This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
File:                     TxgnPYhVbjodbtgXi4CVKNmQppE.mft (raw, json)
Hash identifier:          70/2gaS+fU48n6hvSFlJ1cp+1PAhzBlBm0jJIch0NA4=
Subject key identifier:   6C:DD:56:31:E9:93:C9:ED:8E:06:64:E7:BF:42:34:6B:2A:B1:77:94
Authority key identifier: 4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91
Certificate issuer:       /CN=A9127B24/serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
Manifest number:          DA
Signing time:             Fri 19 Dec 2025 04:42:46 +0000
Manifest this update:     Fri 19 Dec 2025 04:42:45 +0000
Manifest next update:     Fri 26 Dec 2025 04:42:45 +0000
Files and hashes:         1: TxgnPYhVbjodbtgXi4CVKNmQppE.crl (hash: 5YFIOuljuiCEoLcjcubQQR4hlYCFdrAYc3URpmsNCv8=)
                          2: 31A0A22E803B11F0BAF8A92DC4F9AE02.roa (hash: M85jCIBYsps3LwVn3AYQZG0OyQL6Ba7RT/TX3KFmVeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl
                          rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127B24, serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691
        Validity
            Not Before: Dec 19 04:42:45 2025 GMT
            Not After : Dec 26 04:42:45 2025 GMT
        Subject: CN=6944d7c5-608e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:fb:0c:4e:e0:86:d3:c8:45:95:38:86:cb:
                    ac:f6:35:b9:a6:88:c7:7b:03:7b:79:dc:86:7d:bb:
                    b3:eb:b8:57:29:c3:cf:9d:b7:68:00:0e:46:32:b1:
                    4f:c9:e2:59:46:c2:06:96:d8:3f:6b:7f:65:c4:65:
                    6c:37:39:e9:0f:32:8d:12:5d:f0:3f:6e:ce:cc:8d:
                    74:f8:37:68:86:5c:35:5c:03:54:10:5f:fd:ef:07:
                    20:dc:fe:5c:40:cb:09:5a:96:52:df:5b:30:23:de:
                    ab:61:0a:f7:ed:54:4b:8f:e8:19:43:8c:dd:cb:d3:
                    2a:31:bd:d3:56:4a:4a:d8:d2:1e:1d:2e:18:98:0e:
                    41:f9:72:79:2e:d5:d3:6f:86:03:30:29:10:9f:3c:
                    8c:16:84:c4:a5:7d:31:36:8b:77:5f:f2:fc:30:5a:
                    32:8b:9c:6b:73:cb:f0:64:df:04:34:d1:32:7c:d8:
                    84:a1:a8:7a:e3:c2:8c:f1:ba:d9:5c:1c:f7:53:3e:
                    24:b5:9a:c3:53:17:fa:5e:2a:29:41:98:ff:da:a5:
                    64:e0:a3:8e:f9:ec:8a:20:1f:4b:ab:6e:71:2f:98:
                    93:cb:7c:f9:b5:a1:01:3a:e5:57:c2:3e:8a:92:4d:
                    d2:02:d4:cd:7a:29:4b:4d:e2:80:c1:72:fd:5a:f0:
                    50:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DD:56:31:E9:93:C9:ED:8E:06:64:E7:BF:42:34:6B:2A:B1:77:94
            X509v3 Authority Key Identifier:
