This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File:                     tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier:          aDiS+2c83skK8HKSSNaA7q58MaI6DFoTeyOapw8yqjs=
Subject key identifier:   AB:55:2B:F6:B7:5D:A8:AC:79:51:2F:9F:2C:8E:50:F4:C8:33:6D:EF
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer:       /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial:       06E7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number:          06D5
Signing time:             Thu 18 Dec 2025 21:30:10 +0000
Manifest this update:     Thu 18 Dec 2025 21:30:09 +0000
Manifest next update:     Thu 25 Dec 2025 21:30:09 +0000
Files and hashes:         1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: 8E/6SxPyoxfL0DRHXj0Sj1ykfXwxX3pxXkMWvHt4oiE=)
                          2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: Ga4Z3DpE9aUbX7W5p2tUSOPgf7WkxMTRgFBKaq09Cxs=)
                          3: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: x1uMmRK43yay8ZPmLxVu8RIg3TAXDE9HwOF5tkl8BVc=)
                          4: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 1g7V3yJi0/XsTFsCpcEg/UcPiKQqpqW1UWTVYTWMIZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
        Validity
            Not Before: Dec 18 21:30:09 2025 GMT
            Not After : Dec 25 21:30:09 2025 GMT
        Subject: CN=69447262-054f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ed:34:94:9a:c1:3c:0b:50:55:23:9f:41:53:
                    7f:1d:3a:2c:00:d1:f7:d4:d0:23:a0:7b:72:c4:1e:
                    d6:a5:2b:b8:6c:97:ab:1d:8e:fd:f9:96:cd:9f:76:
                    39:9b:ed:a6:10:dc:45:d0:cb:b0:db:9f:d8:f6:71:
                    8d:94:2d:18:b2:93:17:27:63:66:16:42:05:ab:d7:
                    b0:6d:c4:b0:18:17:4d:3a:6a:4d:7c:27:ac:7c:bc:
                    b1:00:3f:61:5a:4c:46:9a:8c:1e:ee:6f:18:45:ec:
                    df:0d:9f:99:6a:c5:74:ba:ba:54:39:35:0a:67:be:
                    d5:23:1e:bc:f0:d7:cf:ea:dd:0f:dd:6b:84:53:f5:
                    80:2d:b6:53:ef:f3:ce:f7:fb:01:87:65:dc:13:ff:
                    92:ab:bf:70:f4:a6:42:85:57:b1:c0:aa:21:5b:4f:
                    da:52:40:b0:bd:13:37:9a:a6:02:d8:a5:26:15:48:
                    49:d7:85:38:9e:88:f5:48:ac:6f:93:9d:7f:77:b8:
                    6a:2e:72:c4:42:d1:19:2d:32:e0:d6:fa:62:e9:be:
                    28:63:82:6f:d7:8f:3c:a7:79:fa:d1:f1:2f:6c:32:
                    4d:c5:31:98:70:9d:09:42:64:4e:54:50:50:98:ad:
                    94:de:8a:18:c3:9e:a2:a8:43:87:7f:1d:ad:0c:c3:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:55:2B:F6:B7:5D:A8:AC:79:51:2F:9F:2C:8E:50:F4:C8:33:6D:EF
            X509v3 Authority Key Identifier:
                keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cf:ab:c3:14:94:a0:f8:63:4e:e4:ac:52:b2:a4:68:ab:7d:
         86:79:4f:b2:2e:9c:74:83:a7:47:2a:de:39:71:27:97:98:d1:
         89:52:15:53:10:b6:0c:7e:3b:a9:ea:34:9e:e3:44:95:33:fd:
         05:bd:20:a8:2b:bd:1b:26:ea:79:44:be:f8:df:8b:d9:56:ff:
         3a:93:2c:3b:2f:99:aa:c6:3c:68:77:9f:df:eb:db:f8:3c:a0:
         aa:39:52:65:d7:95:b5:96:d7:66:a4:7e:26:e4:55:57:b2:cc:
         be:4e:e1:94:b6:a7:3d:f5:eb:8f:60:b3:d1:14:1d:3d:44:b5:
         9a:17:9e:9b:86:74:db:6f:77:b1:fe:2d:22:92:db:4c:d0:a2:
         ea:73:ae:8e:be:53:1e:e5:b7:b8:c5:90:b5:63:97:94:68:89:
         9c:c0:49:0a:ff:15:46:25:40:a7:f1:a3:2e:2d:bd:19:9e:80:
         c9:19:53:c3:32:25:b8:12:43:fc:fe:02:6a:5c:fc:0e:26:ba:
         75:f8:21:24:2b:c8:79:b7:b3:d6:94:9d:c4:69:e8:13:f5:8c:
         e9:ba:76:34:d9:72:c5:8f:45:0b:8b:4c:26:99:3a:a5:7a:65:
         ec:41:26:04:55:93:50:8a:7e:6a:ba:38:a0:10:d0:88:56:bf:
         c5:e7:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:48:13 2025 by rpki-client