This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
File:                     TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json)
Hash identifier:          7VyxKOK0vnC3lYtFTVUB9yZmO0VxnO6PQI3qMAcfE5Y=
Subject key identifier:   9C:17:E0:43:43:EF:97:7F:F5:7A:99:70:C2:6F:A2:70:21:0F:ED:EF
Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Certificate issuer:       /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
Manifest number:          A0
Signing time:             Mon 29 Dec 2025 05:26:14 +0000
Manifest this update:     Mon 29 Dec 2025 05:26:13 +0000
Manifest next update:     Mon 05 Jan 2026 05:26:13 +0000
Files and hashes:         1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: mTNrfQXaVcM4eXrCurvOq+kjHVd8TZy1KRvRoZRmuLk=)
                          2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: U5ihYANfpqZVv2wTmvSMJeDuFIy+/heVKl2c8EiBKYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
                          rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 05:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
        Validity
            Not Before: Dec 29 05:26:13 2025 GMT
            Not After : Jan  5 05:26:13 2026 GMT
        Subject: CN=695210f6-5b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:1b:2d:7b:a6:86:55:51:80:9e:1d:27:53:
                    b6:8a:e4:c9:ea:9e:ed:f6:d5:f2:f2:17:91:59:29:
                    da:c5:cd:9d:ba:cf:45:cd:82:bc:d0:cd:ba:2d:cf:
                    ee:db:e0:e6:43:89:57:8d:b2:e6:f6:fd:f5:df:83:
                    f0:13:91:dd:af:f5:5e:a8:4c:8b:99:dc:b6:64:6d:
                    c0:49:bf:d3:8c:00:a2:2b:a0:a1:3c:7c:10:9a:d8:
                    36:1b:bd:59:24:3b:ed:3c:62:eb:a7:0e:e7:3e:0c:
                    fd:a2:95:e1:03:89:7d:75:f5:8f:98:7d:94:61:de:
                    fe:94:90:8d:9e:ae:a4:23:27:11:68:12:10:4c:dd:
                    36:72:24:45:40:b4:d0:84:0d:73:52:7f:36:d2:77:
                    0f:8a:1c:52:c3:fb:df:32:0b:76:78:6f:a5:24:07:
                    c7:5c:3f:9d:13:d2:ce:e3:b8:06:12:51:bb:66:fc:
                    5a:45:c3:ff:e5:b1:4f:57:a1:38:dd:52:ec:c3:53:
                    68:54:4d:5e:4c:fc:a6:c1:bc:29:3a:ee:ed:ab:93:
                    74:78:a9:e3:65:22:cf:2f:b7:36:e0:82:53:9f:82:
                    f8:f9:40:82:ca:28:a4:75:8d:52:fc:39:10:9b:63:
                    e2:58:b5:e4:e4:09:c3:b3:06:37:32:7e:56:59:1d:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:17:E0:43:43:EF:97:7F:F5:7A:99:70:C2:6F:A2:70:21:0F:ED:EF
            X509v3 Authority Key Identifier:
                keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:c7:68:46:8c:c0:3a:ac:82:10:e6:5d:43:1e:8f:87:4d:
         74:b1:cf:d7:50:cc:6b:b2:d1:dd:37:2d:e2:d0:1d:2d:56:40:
         c5:d3:56:1e:d0:a5:93:fb:74:ea:a1:44:e7:c7:a8:45:89:9a:
         cb:3a:93:ee:df:41:34:c6:60:d6:4a:74:94:c8:55:de:4e:95:
         92:00:a3:74:14:81:e0:1a:b5:3e:4f:10:7c:76:5d:6e:96:64:
         d0:b7:ec:a2:07:07:b4:19:76:81:8b:66:45:1e:61:af:c7:57:
         24:57:ec:16:e7:03:f6:a3:16:b5:27:68:e2:db:23:62:e1:dc:
         f7:64:b8:19:27:7e:5e:ba:7d:73:13:c5:a9:c4:e8:ab:b5:f3:
         2d:cf:de:fd:66:18:d9:08:8f:40:bc:b5:fe:2f:08:0a:bb:a1:
         e4:74:2f:c0:50:15:a5:c8:dd:30:cc:8b:27:e6:1b:c4:e3:d9:
         fc:3a:fb:c9:93:67:35:c7:c0:1e:9d:40:3c:56:03:75:9e:6a:
         d6:92:70:a2:53:88:d3:5a:e7:2b:fa:93:bf:43:37:8d:c2:f4:
         b1:7a:7d:32:43:68:43:6c:ec:6e:ec:42:54:02:6f:05:65:ad:
         41:78:9c:bf:9a:2b:85:e9:69:7e:ca:a9:02:5e:90:0e:4d:ba:
         71:f3:29:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:26:36 2025 by rpki-client