This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
File:                     FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json)
Hash identifier:          YL6ItYcRJt20j40At9Nsh4tFVZIxu1CwzqV73axpp5A=
Subject key identifier:   BD:27:35:19:BC:9E:5E:5E:B9:C7:C0:64:67:9C:AA:03:C3:73:03:04
Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03
Certificate issuer:       /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03
Certificate serial:       08E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
Manifest number:          146B
Signing time:             Sat 06 Dec 2025 18:42:41 +0000
Manifest this update:     Sat 06 Dec 2025 18:42:41 +0000
Manifest next update:     Sat 13 Dec 2025 18:42:41 +0000
Files and hashes:         1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: 9CRXdwGrYBLuB58azEieUPN9Vq7tp7FlyYK5Xdg+GLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl
                          rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2278 (0x8e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415AA, serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03
        Validity
            Not Before: Dec  6 18:42:41 2025 GMT
            Not After : Dec 13 18:42:41 2025 GMT
        Subject: CN=69347921-c58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:a3:9e:68:6d:13:5d:87:04:be:47:f6:cc:
                    e4:66:a6:52:61:17:7b:07:94:60:6f:a9:b7:15:8f:
                    48:d3:5e:d9:73:93:ae:76:f0:49:b0:1e:85:f8:03:
                    68:1a:bd:f1:ba:e3:ef:25:ab:54:3f:2c:ff:df:05:
                    23:80:9d:2c:cd:d6:74:69:e5:1e:5f:bd:5f:f0:a8:
                    92:fa:58:18:18:6d:12:b4:90:72:bd:2e:16:26:8a:
                    bd:f5:2c:5f:9e:60:02:03:ae:c1:dc:ea:0f:8f:3f:
                    2d:96:c7:94:60:3c:f3:f3:b1:52:d4:a6:2c:a7:4f:
                    d8:2d:f1:4e:92:91:b1:20:44:e3:8b:4c:34:54:e6:
                    98:eb:b8:fe:f6:95:ff:21:a9:95:26:d3:cd:76:a6:
                    7a:a7:e1:77:09:b8:28:90:fd:94:c6:23:1b:34:6e:
                    3b:cf:7f:cf:de:03:ef:0c:60:c9:44:93:6b:1f:cb:
                    3c:75:ee:4d:f6:9e:93:ee:67:de:73:42:8e:15:23:
                    a0:05:44:ff:2c:12:70:79:cb:d0:5f:a6:c6:4f:23:
                    f6:28:66:96:9a:08:7b:11:c2:1f:62:40:2c:15:ea:
                    72:b0:e1:06:2f:66:91:3a:de:62:90:d3:1f:c3:2e:
                    c7:b1:c1:08:df:a2:d7:1a:99:fd:de:5d:13:80:d0:
                    11:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:27:35:19:BC:9E:5E:5E:B9:C7:C0:64:67:9C:AA:03:C3:73:03:04
            X509v3 Authority Key Identifier:
                keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:f1:17:0b:9b:2e:22:8a:f8:67:08:bb:ed:69:4e:47:48:52:
         14:74:c1:10:ea:df:80:8d:c3:67:02:56:ff:bb:0d:74:33:1f:
         80:35:1f:1c:2a:08:f1:41:0d:62:b3:e8:59:3c:c3:b6:ef:2a:
         cb:4a:21:a8:43:f4:4e:e8:e3:32:2c:5b:41:fa:d3:44:4e:85:
         6f:83:76:16:df:ec:23:6f:cb:fc:9f:4e:0b:14:47:9f:fd:c0:
         15:4e:2b:ee:05:63:b0:d8:8e:ee:b8:2f:c2:cd:47:ea:47:36:
         46:ae:27:3f:c5:3e:a9:bd:2d:31:1b:35:60:a5:10:91:8a:f0:
         f6:cf:02:60:1f:2d:db:88:d1:01:77:13:99:b9:b5:f4:f6:a5:
         e5:dd:60:12:a7:04:78:59:ea:08:cc:41:56:77:15:c0:8d:18:
         e4:fd:eb:66:0c:b9:36:d8:e7:8e:a1:91:5f:2e:3d:14:44:c1:
         37:07:50:24:26:f7:38:00:92:94:38:9d:2d:75:7d:65:21:28:
         60:93:ef:a6:fc:7d:de:dd:2f:23:4b:4a:25:8b:ff:8f:2c:83:
         e3:b6:f0:2d:aa:3e:c7:bf:6e:5e:52:1a:c8:21:e3:5e:dd:20:
         9f:84:39:1f:99:41:5c:d7:38:36:81:ab:71:99:95:c3:d9:37:
         77:21:d1:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE1QUExMTAvBgNVBAUTKDE2QzAxRDlDQTBGRkJFRkFFMEJCMDEwRTUxNDQ1MDdB
RUE0MTBEMDMwHhcNMjUxMjA2MTg0MjQxWhcNMjUxMjEzMTg0MjQxWjAYMRYwFAYD
VQQDEw02OTM0NzkyMS1jNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzdejnmhtE12HBL5H9szkZqZSYRd7B5Rgb6m3FY9I017Zc5OudvBJsB6F+ANo
Gr3xuuPvJatUPyz/3wUjgJ0szdZ0aeUeX71f8KiS+lgYGG0StJByvS4WJoq99Sxf
nmACA67B3OoPjz8tlseUYDzz87FS1KYsp0/YLfFOkpGxIETji0w0VOaY67j+9pX/
IamVJtPNdqZ6p+F3CbgokP2UxiMbNG47z3/P3gPvDGDJRJNrH8s8de5N9p6T7mfe
c0KOFSOgBUT/LBJwecvQX6bGTyP2KGaWmgh7EcIfYkAsFepysOEGL2aROt5ikNMf
wy7HscEI36LXGpn93l0TgNARhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0nNRm8
nl5eucfAZGecqgPDcwMEMB8GA1UdIwQYMBaAFBbAHZyg/7764LsBDlFEUHrqQQ0D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy
RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2cmd1d0VPVVVSUWV1cEJE
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZzQWRuS0RfdnZyZ3V3RU9VVVJRZXVwQkRRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2
cmd1d0VPVVVSUWV1cEJEUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDA8RcLmy4iivhnCLvtaU5HSFIUdMEQ6t+AjcNnAlb/uw10Mx+ANR8c
KgjxQQ1is+hZPMO27yrLSiGoQ/RO6OMyLFtB+tNEToVvg3YW3+wjb8v8n04LFEef
/cAVTivuBWOw2I7uuC/CzUfqRzZGric/xT6pvS0xGzVgpRCRivD2zwJgHy3biNEB
dxOZubX09qXl3WASpwR4WeoIzEFWdxXAjRjk/etmDLk22OeOoZFfLj0URME3B1Ak
Jvc4AJKUOJ0tdX1lIShgk++m/H3e3S8jS0oli/+PLIPjtvAtqj7Hv25eUhrIIeNe
3SCfhDkfmUFc1zg2gatxmZXD2Td3IdHb
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:34:03 2025 by rpki-client