This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
File:                     FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json)
Hash identifier:          bNf3h0jmA2EgNbzxjrb0G5j1qRWb8w6r8gG5XXep5fI=
Subject key identifier:   6A:E5:55:04:9C:E7:77:72:79:96:65:25:87:6B:84:3E:EF:8D:FB:1D
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Certificate issuer:       /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
Manifest number:          024A
Signing time:             Sun 07 Dec 2025 00:19:48 +0000
Manifest this update:     Sun 07 Dec 2025 00:19:48 +0000
Manifest next update:     Sun 14 Dec 2025 00:19:48 +0000
Files and hashes:         1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: 5wj/EjYarMLoQbS3U7IaV8aDA2pyYdpRAKFv2kxPezg=)
                          2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: /rubUqM8iakBB4nVHyGXJxMwm5Edukun5UH3RjpHupI=)
                          3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: SZ6kzINKdgGfoDPlHAn87OJmgfXdX29J/2qyR/Wg9Eg=)
                          4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: LaP0YhIMPBKWNFUEp0aNCBhEMDr2b8V3vIh2Qxwj/jw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
        Validity
            Not Before: Dec  7 00:19:48 2025 GMT
            Not After : Dec 14 00:19:48 2025 GMT
        Subject: CN=6934c824-d7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:3a:1d:83:df:d5:a5:dc:3b:9b:54:6d:71:
                    49:b4:fd:2b:ca:ce:66:15:92:d3:a8:1a:f4:14:72:
                    ad:9c:64:8f:bc:e7:e9:52:4f:de:79:91:7a:3a:e5:
                    f9:45:ad:f6:6d:81:7b:1e:af:cf:da:ea:79:f8:44:
                    e4:17:1c:14:d4:f6:95:12:75:4b:02:ba:6f:f3:02:
                    d1:8b:15:da:aa:ef:c2:0d:ec:36:2a:33:01:e6:9e:
                    0d:f9:71:9d:d9:4b:f3:aa:ab:4e:ac:d0:a3:3d:ff:
                    63:d3:45:0f:c6:13:97:f7:fa:91:b5:17:69:a2:6a:
                    b7:35:23:3d:af:b0:01:47:94:2f:0f:01:d3:a9:b0:
                    cd:9e:5c:4d:d6:40:3a:04:8e:fe:fe:f1:69:20:a5:
                    9a:5f:a2:5b:70:9c:e5:e3:94:fd:2d:12:8a:7c:81:
                    79:e8:f5:78:5e:7c:3e:90:5b:35:c6:7a:d9:df:b9:
                    a8:1a:a6:6a:4c:d8:fb:23:be:e0:10:69:b1:e3:ee:
                    ab:c5:0b:65:f0:40:c0:1e:91:8a:33:ca:df:e8:dc:
                    c7:62:f7:8e:39:b1:3a:ed:da:21:d8:d0:9d:14:36:
                    8c:84:3a:75:d3:02:7f:25:05:db:e9:2b:7b:14:db:
                    e2:f9:c4:eb:83:6c:f5:31:97:92:14:62:b5:a2:9e:
                    1a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E5:55:04:9C:E7:77:72:79:96:65:25:87:6B:84:3E:EF:8D:FB:1D
            X509v3 Authority Key Identifier:
                keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:49:81:55:a5:46:e1:5d:e9:66:89:9b:fb:f3:17:3f:54:d3:
         a2:b3:b7:9a:8a:33:5c:c9:8e:87:e4:d8:1d:5b:3b:8a:1f:d3:
         7c:91:4a:c5:70:50:02:5f:7a:4c:b4:53:53:d1:2f:f9:57:a4:
         e4:d0:b1:f8:25:ca:63:fe:82:d1:fb:84:9b:8b:d3:27:b8:03:
         65:24:89:03:66:79:fd:33:90:f5:a3:81:10:06:52:a2:c3:0a:
         0d:30:41:c0:e1:9b:5c:53:18:0f:00:d4:c0:46:09:02:8a:77:
         8e:0e:ab:ee:9a:80:1b:32:8e:a0:d0:ce:15:0d:ab:3f:bc:0d:
         09:a1:ff:f1:19:49:96:11:d6:f3:c8:91:3b:02:d7:ee:53:b4:
         c8:18:fe:c3:3f:67:09:ad:a0:15:96:6c:8e:62:ca:10:36:12:
         9d:95:99:9c:13:a3:14:42:19:7f:24:fc:a8:a4:49:ab:9a:a8:
         09:64:df:d3:91:60:4c:52:d3:d5:c7:4a:eb:2c:4f:52:ee:c7:
         06:41:2d:dc:5e:7e:a8:0a:eb:8f:46:a9:4b:fc:be:9a:e2:6f:
         60:ab:af:5b:f8:ec:e8:c0:e8:3d:01:85:44:1d:0e:c4:02:6c:
         a1:89:f5:01:20:a8:10:ea:6d:bd:5b:18:b3:d8:bc:67:66:b7:
         ed:87:4a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:58:58 2025 by rpki-client