This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
File:                     T8Rg8J-QqobK9GfCha149DEnILA.mft (raw, json)
Hash identifier:          aMNq84v+Pm9z2DqCDAO7l1tCKG3XTgrpP87BJ6iui8E=
Subject key identifier:   3C:5C:11:9B:45:FD:5B:02:43:7A:EE:61:1A:F6:A3:66:2D:1C:F7:4D
Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0
Certificate issuer:       /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
Manifest number:          012D
Signing time:             Tue 23 Dec 2025 03:38:31 +0000
Manifest this update:     Tue 23 Dec 2025 03:38:31 +0000
Manifest next update:     Tue 30 Dec 2025 03:38:31 +0000
Files and hashes:         1: T8Rg8J-QqobK9GfCha149DEnILA.crl (hash: qnmL/O3VkfEztomeidlzfzNBbKtGgtn+2QqFRyNj86o=)
                          2: F394D822271911EF86EB1C09C4F9AE02.roa (hash: Qh8PjLgGSm0UikgzIoT2yOicsZXmat+tWnCt5geWY08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDD99, serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
        Validity
            Not Before: Dec 23 03:38:31 2025 GMT
            Not After : Dec 30 03:38:31 2025 GMT
        Subject: CN=694a0eb7-ecbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:4b:fc:fe:cb:4f:89:8a:0f:3d:aa:10:d9:
                    c4:db:93:fc:3d:5a:d0:e2:9a:3e:3a:72:f3:9e:f3:
                    58:14:96:c9:0c:86:04:26:19:4d:0b:c3:0e:a3:10:
                    28:c8:66:3e:f7:09:55:fd:58:22:99:2f:76:e2:c0:
                    2b:c0:f9:56:bb:54:24:2d:57:28:21:53:35:07:cb:
                    f7:12:c3:26:78:d5:e8:75:f9:82:fd:24:36:6e:1c:
                    24:f3:81:f2:4c:c7:53:07:7c:a5:5e:fb:8d:3f:91:
                    e8:6c:0e:06:ef:4b:fe:9a:76:f6:8a:67:3f:06:4a:
                    b1:40:c9:e5:81:cb:52:8f:06:70:6d:e1:db:c9:e2:
                    e2:6b:b0:a6:d0:fc:35:37:cc:7d:ad:e6:da:67:8e:
                    09:5e:83:52:c9:66:ba:d8:a1:8e:a4:27:ba:83:5c:
                    87:64:05:66:72:ac:af:a8:90:04:05:2d:cb:88:aa:
                    86:f5:ad:09:83:60:ba:43:e9:28:7e:78:c1:16:d4:
                    98:6f:37:59:a8:c0:00:bc:00:ff:f1:fa:12:15:ab:
                    4b:ed:53:a5:f1:01:36:01:fe:3d:a7:53:57:e4:68:
                    75:08:f2:65:14:47:94:29:71:00:01:6b:86:eb:35:
                    27:5a:6a:54:4d:88:d8:38:a8:be:7f:11:41:33:86:
                    25:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5C:11:9B:45:FD:5B:02:43:7A:EE:61:1A:F6:A3:66:2D:1C:F7:4D
            X509v3 Authority Key Identifier:
                keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c3:92:70:07:7c:43:aa:8e:05:9f:66:9a:d2:7b:d1:aa:0f:
         c5:be:27:fb:52:4a:7e:04:38:3d:98:ef:f3:8b:06:c7:48:48:
         da:ef:a1:bb:1e:9b:50:7e:15:4f:06:cc:2a:c8:79:b4:90:92:
         dd:16:17:49:a1:2a:ca:a1:f0:3c:5a:17:f0:41:4f:77:e0:0b:
         26:36:8a:22:31:ae:ff:bd:ba:ea:47:69:9b:fa:5f:64:10:a3:
         8d:cb:cb:7c:09:bd:16:e8:74:c0:03:44:a1:c9:96:7f:9c:7c:
         a0:8b:98:b0:71:ba:8b:b6:a8:f2:f5:35:09:a8:f5:55:e3:c8:
         b8:44:63:78:83:58:df:32:04:41:8b:d4:d0:c0:d3:23:f6:79:
         80:9e:c7:60:49:1c:b7:b0:6a:94:91:85:dc:16:37:a0:2f:d6:
         b9:09:95:7f:07:24:45:5b:99:a3:78:15:44:cb:85:55:f0:72:
         07:81:ff:67:20:88:61:59:50:5e:9a:e6:29:ac:ea:a3:f6:8c:
         8a:5d:8f:a2:1b:17:b6:19:11:1e:80:1c:78:7d:00:04:86:2b:
         a1:f5:d4:37:7a:21:12:76:92:13:e9:66:21:52:b0:8c:a6:b1:
         31:26:77:37:ab:61:96:2a:1d:82:3f:e6:34:3d:22:90:6d:c9:
         ec:c1:57:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 13:38:30 2025 by rpki-client