                keyid:4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1f:f7:d4:d0:5b:5f:ea:a5:a7:78:c8:1a:06:13:86:56:89:
         96:cd:c2:74:4a:b3:68:cd:6b:53:43:f8:e9:82:a5:12:cc:52:
         da:c1:0b:4e:a1:a3:cf:e7:a0:1c:7c:2e:18:49:d7:aa:72:a3:
         16:b6:42:d3:68:5b:cb:b0:dd:dd:84:e9:05:82:fc:59:b0:ea:
         3e:18:92:0f:2e:9d:6a:ce:76:72:1c:e6:48:b8:b6:0d:f8:85:
         31:6d:32:58:e6:13:b7:d8:c8:8f:64:5f:7a:48:bc:fd:a6:f3:
         c8:f9:4e:fd:2a:32:a8:ba:9e:ab:54:cb:21:85:a4:37:34:6e:
         b6:e1:ae:27:11:9b:ec:62:86:0c:fb:f8:37:cd:0c:07:35:41:
         46:98:d5:9f:93:e1:a0:46:52:8c:2b:7f:00:51:d1:43:3e:31:
         20:81:05:f0:ed:24:af:e3:6a:66:44:7d:9c:a2:c5:c5:05:be:
         72:03:2e:22:c0:6b:cb:62:22:50:b4:e0:0b:aa:c8:75:43:9e:
         8b:d8:cc:6b:ef:a8:de:e0:5f:8d:fd:c0:d1:5a:49:f6:f2:fb:
         07:35:14:cf:f9:8e:a5:ff:6f:28:2c:7e:03:89:65:02:6e:1c:
         f9:45:4a:50:cd:05:96:4c:2f:3a:25:95:15:10:98:c4:57:b7:
         7a:9e:29:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdCMjQxMTAvBgNVBAUTKDRGMTgyNzNEODg1NTZFM0ExRDZFRDgxNzhCODA5NTI4
RDk5MEE2OTEwHhcNMjUxMjE5MDQ0MjQ1WhcNMjUxMjI2MDQ0MjQ1WjAYMRYwFAYD
VQQDDA02OTQ0ZDdjNS02MDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu477DE7ghtPIRZU4hsus9jW5pojHewN7edyGfbuz67hXKcPPnbdoAA5GMrFP
yeJZRsIGltg/a39lxGVsNznpDzKNEl3wP27OzI10+Ddohlw1XANUEF/97wcg3P5c
QMsJWpZS31swI96rYQr37VRLj+gZQ4zdy9MqMb3TVkpK2NIeHS4YmA5B+XJ5LtXT
b4YDMCkQnzyMFoTEpX0xNot3X/L8MFoyi5xrc8vwZN8ENNEyfNiEoah648KM8brZ
XBz3Uz4ktZrDUxf6XiopQZj/2qVk4KOO+eyKIB9Lq25xL5iTy3z5taEBOuVXwj6K
kk3SAtTNeilLTeKAwXL9WvBQgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzdVjHp
k8ntjgZk579CNGsqsXeUMB8GA1UdIwQYMBaAFE8YJz2IVW46HW7YF4uAlSjZkKaR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0IyNC8xNTQ3NUQ4NjhG
NzYxMUVGODRFQzc3MTVDNEY5QUUwMi9UeGduUFloVmJqb2RidGdYaTRDVktObVFw
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1R4Z25QWWhWYmpvZGJ0Z1hpNENWS05tUXBwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0IyNC8xNTQ3NUQ4NjhGNzYxMUVGODRFQzc3MTVDNEY5QUUwMi9UeGduUFloVmJq
b2RidGdYaTRDVktObVFwcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhH/fU0Ftf6qWneMgaBhOGVomWzcJ0SrNozWtTQ/jpgqUSzFLawQtO
oaPP56AcfC4YSdeqcqMWtkLTaFvLsN3dhOkFgvxZsOo+GJIPLp1qznZyHOZIuLYN
+IUxbTJY5hO32MiPZF96SLz9pvPI+U79KjKoup6rVMshhaQ3NG624a4nEZvsYoYM
+/g3zQwHNUFGmNWfk+GgRlKMK38AUdFDPjEggQXw7SSv42pmRH2cosXFBb5yAy4i
wGvLYiJQtOALqsh1Q56L2Mxr76je4F+N/cDRWkn28vsHNRTP+Y6l/28oLH4DiWUC
bhz5RUpQzQWWTC86JZUVEJjEV7d6nim4
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:31 2025 by rpki-client