This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
File:                     tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json)
Hash identifier:          KCjxDcXRNEZEDXj+YVcA1LkE6Dz4y2nUA9Xd7RR1jIY=
Subject key identifier:   21:42:D0:7E:F9:22:B8:D6:73:4C:0B:D6:88:BD:70:5A:20:49:08:88
Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
Certificate issuer:       /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
Manifest number:          0186
Signing time:             Fri 19 Dec 2025 02:54:50 +0000
Manifest this update:     Fri 19 Dec 2025 02:54:49 +0000
Manifest next update:     Fri 26 Dec 2025 02:54:49 +0000
Files and hashes:         1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: 8csge9fn6YT7JpOt4MDQDRbnaf70M2bD0Pqg134p+iM=)
                          2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: bcxcsPekxix6Fyl8eqyL7H0ERqIMwK9GEhKTFmsvSAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
                          rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
        Validity
            Not Before: Dec 19 02:54:49 2025 GMT
            Not After : Dec 26 02:54:49 2025 GMT
        Subject: CN=6944be7a-c236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:38:0a:e5:d5:36:fa:55:f9:7b:4d:31:76:
                    8a:19:d4:c8:80:22:bd:1c:42:ae:0f:42:93:6b:02:
                    4f:98:81:12:f8:83:2a:3f:29:a7:45:c0:21:c4:ff:
                    53:8a:04:b8:6d:7a:5c:81:05:87:af:be:2d:2a:fb:
                    65:0b:60:65:f6:37:1b:2d:84:27:5e:37:3b:f7:fb:
                    1d:b5:88:8f:1f:60:63:d7:c9:2c:c1:ac:d1:2f:18:
                    34:5c:db:99:0c:94:cb:bf:1c:c5:ca:ff:77:3d:f0:
                    cb:f2:cc:53:ec:c7:6a:9d:7d:d9:25:18:63:c6:f4:
                    c0:ba:54:59:e3:e7:15:17:4f:e6:a3:39:67:4f:af:
                    d4:99:d4:8a:df:02:db:63:c8:eb:eb:0b:1c:6a:88:
                    b4:11:4c:84:8d:70:cc:fd:c5:12:69:8e:5a:d7:ac:
                    2f:cf:8e:d8:73:36:75:a2:fb:5c:63:21:b8:a6:6a:
                    8d:10:5f:8c:56:39:9e:bb:66:ad:05:49:bb:37:57:
                    cf:3b:ba:e5:ef:b0:2b:84:53:b2:45:45:81:a3:20:
                    e3:7b:a0:49:20:cb:af:94:d5:f1:de:76:10:9d:6f:
                    d4:44:cf:53:6f:cc:90:82:30:12:ad:eb:1e:da:99:
                    42:ef:d5:bf:63:21:98:f8:8a:df:bf:b2:b5:c0:e4:
                    5e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:42:D0:7E:F9:22:B8:D6:73:4C:0B:D6:88:BD:70:5A:20:49:08:88
            X509v3 Authority Key Identifier:
                keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:07:54:5a:96:d5:c6:b0:9d:77:0c:2f:36:14:23:3c:46:31:
         b6:e3:2b:33:ec:39:a9:57:26:92:45:94:bd:7b:11:19:5c:12:
         fa:02:96:89:83:39:b2:46:62:0e:c6:22:1e:dd:47:66:73:ba:
         46:bb:fb:ab:7e:7e:31:a5:c9:44:a6:a0:bc:cb:9f:06:e2:26:
         d0:7c:72:98:de:12:73:41:57:60:fd:34:13:08:73:2f:45:f6:
         dc:0a:87:1f:9e:6d:b3:03:5b:79:85:0b:5a:d1:bc:e6:f5:31:
         eb:56:00:8f:7c:a8:e2:9d:1f:0d:84:e1:f8:57:6b:ce:fd:c8:
         bc:c8:eb:a7:ad:fd:a6:d7:d7:7b:90:0c:f5:06:ee:d2:59:64:
         9a:9a:f5:fd:4e:71:48:b6:57:0e:01:c5:e9:7f:c4:02:55:b6:
         23:31:4d:78:04:d0:3b:3a:c9:29:f8:9a:22:50:e6:f2:91:1d:
         87:6e:23:e0:ad:3a:9d:11:f6:41:e8:ba:3c:58:a4:73:85:4b:
         a3:65:c9:e7:27:fb:67:9c:08:c7:1a:f6:b1:92:02:38:3d:34:
         6a:8c:8a:e3:61:a0:1f:4f:94:22:52:8c:27:11:0e:96:64:df:
         63:5c:f3:67:41:9e:a1:f9:c1:72:84:c9:49:6d:e3:7a:26:e5:
         52:51:72:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:47:56 2025 by rpki-client