This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File:                     TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier:          QBXiGyGp1PekDw/I2qnVnurx+TvsU5Jwe83fdV4GaNo=
Subject key identifier:   CF:0C:FA:7E:C1:20:EB:E3:1A:B9:4B:DB:23:F0:8D:45:2E:E8:B7:50
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       1A19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number:          1806
Signing time:             Sat 20 Dec 2025 16:37:10 +0000
Manifest this update:     Sat 20 Dec 2025 16:37:10 +0000
Manifest next update:     Sat 27 Dec 2025 16:37:10 +0000
Files and hashes:         1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: niOicE6E4BeW9DirmvH85o++ZSeG+zj1i9GS49Qx+3w=)
                          2: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
                          3: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
                          4: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: a50VCxDM+rD8Ar8TkJi367BRkd8ietONIDl/hmG93rs=)
                          5: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
                          6: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
                          7: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
                          8: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6681 (0x1a19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
        Validity
            Not Before: Dec 20 16:37:10 2025 GMT
            Not After : Dec 27 16:37:10 2025 GMT
        Subject: CN=6946d0b6-8a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:63:63:de:90:c3:4a:37:e4:5e:72:f3:57:
                    d3:48:2d:36:9f:90:b2:df:aa:8a:fe:46:2f:53:6f:
                    00:ff:7b:ca:15:f2:ac:a9:88:59:91:ad:61:b7:fd:
                    47:47:7a:d7:59:65:8a:2c:ec:e2:dd:05:02:45:3b:
                    04:d6:9f:b9:32:a4:62:38:01:74:d2:8a:83:c1:5a:
                    43:eb:96:6a:75:5c:1b:a2:5e:26:92:c0:d3:48:cf:
                    a0:31:25:67:a5:17:9f:19:5a:88:35:ae:8a:28:0b:
                    10:5a:96:4b:13:45:89:e0:e2:22:95:df:6a:ef:53:
                    9b:06:42:b9:78:20:0f:40:d6:28:d2:2b:64:99:b5:
                    d5:2f:9a:78:de:ea:4b:86:22:3c:9f:24:81:68:c0:
                    85:9a:53:e9:2d:97:9c:90:1d:7e:5c:8c:aa:2b:b7:
                    14:58:ab:ae:44:5b:68:e2:a7:09:85:2b:f7:32:d1:
                    6c:79:1d:fa:dc:13:51:cd:98:b3:cb:20:a6:e2:e1:
                    7d:c8:04:f0:51:f9:97:3c:47:b1:76:b2:d0:20:bb:
                    e6:98:04:f4:a1:27:87:a2:e0:52:79:5e:c2:a0:d4:
                    eb:5d:e9:25:18:18:78:69:b1:35:c2:c0:42:4e:07:
                    69:ff:70:b2:86:13:6e:f2:28:64:27:75:73:2f:f6:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0C:FA:7E:C1:20:EB:E3:1A:B9:4B:DB:23:F0:8D:45:2E:E8:B7:50
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b4:c7:a1:ed:b7:b5:13:fd:e2:10:b3:f9:c3:be:b7:2d:24:
         15:7c:f6:f2:f0:3c:13:07:85:40:a4:9a:79:e4:c7:e9:ef:05:
         b8:6f:a4:b6:f1:bc:58:16:b0:7b:67:8f:75:7e:42:3d:86:2f:
         80:09:29:12:18:9f:6d:30:a8:5c:81:3e:7e:b5:49:12:5e:af:
         32:19:02:bb:e4:8a:3f:8c:22:c6:cb:f2:68:eb:da:62:9b:c9:
         b8:9a:bf:fb:3d:38:d4:02:47:ff:c4:da:63:6c:97:eb:4f:25:
         66:c2:03:3e:21:88:4f:f0:98:b4:d1:18:77:a6:f5:ec:c5:4b:
         57:f8:ca:c0:54:9a:32:22:e1:b6:d5:a2:fb:3d:f2:19:a3:55:
         c4:7d:9b:8c:6f:7d:0a:f4:f3:8d:03:a0:76:a9:d0:8b:a4:69:
         3d:e0:8c:fb:dd:93:9a:55:66:df:f6:6a:57:6a:93:34:1c:cb:
         e4:66:ee:4c:10:e3:7f:d6:a7:df:58:e9:fd:5a:18:c3:e7:af:
         5d:cd:22:cd:60:fc:2e:ae:68:67:b7:78:01:c3:0b:e5:75:4f:
         a0:a7:68:95:63:49:e0:d2:6a:4b:af:32:c1:de:31:f3:4d:bc:
         2d:a7:76:79:64:20:a8:ff:d2:ff:72:93:b4:d5:65:4b:b8:f5:
         57:b4:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:51:13 2025 by rpki-client