This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
File:                     tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json)
Hash identifier:          I5kanmEtyjhgExec2h9TDRN4DyZKNfhBcjcB1cMGxDU=
Subject key identifier:   4E:3C:71:E4:33:D8:A3:59:6C:F2:99:44:CA:4C:02:C5:BF:6E:09:AD
Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
Certificate issuer:       /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
Manifest number:          0216
Signing time:             Mon 29 Dec 2025 01:34:15 +0000
Manifest this update:     Mon 29 Dec 2025 01:34:14 +0000
Manifest next update:     Mon 05 Jan 2026 01:34:14 +0000
Files and hashes:         1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: vynszi75wBAzJi6BXnnY7uZek1ucjjaZy/DB5Q7e2tg=)
                          2: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: Ah9DA9XDU6AgPBrVhyRA7IEj119ByF47rhFGR96tGKc=)
                          3: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (hash: mJLvR1p4ts88KkpVKKt2PVk1iLkTAtrbOa4ytntbS6o=)
                          4: B4B581DEDFDB11F0B149F2E3536F56BC.roa (hash: g8h4AuAjSU2htCTyorJM2XPUCNXDA6cYYOZOcIV/cZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
                          rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 01:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
        Validity
            Not Before: Dec 29 01:34:14 2025 GMT
            Not After : Jan  5 01:34:14 2026 GMT
        Subject: CN=6951da96-4872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:4b:06:45:96:e3:93:cd:db:af:76:9e:fe:
                    33:7d:4f:7c:dc:13:49:36:07:ba:12:6e:d9:03:52:
                    4f:13:81:0c:06:ae:63:01:65:e8:c0:75:54:ae:5d:
                    1c:7c:8b:7b:3e:a8:4d:91:17:08:8d:a3:eb:fc:4a:
                    4b:92:f9:bb:e0:f1:03:d5:32:01:bc:62:ff:68:3a:
                    ee:ec:ec:c6:0c:bc:ab:80:26:e5:73:fb:7e:f0:e7:
                    a9:79:c4:c8:ea:1f:09:7e:7c:72:e9:57:32:55:90:
                    ad:75:be:24:86:e5:be:7a:28:ce:42:86:1c:0a:40:
                    8a:3b:a1:61:53:75:84:fc:b4:0c:d3:1a:1d:81:cf:
                    2a:ac:83:b1:f5:08:b5:b0:72:47:d5:1d:ae:4f:4f:
                    cd:57:ec:8d:3d:b6:df:0f:6c:69:9a:48:ff:a0:cd:
                    d7:19:78:97:4b:c9:a5:c2:59:f2:3d:90:2b:09:72:
                    44:f0:c6:9e:d6:4c:cb:cf:64:5e:9c:c4:e3:56:c1:
                    6e:30:e6:da:df:20:cc:ab:0f:f9:46:54:3a:41:74:
                    46:68:3a:4d:72:73:4b:c3:af:bd:b7:fb:f6:cd:43:
                    0f:12:11:f5:cd:1e:60:0c:fa:00:18:4a:7a:89:cf:
                    d0:59:77:e1:06:65:2c:bd:33:10:1b:1d:a2:84:76:
                    5e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3C:71:E4:33:D8:A3:59:6C:F2:99:44:CA:4C:02:C5:BF:6E:09:AD
            X509v3 Authority Key Identifier:
                keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:15:74:28:1d:30:30:07:e4:5d:11:44:68:e8:c4:f2:f3:67:
         9a:f6:5b:ce:85:45:46:97:fa:50:a2:24:fd:65:8e:46:fb:40:
         0d:f2:cd:c9:32:84:65:16:e9:c3:b6:73:72:c4:f3:50:ec:3f:
         3a:b0:f8:90:6d:ed:46:8c:f2:e0:f1:37:38:79:ab:43:50:b5:
         d3:56:68:27:43:45:b0:a1:84:d0:02:06:0c:7c:47:6b:dc:df:
         c4:39:61:b6:c8:f3:81:3c:26:13:4b:dd:b0:6a:6a:36:b8:cd:
         85:52:47:fb:ef:4e:7e:f1:55:ca:2c:2f:63:32:50:ff:18:a5:
         17:55:01:f4:5b:87:05:c5:69:d1:c6:30:8e:db:ac:f7:a0:2f:
         a2:b7:6e:20:ac:98:8b:5d:0a:ce:80:d2:ab:5e:bb:ed:6c:cd:
         d6:6b:0f:0e:28:7f:63:21:fb:f6:9a:d9:a3:17:5a:fc:09:e0:
         65:4d:40:2e:b2:cc:af:97:f7:5c:6c:23:f1:8f:7b:cf:8f:27:
         06:b2:df:3b:7d:b2:f0:01:2d:84:96:3c:2a:9f:4e:00:69:ec:
         61:d6:23:f5:cd:f3:84:fa:27:92:b6:45:2d:18:c1:a7:47:3d:
         4a:a6:a5:9d:4d:f6:3f:46:37:ff:ae:3b:b4:71:61:84:7e:68:
         2f:90:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 14:41:41 2025 by rpki-client