIyMjMwODQwWhcNMjUxMjI5MjMwODQwWjAYMRYwFAYD
VQQDDA02OTQ5Y2Y3OC1jMzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnB1nmIijwIPzo0xh0+ImP8p446IUsC4gL9uxrL8A2NO+jY2nSYTJlD6X1e+G
JGWcx/3PnTkhccLdtRy0TMW7afAWHnpZuAc993I7wsU7H/E1ljE2RFKtFsPZ7y8D
K0NPZRfMF578d24u2Fv/yCtnnEeXuzyYyyN3hl2iscqL6HeO4swEYV6+E9RzGNZV
qK6ebiTJgnhJEmF988DkMQZUXS4b7jrsTs5skxcFMm+KZXFe/2oewWQ4Gqtp9nKo
LX+1KKrlW46OdW56kEGgp6D9RDrG2Y2HsQyb3iHhCAPJGJblBKyqIMgzGvzNOJJC
glTT33+trXzC84rGoVbFGHYE3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAx0Z1q
3vsgq4rO4VpdqNhrj+2oMB8GA1UdIwQYMBaAFKU2pU20HkQd50wz9vc2xa16ZoXG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzc1Qy9BQ0FDMzlCRTY4
NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJCM25URFAyOXpiRnJYcG1o
Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BUYWxUYlFlUkIzblREUDI5emJGclhwbWhjWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Qzc1Qy9BQ0FDMzlCRTY4NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJC
M25URFAyOXpiRnJYcG1oY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlnylpYVn1DNQOIeCjui3kDHzrhjfHpp/uCrkdhCT8kTDj0u3AUXWz
XSrYOjuqosNyafdu+SMIhszooJy3L2m5y55hIREGifpFrQPXCGLs5s8+V8gjZHIA
ZcW5PWT/01yzCDUbmhHmv4wylm/b0vXQ5v31D7S9AREO8MeOvceSSX4bG0dIBnGu
hRBO6P5R9MDDa5aiPBd+1TFZwRpl9nwciNnWqDuh33QvBAofk5Rwan4u0RvbxGK2
RGwrSrMvYgihuiNWTXKNQMsFZhRUMqObgFd0MdccdPClloS+9Xk87ML6kLJfs7yn
OpPSM+6reYcEFAOOp6p4VEYqF6/E4Sw+
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:10 2025 by rpki-client