This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
File:                     FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json)
Hash identifier:          8f0G+eQU8mKPGZBxwCyfU1aEG7op4t7avdyEQcEUO70=
Subject key identifier:   AD:C6:D6:4D:A7:7B:B2:C0:A0:42:D5:1A:E9:32:EE:1F:B1:2B:A5:46
Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
Certificate issuer:       /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Certificate serial:       197A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
Manifest number:          196C
Signing time:             Sat 06 Dec 2025 16:02:40 +0000
Manifest this update:     Sat 06 Dec 2025 16:02:40 +0000
Manifest next update:     Sat 13 Dec 2025 16:02:40 +0000
Files and hashes:         1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: 0fXgwZDLyyfWY0OzcyL6MPNx9ZERxSrbiNET1JbHS3s=)
                          2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: XS/tQXFr6hMyKrYJ8vxPUjZePNffAHjlSJ+Stv9rn5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
                          rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6522 (0x197a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
        Validity
            Not Before: Dec  6 16:02:40 2025 GMT
            Not After : Dec 13 16:02:40 2025 GMT
        Subject: CN=693453a0-172a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:fe:09:a9:1f:de:d5:ec:d1:be:8e:fa:cb:
                    79:28:61:79:bf:ba:a0:cb:fe:45:20:70:b0:05:6e:
                    81:7d:b7:6b:a8:64:94:8e:b4:80:db:bb:65:e4:70:
                    06:29:17:72:ae:92:b7:b1:3a:6e:67:86:2b:79:08:
                    d1:d4:9a:ce:6c:35:1c:d1:ee:54:8d:07:f0:b0:01:
                    ff:3b:bf:de:ce:b2:b0:e3:5f:81:53:5a:90:c0:fb:
                    d6:06:a5:fe:81:6f:9a:60:93:4e:58:9f:27:af:4c:
                    a0:5a:68:d5:65:5f:fe:b9:da:7a:3a:2c:fc:fc:74:
                    3c:7d:30:15:34:2a:8a:1b:60:9a:b8:b9:ec:6f:70:
                    86:23:6e:1b:bb:8e:90:8f:ee:cd:0d:b5:db:f1:8f:
                    5e:55:d1:c2:6d:ed:ae:83:e6:fd:1a:55:0c:4e:41:
                    77:d7:84:e2:f8:62:be:04:90:58:76:31:52:8f:03:
                    dc:18:4d:a3:9c:5c:cf:55:85:1c:dc:71:50:a8:ce:
                    ac:61:c8:44:52:0b:9b:62:eb:03:90:14:73:d3:e8:
                    61:21:19:73:79:59:b5:7b:97:c0:83:87:7e:4f:e5:
                    87:0e:c5:c0:66:fc:e0:51:25:2c:32:35:eb:7f:81:
                    56:7b:83:b0:e6:63:dc:53:f4:1d:ef:1a:82:3f:87:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C6:D6:4D:A7:7B:B2:C0:A0:42:D5:1A:E9:32:EE:1F:B1:2B:A5:46
            X509v3 Authority Key Identifier:
                keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:41:28:a6:11:46:75:08:e8:3d:e9:46:47:d7:d2:9b:c7:
         eb:a0:b4:41:94:84:3a:f0:ca:06:aa:3a:e7:c9:ea:f8:67:41:
         23:57:b9:dd:92:91:5e:3c:14:79:d3:95:12:36:4e:2e:db:5f:
         6f:d1:3c:81:ce:54:1d:3a:30:42:32:4b:b5:6d:40:ce:93:f1:
         2b:2d:5f:08:ae:23:1b:c8:be:44:49:74:91:96:b5:f6:c1:82:
         58:f0:4b:5f:b9:5a:f4:b2:59:56:2e:a9:47:70:5c:f1:af:43:
         f0:4a:98:d0:72:cc:de:a9:05:26:69:fc:0b:54:9d:ba:3e:00:
         3e:04:f4:c9:bf:9d:44:b2:b3:91:ab:75:5e:f2:ca:63:91:d5:
         11:59:43:96:4e:a0:eb:8d:84:5b:05:32:54:d2:92:00:b7:ef:
         49:7c:cc:5e:22:eb:b5:38:3e:84:51:32:d7:e5:b4:36:92:0b:
         85:73:4e:1a:63:06:14:67:e2:94:b6:63:49:c6:c3:17:39:66:
         7a:2d:70:46:d8:8a:b2:3a:a1:d3:f3:15:c7:c7:a8:8d:49:5b:
         21:c4:b1:62:b3:e2:2c:f3:0f:f7:cf:d5:e7:50:51:d9:39:97:
         46:35:82:31:0f:68:86:40:27:63:7e:77:70:ce:06:6d:7a:0e:
         d4:ed:c6:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUEwQzAxMTAvBgNVBAUTKDE2MDY0RUFCODFBRTE4NzNBMTAxOUQwOTI4OTZGOTIy
N0E1RUVGNDUwHhcNMjUxMjA2MTYwMjQwWhcNMjUxMjEzMTYwMjQwWjAYMRYwFAYD
VQQDEw02OTM0NTNhMC0xNzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAymD+Cakf3tXs0b6O+st5KGF5v7qgy/5FIHCwBW6BfbdrqGSUjrSA27tl5HAG
KRdyrpK3sTpuZ4YreQjR1JrObDUc0e5UjQfwsAH/O7/ezrKw41+BU1qQwPvWBqX+
gW+aYJNOWJ8nr0ygWmjVZV/+udp6Oiz8/HQ8fTAVNCqKG2CauLnsb3CGI24bu46Q
j+7NDbXb8Y9eVdHCbe2ug+b9GlUMTkF314Ti+GK+BJBYdjFSjwPcGE2jnFzPVYUc
3HFQqM6sYchEUgubYusDkBRz0+hhIRlzeVm1e5fAg4d+T+WHDsXAZvzgUSUsMjXr
f4FWe4Ow5mPcU/Qd7xqCP4cOqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3G1k2n
e7LAoELVGuky7h+xK6VGMB8GA1UdIwQYMBaAFBYGTquBrhhzoQGdCSiW+SJ6Xu9F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBDMC8wQjMwNDY3MDgz
RDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdIT2hBWjBKS0piNUlucGU3
MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnWk9xNEd1R0hPaEFaMEpLSmI1SW5wZTcwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTBDMC8wQjMwNDY3MDgzRDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdI
T2hBWjBKS0piNUlucGU3MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKCEEophFGdQjoPelGR9fSm8froLRBlIQ68MoGqjrnyer4Z0EjV7nd
kpFePBR505USNk4u219v0TyBzlQdOjBCMku1bUDOk/ErLV8IriMbyL5ESXSRlrX2
wYJY8EtfuVr0sllWLqlHcFzxr0PwSpjQcszeqQUmafwLVJ26PgA+BPTJv51EsrOR
q3Ve8spjkdURWUOWTqDrjYRbBTJU0pIAt+9JfMxeIuu1OD6EUTLX5bQ2kguFc04a
YwYUZ+KUtmNJxsMXOWZ6LXBG2IqyOqHT8xXHx6iNSVshxLFis+Is8w/3z9XnUFHZ
OZdGNYIxD2iGQCdjfndwzgZteg7U7cYA
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:27 2025 by rpki-client