This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
File:                     tGadMNIQ5JB80oiL50uJpt08tsg.mft (raw, json)
Hash identifier:          Vo6A4pUEWDwPQ9tDN/H1tRgnHTjTgX7D0UJR41NVSCo=
Subject key identifier:   50:BC:43:E7:CD:BA:B2:11:CE:C8:49:67:1D:BC:3C:DA:06:D0:9C:70
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Certificate issuer:       /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial:       098E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
Manifest number:          0979
Signing time:             Thu 18 Dec 2025 19:39:10 +0000
Manifest this update:     Thu 18 Dec 2025 19:39:10 +0000
Manifest next update:     Thu 25 Dec 2025 19:39:10 +0000
Files and hashes:         1: tGadMNIQ5JB80oiL50uJpt08tsg.crl (hash: 0iRArCnAbGOLNXmWoqZGTdAQG2ctpwBxNEUaTl/1aFY=)
                          2: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (hash: p54CFofowbUbktzQ5l2cM2w3M6idGp06vDW+Qt3EoTM=)
                          3: D7120558A7ED11EA95BED565C4F9AE02.roa (hash: 69e6c/vHo1P1XZkYWN+UCZupbdC0oSmCyhIpttIVtDU=)
                          4: B350B67E964611EDA10D8777C4F9AE02.roa (hash: dqgw7Vjah1kgl1Eb2Qsi3T+K4Ggh+1iUdEI4VBpnCIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
                          rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2446 (0x98e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
        Validity
            Not Before: Dec 18 19:39:10 2025 GMT
            Not After : Dec 25 19:39:10 2025 GMT
        Subject: CN=6944585e-3dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ec:a2:96:e8:7a:64:33:28:d6:54:1d:6a:ee:
                    f4:93:20:47:b1:60:14:38:65:50:f0:90:93:d0:3c:
                    1c:2c:1a:02:15:45:0e:86:96:d0:b7:d9:19:c2:41:
                    11:75:d6:c8:6b:05:07:b5:94:c3:d9:3b:99:8f:1a:
                    94:9a:73:93:44:70:39:a6:ee:b0:44:32:12:71:68:
                    6e:d4:1d:75:93:45:c5:88:01:44:d0:bd:eb:d2:8e:
                    95:62:f7:20:7d:51:02:0e:81:44:74:9e:48:19:5b:
                    a3:06:1d:cb:e2:36:24:80:99:e3:72:b5:f3:6b:ce:
                    6e:b9:7c:05:c5:e7:e5:3b:bc:66:0b:88:43:a2:97:
                    f1:39:f1:a4:1c:c1:3f:86:ec:e9:45:6a:4c:cc:d0:
                    c6:0c:b5:6b:72:b5:44:5a:d0:02:6e:f2:38:f5:e1:
                    7f:61:72:ee:58:b8:e0:37:93:51:79:96:40:dc:9e:
                    a5:3b:1e:7e:59:b6:a3:01:50:3c:c4:5c:7d:6f:eb:
                    69:3a:11:27:fa:e3:df:b7:49:50:8a:fe:a9:f7:00:
                    54:fb:46:f0:03:37:5b:8c:16:82:e1:d1:1a:97:42:
                    43:b8:5c:41:dd:de:df:26:75:0a:90:b1:6d:c5:07:
                    a5:ea:50:6e:50:90:65:87:98:50:65:fa:80:d8:99:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BC:43:E7:CD:BA:B2:11:CE:C8:49:67:1D:BC:3C:DA:06:D0:9C:70
            X509v3 Authority Key Identifier:
                keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c7:79:2c:4a:7b:b6:00:53:94:ca:20:d8:c2:b2:6c:2a:03:
         a7:dc:40:0a:4f:51:7f:5d:38:f0:58:42:a6:80:d2:20:29:3d:
         06:98:b4:23:8b:06:9b:bf:74:68:16:66:57:b0:1c:17:bc:3e:
         8b:23:5f:88:ae:a7:94:8a:db:43:42:75:d5:7f:0b:ea:fc:d6:
         64:2b:95:32:98:5b:44:2a:7d:28:92:8c:9f:67:3f:f8:8a:72:
         73:33:c2:bd:a5:f5:a3:e6:53:e8:e5:9b:14:b9:69:8f:ee:c3:
         5b:ba:97:13:26:81:5e:13:7a:94:47:16:79:80:53:3e:0e:b4:
         83:a3:5e:f8:7c:04:9a:ab:81:29:f7:30:96:c4:68:5e:21:ce:
         05:8b:b9:aa:28:35:2d:2f:84:7d:f9:a8:cf:aa:53:e7:f7:ed:
         e3:9b:e7:8d:69:fd:e8:5f:99:6a:fa:5d:46:e7:95:14:95:10:
         a1:a4:ea:6a:44:56:af:12:98:05:36:dd:8b:77:98:6b:bf:bb:
         de:e8:0d:69:58:6a:97:a0:61:3b:38:56:2e:cb:05:4a:c9:f9:
         12:d2:51:15:fc:5f:60:9e:f3:ac:38:6c:e8:e4:83:f9:68:2f:
         2c:2f:8b:67:13:69:2c:9f:9f:e8:e4:8f:36:8e:44:d9:5c:55:
         ab:7a:2b:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2
REQzQ0I2QzgwHhcNMjUxMjE4MTkzOTEwWhcNMjUxMjI1MTkzOTEwWjAYMRYwFAYD
VQQDDA02OTQ0NTg1ZS0zZGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAieyiluh6ZDMo1lQdau70kyBHsWAUOGVQ8JCT0DwcLBoCFUUOhpbQt9kZwkER
ddbIawUHtZTD2TuZjxqUmnOTRHA5pu6wRDIScWhu1B11k0XFiAFE0L3r0o6VYvcg
fVECDoFEdJ5IGVujBh3L4jYkgJnjcrXza85uuXwFxeflO7xmC4hDopfxOfGkHME/
huzpRWpMzNDGDLVrcrVEWtACbvI49eF/YXLuWLjgN5NReZZA3J6lOx5+WbajAVA8
xFx9b+tpOhEn+uPft0lQiv6p9wBU+0bwAzdbjBaC4dEal0JDuFxB3d7fJnUKkLFt
xQel6lBuUJBlh5hQZfqA2JnECwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFC8Q+fN
urIRzshJZx28PNoG0JxwMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3
RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUE1OC9CMzg5MzA0RUE3RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVK
Qjgwb2lMNTB1SnB0MDh0c2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUx3ksSnu2AFOUyiDYwrJsKgOn3EAKT1F/XTjwWEKmgNIgKT0GmLQj
iwabv3RoFmZXsBwXvD6LI1+IrqeUittDQnXVfwvq/NZkK5UymFtEKn0okoyfZz/4
inJzM8K9pfWj5lPo5ZsUuWmP7sNbupcTJoFeE3qURxZ5gFM+DrSDo174fASaq4Ep
9zCWxGheIc4Fi7mqKDUtL4R9+ajPqlPn9+3jm+eNaf3oX5lq+l1G55UUlRChpOpq
RFavEpgFNt2Ld5hrv7ve6A1pWGqXoGE7OFYuywVKyfkS0lEV/F9gnvOsOGzo5IP5
aC8sL4tnE2ksn5/o5I82jkTZXFWreivK
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:58:53 2025 by rpki-client