This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
File:                     TvlHO1VK4acroJgf_v4Tji1IDsw.mft (raw, json)
Hash identifier:          0swj+reQvNAPo/FbWeFsWkW8g8I8ptMsDpXGmzBsij4=
Subject key identifier:   39:23:4C:F8:CC:EC:5F:10:30:18:DF:B8:04:AF:DA:0B:DE:03:AC:24
Authority key identifier: 4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC
Certificate issuer:       /CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
Certificate serial:       09BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
Manifest number:          09B5
Signing time:             Thu 18 Dec 2025 19:33:18 +0000
Manifest this update:     Thu 18 Dec 2025 19:33:17 +0000
Manifest next update:     Thu 25 Dec 2025 19:33:17 +0000
Files and hashes:         1: TvlHO1VK4acroJgf_v4Tji1IDsw.crl (hash: UmdIVs5HGxP6vbRa322QCSNc1tRfb4VPmovmYoqNuyo=)
                          2: E32E2F000EE811EE90BBC818C4F9AE02.roa (hash: byJpKNPjQF7b2JFAHp+3RTx6U3vbcPnlcOVf0jom37s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl
                          rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4C3, serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
        Validity
            Not Before: Dec 18 19:33:17 2025 GMT
            Not After : Dec 25 19:33:17 2025 GMT
        Subject: CN=694456fe-b4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:c0:0f:2e:59:79:a7:0f:25:54:19:42:be:
                    b4:fc:53:b8:7f:4f:95:6f:e8:54:66:b2:9f:e1:13:
                    08:ca:47:df:87:f7:6b:2e:ee:6e:3a:3a:ce:88:57:
                    96:16:b2:a7:2f:41:df:b9:15:38:82:2a:fa:d5:15:
                    9f:ae:25:72:95:78:80:60:86:1c:8e:8a:ce:86:31:
                    34:2d:c0:9d:ca:a2:8d:04:c8:8c:ba:0c:a0:af:81:
                    e1:9c:b3:0f:d5:d1:bd:d6:51:4e:3a:78:b0:3c:fe:
                    a8:24:4f:dd:d9:16:3f:db:2a:3c:02:6a:c3:08:31:
                    75:d9:f8:08:bc:e5:e9:98:5a:74:26:e1:27:76:61:
                    47:58:93:4f:e8:45:b4:df:7a:ea:51:7f:59:9f:59:
                    5c:1e:02:0b:60:06:4f:13:ee:ae:eb:7c:80:e7:30:
                    67:17:cc:3e:d1:6e:c9:65:10:b0:b8:1e:fc:ff:9a:
                    6c:ea:0c:ec:58:4e:9c:4c:b1:43:1d:62:47:01:f5:
                    03:91:93:ef:b5:20:69:6a:d3:81:2a:f9:33:33:06:
                    2c:29:c5:0f:ad:77:05:d1:82:1c:a8:5c:c5:45:1c:
                    c6:b1:1a:47:22:d3:14:f0:75:91:ee:89:3c:3c:0a:
                    a8:d6:7a:5e:14:df:2d:71:2e:39:cc:32:bf:23:f8:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:23:4C:F8:CC:EC:5F:10:30:18:DF:B8:04:AF:DA:0B:DE:03:AC:24
            X509v3 Authority Key Identifier:
                keyid:4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:47:43:be:24:d1:60:96:1d:f4:49:bd:76:77:c4:43:38:0b:
         7e:38:24:44:42:14:b1:a2:b6:2a:52:53:da:41:a8:24:84:4d:
         0e:b9:7c:53:5c:b7:b3:23:0d:c4:e9:b3:e7:d9:04:06:4e:63:
         46:b5:86:a1:d2:49:17:ca:e9:c1:bd:2c:da:92:37:64:e5:11:
         56:a1:52:bb:0f:bf:20:6b:95:d3:8c:67:33:e7:a5:98:94:ba:
         5a:60:aa:f6:f8:f6:34:c7:79:3d:bf:95:6e:eb:e7:e3:55:93:
         30:86:b2:98:a2:a3:15:1f:80:5e:9c:5e:a1:aa:1a:c5:f4:f3:
         c2:b9:99:9b:94:11:d4:4c:62:56:99:45:b6:43:eb:04:6b:c6:
         19:32:d4:6d:9a:9e:b6:87:bd:b2:16:ae:48:ad:61:29:0e:95:
         65:4a:04:c2:62:3b:a7:62:9d:f8:8f:c7:22:48:c2:3a:e7:72:
         51:ae:f2:2f:c6:f8:b4:43:4a:cd:6b:69:1f:42:87:1a:e1:72:
         73:06:54:eb:34:c3:65:41:fa:54:30:66:c9:ec:7b:a2:71:ab:
         cc:59:ef:ba:ee:fc:62:21:4a:b8:ef:cd:12:19:86:c1:77:bd:
         7b:a4:5a:21:6a:95:78:f8:17:6c:00:f7:03:f1:72:5a:5e:8d:
         0c:83:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:56:12 2025 by rpki-client