This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
File:                     FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft (raw, json)
Hash identifier:          a4Rt6Kf5tbkttfBzSs5t4bQkyM/XyTsVrvnUU74NUPY=
Subject key identifier:   C1:1B:22:6B:10:4A:4C:B4:BF:77:D2:D2:DD:E8:30:E8:E5:A7:62:E6
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Certificate issuer:       /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial:       058A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
Manifest number:          057C
Signing time:             Thu 04 Dec 2025 21:57:06 +0000
Manifest this update:     Thu 04 Dec 2025 21:57:06 +0000
Manifest next update:     Thu 11 Dec 2025 21:57:06 +0000
Files and hashes:         1: FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl (hash: z11fmsbfbdSRo+Rlm6OdEhLsOQa7Z1zzSfCZU286uZI=)
                          2: AC58009E782A11EFA7DD8F7CC4F9AE02.roa (hash: sZfCZ9XCzJg9q38s978ZoO/yQmeInU8GMq3otDrDntk=)
                          3: C8900982059611ECB2896C55C4F9AE02.roa (hash: B4anHJEaRTiTfVVaAnye8CZy9d3Hle7lj/K1p4d+P2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
                          rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91193C1, serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
        Validity
            Not Before: Dec  4 21:57:06 2025 GMT
            Not After : Dec 11 21:57:06 2025 GMT
        Subject: CN=693203b2-14da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:cb:20:81:2d:35:4a:33:1f:6f:df:c4:7b:
                    03:cb:36:10:49:ae:ce:5b:9b:46:1d:03:6c:b8:f6:
                    7f:73:be:b9:1a:bc:18:99:89:37:9e:bf:8c:49:3c:
                    a9:4c:8e:95:04:48:51:cf:90:b3:ae:54:a9:fe:f0:
                    a4:f1:ff:95:db:98:db:66:d2:71:fa:63:a6:e7:38:
                    a0:b6:6e:ab:15:51:7c:01:8c:fe:6f:40:38:9b:13:
                    bf:55:a4:53:a8:76:24:7b:33:70:08:02:fb:c3:00:
                    fa:a9:da:81:a3:1f:0e:66:d3:dd:2d:4a:7c:c6:6f:
                    de:2c:e2:60:4e:e9:02:42:fd:3e:1a:0b:18:40:f8:
                    18:5c:9f:bd:c1:36:39:31:20:9c:ed:72:38:b2:cc:
                    95:df:79:b0:1b:94:18:36:41:70:7c:31:be:ad:e7:
                    54:99:5e:45:74:7f:99:b1:ec:5d:be:6d:5d:1f:0c:
                    32:68:41:d3:0f:ba:2e:b5:0f:a1:66:cf:2c:0b:41:
                    1d:cf:38:3a:b7:a4:70:d6:3e:bd:ce:e4:99:7e:45:
                    15:da:db:bd:03:06:52:3b:29:3d:a2:be:8f:69:ab:
                    a2:2f:42:0b:4a:d2:ca:73:7f:75:c7:7a:4f:b8:df:
                    30:e3:94:76:81:9b:e5:92:b6:56:14:8f:b5:23:8a:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1B:22:6B:10:4A:4C:B4:BF:77:D2:D2:DD:E8:30:E8:E5:A7:62:E6
            X509v3 Authority Key Identifier:
                keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:28:c5:b2:8a:c5:dc:9a:16:35:ee:c2:08:2d:a9:6b:60:bd:
         37:41:da:4f:80:de:2e:97:69:f3:89:d4:4a:1d:52:0f:18:a1:
         ec:e0:fb:5e:c1:e5:44:94:ea:e2:56:81:30:4a:79:42:87:da:
         2b:2f:36:6c:38:ee:f3:20:4e:e6:61:e7:e1:cd:ac:1e:1b:f4:
         0b:5d:38:46:ae:6a:4f:05:c5:50:93:b4:e6:73:e1:18:40:95:
         83:60:97:94:32:8c:d1:39:73:ae:82:00:63:51:9a:b4:9a:55:
         c9:0f:76:f1:aa:71:1f:fe:0e:dd:8b:ee:00:4b:0c:fa:3c:bf:
         28:da:bb:45:b2:83:b0:89:4b:e1:85:d5:a2:af:ca:a2:24:0e:
         de:41:a7:f1:81:5a:72:e3:99:25:fe:b7:19:a4:45:d4:4c:70:
         98:c4:df:79:7f:41:94:88:b7:c4:d7:87:45:91:9f:75:b5:6d:
         b6:5a:74:89:d0:1b:75:f7:ef:30:fe:8e:f1:68:0b:36:7f:a1:
         30:26:72:26:46:fe:cc:18:dd:43:93:e5:9e:b5:23:14:57:57:
         a3:83:15:b3:7a:52:74:32:b4:d1:4e:a0:28:0c:ed:e1:ee:1b:
         63:8e:20:76:9e:9b:c9:4b:56:41:01:84:a8:d1:ef:a7:7c:ce:
         39:cc:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:30:05 2025 by rpki-client