This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
File:                     TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json)
Hash identifier:          rNjOnkU199+fwTxp9ilI9q08dY7QlN8seT6NyGzxyBQ=
Subject key identifier:   F4:41:B9:BA:51:64:AE:05:F8:F6:41:CE:4E:29:08:73:B0:5C:50:13
Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
Certificate issuer:       /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
Manifest number:          01B3
Signing time:             Fri 19 Dec 2025 02:20:08 +0000
Manifest this update:     Fri 19 Dec 2025 02:20:07 +0000
Manifest next update:     Fri 26 Dec 2025 02:20:07 +0000
Files and hashes:         1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: ZdGWGNXX2UTTU0SaywBZjFkzh1mYl+X1BNlvIHbRNIw=)
                          2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: c8xC2gX2VG0WPWJTP0Tr0I6LdHRsTfIm5z3hVzO25VA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
                          rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
        Validity
            Not Before: Dec 19 02:20:07 2025 GMT
            Not After : Dec 26 02:20:07 2025 GMT
        Subject: CN=6944b658-dc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3d:60:1a:f9:79:e3:18:d7:51:3f:28:31:5b:
                    cc:8d:52:0f:98:3c:d7:03:88:2d:1a:2d:04:b1:f3:
                    66:01:a4:2e:03:cf:40:8d:67:0f:c0:1e:23:aa:91:
                    61:4b:dd:ee:3e:27:b1:5f:f5:aa:a0:96:60:af:16:
                    1c:bb:44:0b:75:a2:ed:a8:3e:6a:e0:53:95:b7:c7:
                    24:48:ca:e1:c8:c1:ed:f9:9f:b3:21:18:4e:cc:49:
                    1e:06:86:dc:a8:32:dd:af:93:90:59:59:54:73:93:
                    36:86:99:70:a2:db:52:47:77:5e:e1:c2:1a:7b:3c:
                    27:94:b8:91:dd:a8:7b:f4:4b:20:34:b5:de:f8:00:
                    a8:06:a2:4b:05:c3:57:6a:74:af:cc:88:51:79:66:
                    9f:6b:d7:06:3c:48:e9:e8:94:ab:85:16:0d:ef:4c:
                    f6:bf:2e:fc:12:6e:2a:e7:8e:2b:e8:90:cc:0e:e0:
                    d0:b5:5f:ce:5f:14:14:66:be:33:bb:48:92:28:5f:
                    e3:a0:52:86:a9:a0:46:68:a7:0c:62:41:ca:fa:96:
                    ed:17:d9:8b:bd:a6:cf:ad:25:7e:80:51:d7:c5:f1:
                    0f:f5:c9:f1:4f:b7:2f:1c:78:74:0c:52:3c:b1:5b:
                    4f:79:0c:aa:df:0b:e2:7f:2b:b9:60:cf:e3:2f:98:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:41:B9:BA:51:64:AE:05:F8:F6:41:CE:4E:29:08:73:B0:5C:50:13
            X509v3 Authority Key Identifier:
                keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:68:ad:d6:ea:5d:9e:f4:b2:0d:19:a1:5e:68:55:93:a5:7c:
         ab:35:a2:49:09:0d:4f:36:5c:d6:5b:40:f8:95:df:1e:76:04:
         62:7e:cf:1c:29:e3:14:c3:1e:ed:d0:0c:03:08:ab:67:ce:e5:
         9a:8b:91:33:71:d9:1f:74:81:cd:87:6d:d9:f2:cb:08:71:5a:
         19:6d:70:2e:3c:1f:8a:e2:9e:92:9c:29:61:c5:de:49:a9:08:
         6b:33:08:81:82:89:c7:76:4b:de:8b:21:b0:37:09:b7:2b:87:
         f8:d2:a0:4b:79:e5:4e:d5:df:87:ca:f0:8a:75:83:1b:07:3f:
         2c:c0:2d:73:d9:d8:bd:b5:82:5e:f1:46:61:a9:0f:7f:45:2c:
         9b:a1:7e:7c:ba:8d:8f:bf:23:85:ed:d7:fd:90:94:13:e1:74:
         66:d4:d1:ab:0b:af:74:29:22:d9:68:9d:02:48:06:30:a0:1e:
         62:dc:fd:b6:76:15:03:f7:bb:66:ff:66:cd:ad:e3:09:9c:15:
         8c:2e:d0:f0:9b:fb:67:21:50:81:0c:00:67:8c:4d:f4:84:ec:
         cd:4a:56:04:2a:f4:73:0b:49:5d:5d:de:e8:a8:b5:e6:e2:af:
         35:aa:5a:6d:2d:33:8a:3d:1b:f0:fb:b4:d5:ab:6a:f3:e9:98:
         eb:58:da:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:39 2025 by rpki-client