This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
File:                     tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json)
Hash identifier:          YTWxJ9YuPRCiqz+c1nQ72plnjbauUV053pKr5DWNNDU=
Subject key identifier:   48:79:5F:96:AD:5A:E0:5E:E7:81:27:A5:94:B8:DE:47:74:BF:25:71
Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37
Certificate issuer:       /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337
Certificate serial:       016E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
Manifest number:          016C
Signing time:             Tue 23 Dec 2025 02:52:58 +0000
Manifest this update:     Tue 23 Dec 2025 02:52:58 +0000
Manifest next update:     Tue 30 Dec 2025 02:52:58 +0000
Files and hashes:         1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: 96qd4GDz6FaBs3JEPLhUYDwM4QZ0RBedbrdGiqZPNyo=)
                          2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: h7U51gkPrh1q9p4g/lzt3FLn6dAtL2thUtjcqrJHuCY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl
                          rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337
        Validity
            Not Before: Dec 23 02:52:58 2025 GMT
            Not After : Dec 30 02:52:58 2025 GMT
        Subject: CN=694a040a-feb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:a6:6b:9a:03:67:48:30:c2:86:f9:1f:a4:
                    c9:8e:90:79:c1:97:2e:d6:82:85:27:df:85:83:09:
                    76:f9:e5:1e:84:00:bb:48:2d:fc:b7:52:4d:88:2e:
                    02:9b:f2:85:3d:49:81:37:82:9f:b1:c6:90:0d:93:
                    9c:2c:ea:80:79:4b:ad:8d:e3:4b:2c:80:12:a9:3f:
                    80:7e:3a:39:ba:ac:6c:7f:8d:ad:0e:ad:f6:dd:96:
                    c0:ce:e8:30:5a:37:29:08:a5:5d:8a:71:63:02:08:
                    3d:58:56:05:93:58:42:8e:2b:6a:82:3a:8a:75:9d:
                    04:2a:f4:74:7d:80:a5:8a:3e:22:fb:94:83:e6:5c:
                    5b:dc:7b:cc:aa:81:b8:1d:45:21:7b:c3:cf:64:3f:
                    6a:c6:93:27:8b:67:8f:66:45:b1:19:a9:e6:26:1e:
                    e0:b5:83:c5:13:21:db:05:b9:de:89:0e:4a:1e:49:
                    df:e4:db:7a:09:11:21:5a:cd:ff:07:0b:55:d4:52:
                    31:a0:db:73:51:a3:40:87:ab:69:cb:b4:16:43:b5:
                    e0:14:45:06:b6:c6:1d:25:67:bd:81:4a:88:2a:21:
                    fc:c4:fb:32:21:f2:c7:2b:e5:78:f3:4d:d5:f2:6f:
                    70:b7:22:24:fb:6a:bf:c1:e2:10:a3:40:ee:12:7f:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:5F:96:AD:5A:E0:5E:E7:81:27:A5:94:B8:DE:47:74:BF:25:71
            X509v3 Authority Key Identifier:
                keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:fe:7e:bf:a5:c7:46:38:21:5d:20:51:0e:f8:de:ec:59:5a:
         a0:cd:02:1b:63:9b:be:7a:8f:ec:8d:62:d8:77:00:05:89:9e:
         e6:1e:59:e8:be:7d:97:0d:ec:18:b5:69:b5:70:7c:ef:51:ef:
         c6:73:1d:39:3f:fb:ea:34:39:f1:e5:cc:bb:d6:fd:34:c3:d1:
         f4:0d:5a:84:97:9d:df:33:fa:14:8d:52:ab:b4:8b:6f:65:fd:
         ab:ff:17:15:45:57:ac:ca:13:86:c7:55:9d:bb:f1:79:e7:e4:
         0f:4b:48:c0:2a:fc:ce:18:28:97:da:6b:e3:93:2c:38:55:80:
         a7:e2:62:a2:89:50:eb:66:29:b3:a1:cf:8f:84:42:f5:66:3b:
         1e:79:a6:c8:85:08:75:cb:40:f4:99:dd:f4:b5:1e:f2:ba:22:
         4c:66:50:1d:c6:44:1c:b4:3c:d4:a4:ab:c9:9c:03:9c:6a:a0:
         e7:45:b9:d8:e8:08:af:a3:ed:c6:19:ca:58:2e:13:a5:eb:ef:
         06:43:40:b5:68:6e:37:46:c2:e1:4f:32:3f:b0:23:97:d6:68:
         d7:f0:3f:cc:08:47:0f:94:ac:69:99:91:70:11:78:94:ee:86:
         95:10:18:f5:7d:c7:b5:be:32:91:23:3f:14:91:7b:94:70:d5:
         97:56:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 01:26:00 2025 by rpki-client