This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
File:                     -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json)
Hash identifier:          rtN+Tw8QsEKUObZe7ha7a1XOuLLlKrV0/Dg7J/817e8=
Subject key identifier:   BD:FE:44:5A:9A:D2:50:80:50:6C:B6:4F:B5:FC:17:02:D8:F4:7C:3F
Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F
Certificate issuer:       /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F
Certificate serial:       0CC4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
Manifest number:          0CBC
Signing time:             Thu 18 Dec 2025 17:59:46 +0000
Manifest this update:     Thu 18 Dec 2025 17:59:46 +0000
Manifest next update:     Thu 25 Dec 2025 17:59:46 +0000
Files and hashes:         1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: HhdVfTlM0DF6qYG8oZICyV8FKmC4rdr8onIarUE4x88=)
                          2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl
                          rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3268 (0xcc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F
        Validity
            Not Before: Dec 18 17:59:46 2025 GMT
            Not After : Dec 25 17:59:46 2025 GMT
        Subject: CN=69444112-938c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:a1:28:d4:89:5c:4b:69:04:da:39:af:6f:
                    4d:c7:4d:1c:49:b1:56:23:ad:9c:61:69:c1:15:18:
                    f3:05:a0:e7:ab:2f:1e:7c:c2:b6:f1:44:a1:4e:c2:
                    87:c2:bf:2c:26:0f:33:61:ef:57:8d:82:7f:08:8e:
                    ae:f7:dd:b3:57:0d:5c:f5:46:57:08:a2:53:b6:43:
                    62:f4:aa:87:c6:ad:5e:30:11:46:fc:fd:50:d6:93:
                    7e:68:8a:2d:09:4d:08:65:79:5b:57:cf:09:b9:54:
                    4b:7e:6b:42:cc:a3:c4:0b:f8:a5:4f:bd:d1:a5:42:
                    85:f5:b7:ac:91:75:fc:41:92:63:eb:51:92:0f:84:
                    24:42:ea:b2:98:8d:53:a0:4b:5c:d1:a2:d9:ae:14:
                    41:59:80:86:d1:74:85:5c:91:d7:d6:0a:f3:49:62:
                    1c:5d:00:ea:78:6d:1f:f6:35:99:e5:f6:0d:1a:bb:
                    5a:7e:d9:72:9d:2c:be:db:db:f0:82:3c:62:c2:ae:
                    f8:d0:b7:a6:28:fe:3c:8b:17:97:72:87:e9:66:55:
                    6c:64:97:13:46:d5:73:05:84:44:2a:9c:c2:86:f0:
                    0a:2f:a4:9a:3f:40:e4:97:e8:fd:fb:84:ca:39:dc:
                    46:a5:c2:74:41:fe:d0:f0:d2:ee:2a:2f:7b:4c:fd:
                    01:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FE:44:5A:9A:D2:50:80:50:6C:B6:4F:B5:FC:17:02:D8:F4:7C:3F
            X509v3 Authority Key Identifier:
                keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:3f:43:ee:97:62:d9:b0:68:99:00:1b:45:70:0e:a8:4c:cb:
         cc:03:46:54:8b:d0:e9:6e:0f:8a:d4:f9:ef:19:77:c1:2b:76:
         36:25:df:13:a3:6a:79:48:66:eb:d1:fd:47:93:26:af:7b:ac:
         bc:b0:f1:54:4e:20:be:72:83:fd:40:f5:c6:f9:49:3a:76:3c:
         42:63:f5:e3:bd:34:0b:7b:d3:f5:79:52:3f:2f:d7:30:29:79:
         68:4e:e1:25:0e:14:ae:9f:4a:e1:b7:dd:c6:bd:e6:d4:06:df:
         b8:90:e5:d5:60:c3:22:d7:c7:e9:0e:b0:c9:e9:14:6b:d1:87:
         09:5e:dd:32:49:03:78:9c:97:3c:d6:b5:74:c0:02:aa:59:64:
         34:51:ec:d4:3c:93:0a:23:76:32:a3:d3:df:40:3a:47:50:1a:
         f2:be:95:ee:ed:3e:37:10:f1:fd:0f:13:c3:f2:fc:09:c1:e5:
         8c:40:02:7a:fa:8a:f2:8e:57:82:d7:ff:be:d6:54:e8:c2:40:
         40:5a:51:1e:a6:cb:39:0b:aa:c0:6b:74:89:35:ec:38:12:29:
         45:2c:57:4f:2a:cb:6a:d4:4f:e1:47:73:58:47:ef:a9:cd:4b:
         39:56:2e:43:66:ed:fe:dc:72:f1:18:b5:57:30:41:73:eb:ac:
         e8:45:57:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw
NzkxOTRGNEYwHhcNMjUxMjE4MTc1OTQ2WhcNMjUxMjI1MTc1OTQ2WjAYMRYwFAYD
VQQDDA02OTQ0NDExMi05MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuyShKNSJXEtpBNo5r29Nx00cSbFWI62cYWnBFRjzBaDnqy8efMK28UShTsKH
wr8sJg8zYe9XjYJ/CI6u992zVw1c9UZXCKJTtkNi9KqHxq1eMBFG/P1Q1pN+aIot
CU0IZXlbV88JuVRLfmtCzKPEC/ilT73RpUKF9beskXX8QZJj61GSD4QkQuqymI1T
oEtc0aLZrhRBWYCG0XSFXJHX1grzSWIcXQDqeG0f9jWZ5fYNGrtaftlynSy+29vw
gjxiwq740LemKP48ixeXcofpZlVsZJcTRtVzBYREKpzChvAKL6SaP0Dkl+j9+4TK
OdxGpcJ0Qf7Q8NLuKi97TP0BqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3+RFqa
0lCAUGy2T7X8FwLY9Hw/MB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx
RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL
cVljbXRHX1B5LW9Ia1pUMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChP0Pul2LZsGiZABtFcA6oTMvMA0ZUi9Dpbg+K1PnvGXfBK3Y2Jd8T
o2p5SGbr0f1Hkyave6y8sPFUTiC+coP9QPXG+Uk6djxCY/XjvTQLe9P1eVI/L9cw
KXloTuElDhSun0rht93GvebUBt+4kOXVYMMi18fpDrDJ6RRr0YcJXt0ySQN4nJc8
1rV0wAKqWWQ0UezUPJMKI3Yyo9PfQDpHUBryvpXu7T43EPH9DxPD8vwJweWMQAJ6
+oryjleC1/++1lTowkBAWlEepss5C6rAa3SJNew4EilFLFdPKstq1E/hR3NYR++p
zUs5Vi5DZu3+3HLxGLVXMEFz66zoRVdR
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:54:41 2025 by rpki-client