This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
File:                     tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json)
Hash identifier:          V1IpdqYWgqjEPjY9BvG9cNjnoPXac+neXR1oawYCPHM=
Subject key identifier:   92:38:6F:BF:AE:00:A5:05:2A:AF:99:25:F1:F3:7E:3D:E0:24:D3:EA
Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C
Certificate issuer:       /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
Certificate serial:       12ED
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
Manifest number:          12E5
Signing time:             Sat 20 Dec 2025 16:47:52 +0000
Manifest this update:     Sat 20 Dec 2025 16:47:51 +0000
Manifest next update:     Sat 27 Dec 2025 16:47:51 +0000
Files and hashes:         1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: 9SE44n3Y5RgnONNdfybq+AddCpKn5mO8IXeHbZdTPos=)
                          2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: QOShMQ6mMEZRjJ5JESydTLr4xwZz//rE2YbhLSt51RI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4845 (0x12ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
        Validity
            Not Before: Dec 20 16:47:51 2025 GMT
            Not After : Dec 27 16:47:51 2025 GMT
        Subject: CN=6946d337-c256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:f5:ad:ac:b4:4e:5f:84:5a:2d:c7:5e:5b:
                    5c:ea:d3:70:9c:47:e7:df:94:0c:d4:b6:25:ca:b8:
                    6e:d8:f9:e7:b0:12:8e:0e:33:9d:0c:3f:df:5d:12:
                    7c:c4:18:36:ab:a8:6c:2c:9c:9e:8a:88:ad:72:25:
                    63:d0:27:84:e3:c0:f8:32:46:b3:37:08:50:bd:d9:
                    12:2a:cc:00:27:44:13:d5:38:04:84:ec:d6:d0:62:
                    fc:74:fd:c9:46:37:e2:97:21:9a:d3:1d:9a:5c:4d:
                    09:39:7c:88:9a:69:dd:48:8c:9f:4f:14:bd:bd:3d:
                    8f:9b:f6:e8:fe:d8:65:b9:49:6e:9c:35:77:82:f6:
                    a5:ee:b0:78:69:2a:a7:83:f3:dd:a1:06:fc:07:4d:
                    e5:31:46:ce:e3:b3:43:1c:18:fb:63:47:b1:ba:fd:
                    f0:15:ed:90:13:ac:df:c2:c7:48:3a:a8:e6:13:58:
                    cd:1e:9b:51:5b:b0:64:04:8d:c0:8f:51:dd:97:8a:
                    fb:7e:9d:e0:23:0a:e8:13:37:c0:a5:66:2f:81:74:
                    a3:d5:e1:45:c3:ed:d7:c6:f4:02:4f:e8:fe:fc:ce:
                    a6:99:8d:15:e8:96:ae:ad:20:bf:5e:3f:b7:da:1f:
                    6c:5e:39:2e:27:af:52:2a:13:7a:fb:e5:6c:be:d7:
                    0b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:38:6F:BF:AE:00:A5:05:2A:AF:99:25:F1:F3:7E:3D:E0:24:D3:EA
            X509v3 Authority Key Identifier:
                keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ab:82:31:e4:56:0e:18:30:59:01:43:ac:a8:2f:9f:b6:50:
         cb:7d:84:48:e5:68:f7:1b:7b:a2:9f:e2:55:cf:64:bf:b1:e7:
         10:35:74:45:07:2b:00:c6:77:54:de:62:8a:02:1c:f3:e8:72:
         56:c7:1d:be:e1:28:91:e1:1d:5e:c1:87:53:60:96:51:e0:1c:
         7c:25:c5:12:93:bd:71:09:e4:ae:1f:96:ad:60:7c:f3:23:a3:
         ad:1a:24:20:e2:cd:01:62:4b:84:cd:3b:18:18:c9:a3:86:1b:
         6a:da:d6:99:db:0a:02:96:a4:09:20:cd:20:1a:1c:6b:6a:c5:
         b8:b9:9e:38:78:fd:65:9b:4b:da:9e:f8:2a:4a:37:d8:70:02:
         5b:4b:78:e2:76:66:75:1a:8f:9f:f6:8d:e9:4e:97:33:d9:b3:
         37:d3:c5:aa:61:0a:d7:fe:cd:84:bf:f5:1d:4e:15:71:a4:ef:
         83:25:48:68:61:b8:e7:9d:d1:ad:4c:ae:60:c7:74:79:f6:8a:
         5e:ec:fa:68:df:07:1d:8b:66:c1:ec:8c:7d:60:e2:e8:be:d4:
         0d:36:12:1d:7c:9e:a9:d8:d5:3e:01:57:ac:7a:3e:dc:c0:b0:
         ef:8c:8e:5d:a3:29:e7:72:6a:59:89:54:b2:05:04:62:47:83:
         c7:b4:b4:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC
M0ZGNkY1MEMwHhcNMjUxMjIwMTY0NzUxWhcNMjUxMjI3MTY0NzUxWjAYMRYwFAYD
VQQDDA02OTQ2ZDMzNy1jMjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4n1ray0Tl+EWi3HXltc6tNwnEfn35QM1LYlyrhu2PnnsBKODjOdDD/fXRJ8
xBg2q6hsLJyeioitciVj0CeE48D4MkazNwhQvdkSKswAJ0QT1TgEhOzW0GL8dP3J
RjfilyGa0x2aXE0JOXyImmndSIyfTxS9vT2Pm/bo/thluUlunDV3gval7rB4aSqn
g/PdoQb8B03lMUbO47NDHBj7Y0exuv3wFe2QE6zfwsdIOqjmE1jNHptRW7BkBI3A
j1Hdl4r7fp3gIwroEzfApWYvgXSj1eFFw+3XxvQCT+j+/M6mmY0V6JaurSC/Xj+3
2h9sXjkuJ69SKhN6++VsvtcLTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJI4b7+u
AKUFKq+ZJfHzfj3gJNPqMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE
MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5
UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut
M1ZmV0w4bWtucUN6XzI5UXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtq4Ix5FYOGDBZAUOsqC+ftlDLfYRI5Wj3G3uin+JVz2S/secQNXRF
BysAxndU3mKKAhzz6HJWxx2+4SiR4R1ewYdTYJZR4Bx8JcUSk71xCeSuH5atYHzz
I6OtGiQg4s0BYkuEzTsYGMmjhhtq2taZ2woClqQJIM0gGhxrasW4uZ44eP1lm0va
nvgqSjfYcAJbS3jidmZ1Go+f9o3pTpcz2bM308WqYQrX/s2Ev/UdThVxpO+DJUho
YbjnndGtTK5gx3R59ope7Ppo3wcdi2bB7Ix9YOLovtQNNhIdfJ6p2NU+AVesej7c
wLDvjI5doynncmpZiVSyBQRiR4PHtLRf
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:11:42 2025 by rpki-client