This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
File:                     ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json)
Hash identifier:          qpcwFE6hyxMongRhqSX3mU8DHLQk7ynoGRSs4USf3jU=
Subject key identifier:   5F:7D:2C:90:DC:FB:52:BE:4D:14:39:86:A7:5E:94:6F:1A:80:59:B9
Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A
Certificate issuer:       /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
Manifest number:          0153
Signing time:             Fri 05 Dec 2025 02:24:27 +0000
Manifest this update:     Fri 05 Dec 2025 02:24:27 +0000
Manifest next update:     Fri 12 Dec 2025 02:24:27 +0000
Files and hashes:         1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: zylz3e2PVdQdvN01S6fRSOfVJx5v4IUV1waNK0hcLIY=)
                          2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: 7LY78H5hS+YFZuVbW5A4tc8w5yevBk0DBjddJ2jmN+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl
                          rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E53C, serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
        Validity
            Not Before: Dec  5 02:24:27 2025 GMT
            Not After : Dec 12 02:24:27 2025 GMT
        Subject: CN=6932425b-e5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:83:57:9b:f3:8b:1d:58:1d:dc:5c:65:32:c1:
                    35:62:53:fc:f2:c8:4e:5e:55:47:7f:ba:2d:6d:7d:
                    ed:63:26:08:72:c8:84:cd:19:5e:da:07:42:d4:c6:
                    7f:6c:16:43:35:a7:75:2a:9d:15:b1:65:1d:b8:0e:
                    bd:b3:24:7c:7b:36:4d:14:42:26:3f:bd:83:bb:d0:
                    c4:e5:64:77:91:02:ba:7d:55:15:30:02:bc:7b:e2:
                    95:29:c8:3f:bd:e3:8b:10:25:bd:e7:d8:f6:bf:03:
                    8c:e6:76:13:13:19:5b:64:ab:81:20:b5:e1:af:48:
                    27:c3:65:b8:e2:81:ed:26:9a:ca:d1:a1:dc:3c:7d:
                    3d:bc:e0:e8:31:74:63:1d:49:eb:fa:c8:49:46:ee:
                    ba:e2:fe:cc:72:6d:27:9a:2e:c6:7f:85:b1:6a:c8:
                    38:0c:1f:23:78:e2:05:df:73:ee:2a:6f:e7:ca:15:
                    5b:d1:23:98:84:ac:5b:af:dc:cf:a7:79:08:78:46:
                    78:1e:a2:bf:28:4a:9f:3e:37:55:a9:b0:39:b1:e8:
                    19:c2:42:5f:7b:d6:ed:33:f9:9a:3c:90:c6:55:ec:
                    69:21:40:9b:4c:29:55:68:10:92:6b:63:10:93:79:
                    07:46:a4:2f:7d:1d:48:53:82:ae:e1:7f:21:53:a2:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7D:2C:90:DC:FB:52:BE:4D:14:39:86:A7:5E:94:6F:1A:80:59:B9
            X509v3 Authority Key Identifier:
                keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6b:bb:ad:c8:6c:e6:a3:2d:7c:95:da:6c:6e:0a:86:d2:20:
         22:cf:4c:c1:b1:fd:2a:17:c2:57:8e:4b:66:9e:ea:2f:4c:4e:
         c0:b7:db:98:24:2a:93:29:f5:2a:e3:52:70:c8:d8:42:34:86:
         5c:ad:03:80:ec:d2:5e:0e:59:5e:da:64:ea:d7:e7:d1:be:58:
         27:93:e6:e5:f1:2d:58:af:2e:ac:f0:8e:39:50:45:1c:a2:c0:
         0c:6f:46:f4:05:54:6b:b6:86:db:77:ba:d2:d3:6e:21:12:23:
         6b:33:cc:b5:c6:63:5e:dc:1c:a5:27:a1:a7:b5:8e:b5:e7:f6:
         7c:34:59:74:db:a0:6d:52:96:02:91:eb:9d:39:22:63:04:55:
         92:c2:fb:0e:c2:25:22:22:df:50:3d:1e:14:1e:5e:7c:2d:b4:
         84:ea:43:d2:a3:bb:7e:0b:04:59:d5:b3:dc:23:e7:76:8b:86:
         9b:dd:04:bc:eb:53:cb:a2:1f:f0:63:e9:b1:5c:a0:58:cd:ff:
         f1:c0:0f:f4:2f:87:fd:ef:bb:50:bd:90:ee:e0:6b:af:6b:68:
         02:69:24:60:fd:35:7d:ec:48:82:29:87:db:0b:fb:f6:73:43:
         49:61:4d:09:2b:b0:e2:16:08:dc:dd:0f:92:da:ec:75:5d:db:
         83:19:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:13 2025 by rpki-client