This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
File:                     TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json)
Hash identifier:          52kSDledFj97A4oXLoU7XvSwrODeQM/odoFObL8YjtY=
Subject key identifier:   87:6D:5D:7B:BA:A2:3D:A4:CF:BE:6B:7D:12:61:8E:EA:DA:62:6B:ED
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Certificate issuer:       /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial:       030F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
Manifest number:          0970
Signing time:             Mon 22 Dec 2025 21:47:08 +0000
Manifest this update:     Mon 22 Dec 2025 21:47:07 +0000
Manifest next update:     Mon 29 Dec 2025 21:47:07 +0000
Files and hashes:         1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: FX97ky0E8Ua1AOrGQNO59cXRNUER7+b7e508Fmxke/g=)
                          2: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: Zn/90qwbG+0Df96/zQSMkzHyx6xwf0/RZMauir90ZH8=)
                          3: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: 5yEwO4ZnTC2CHQn3tYL6GNEeTVAOOIXAZLN/7OfHXIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
        Validity
            Not Before: Dec 22 21:47:07 2025 GMT
            Not After : Dec 29 21:47:07 2025 GMT
        Subject: CN=6949bc5c-b7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d3:ac:27:2e:fe:94:48:dc:a3:50:a1:50:b5:
                    e2:a1:fc:3f:0d:8c:ee:dd:3d:33:2a:22:1c:60:f6:
                    57:c1:c8:39:03:80:f5:c8:1c:e4:98:b4:c9:b9:a1:
                    51:ce:9a:9a:de:ab:6b:10:1b:08:24:f2:c0:a1:63:
                    9e:71:45:da:6c:82:75:11:35:85:b0:8e:03:f8:5d:
                    f6:03:04:2e:24:1f:05:1a:8e:fb:b4:3d:8b:0a:e8:
                    fc:57:84:36:99:32:af:40:02:43:a5:d2:6f:ee:0c:
                    c4:78:82:84:71:1a:3d:9a:74:df:8c:ba:b9:5c:3e:
                    2b:48:a0:53:62:d1:3d:6c:9e:28:ad:a3:94:a6:39:
                    9f:8a:16:16:ef:b6:8f:dd:e5:d5:d3:25:a3:ec:c8:
                    eb:1c:41:05:2a:2a:40:69:ae:44:28:bd:aa:b6:47:
                    70:b4:60:94:41:64:ad:97:a2:38:b9:6e:8d:cd:53:
                    7f:ab:74:64:a0:b0:1f:f4:c1:52:45:20:ef:ce:96:
                    87:6a:05:2c:94:e5:a9:74:ec:b7:ef:ac:37:8a:40:
                    1d:53:b6:2f:e0:1a:e5:25:7f:c5:4d:57:a3:63:25:
                    d2:03:da:cb:60:fe:8a:f8:9f:ed:d3:f4:84:eb:ac:
                    2e:ae:d8:92:3d:91:3e:da:c3:98:1e:3a:c8:f1:3b:
                    95:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6D:5D:7B:BA:A2:3D:A4:CF:BE:6B:7D:12:61:8E:EA:DA:62:6B:ED
            X509v3 Authority Key Identifier:
                keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f2:08:1f:77:8e:c2:bd:db:88:8c:73:52:ca:9e:0f:7c:ec:
         9e:30:f9:2b:44:fe:80:3a:bd:c5:59:a5:e2:d0:21:6e:83:d5:
         98:f0:82:80:08:b2:59:0a:21:3c:d1:5e:82:3a:19:b4:4a:44:
         37:1c:20:90:73:f1:1e:cb:6b:f9:2b:62:45:c3:6b:cf:6b:e1:
         42:87:dd:af:f3:51:61:40:bc:7f:10:06:7c:5d:4c:32:55:7a:
         9e:da:1d:4e:fb:7a:90:96:11:c7:01:c7:e1:37:72:4d:60:96:
         e7:56:b5:43:cb:d0:43:fd:8b:24:9e:79:65:99:1b:b9:c9:33:
         e5:eb:59:6d:bc:a8:c3:98:b0:20:6c:77:fb:67:14:b6:ea:f7:
         6e:88:ad:ec:77:9d:64:ce:81:be:fa:dd:0a:24:94:6b:bd:1d:
         3e:a8:b9:57:83:65:2b:29:05:2c:aa:c7:80:d0:db:49:5a:05:
         5a:cc:52:72:ca:d1:d3:03:07:fd:db:70:35:a6:1c:e3:64:a2:
         02:14:cf:a4:7e:18:8c:b0:18:e9:ba:f6:f3:16:b6:32:cf:f0:
         82:3c:2e:52:a2:f7:a0:13:d3:97:a3:40:f0:f0:84:3b:42:f9:
         d1:99:47:74:5d:c0:f5:ab:8f:41:8d:2f:35:f5:74:08:b7:73:
         d7:9d:b0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:13:57 2025 by rpki-client