This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
File:                     Fz6pPabl71KPpzMJc4hIg92lJ-4.mft (raw, json)
Hash identifier:          MNNyc+kXHqk1FNyL3Q5RhSjEERb+TNJD9kBKhKhvJus=
Subject key identifier:   64:04:5F:E2:65:45:6A:C4:24:33:24:9E:91:68:30:46:C8:40:11:10
Authority key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Certificate issuer:       /CN=A9145E09/serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
Manifest number:          83
Signing time:             Fri 05 Dec 2025 04:36:55 +0000
Manifest this update:     Fri 05 Dec 2025 04:36:55 +0000
Manifest next update:     Fri 12 Dec 2025 04:36:55 +0000
Files and hashes:         1: Fz6pPabl71KPpzMJc4hIg92lJ-4.crl (hash: Wh80wYqdNZRONsADwqkXUn8KzdYLqtB4aWoUmU+SyQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
        Validity
            Not Before: Dec  5 04:36:55 2025 GMT
            Not After : Dec 12 04:36:55 2025 GMT
        Subject: CN=69326167-63a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:60:07:a2:22:c8:3c:44:2b:96:a9:eb:44:17:
                    2f:61:7a:da:43:8c:0a:72:c5:64:ab:f6:fe:d8:95:
                    d2:33:34:0d:74:31:14:1a:80:66:e7:a8:68:80:d4:
                    d6:34:07:10:aa:ff:70:be:e6:27:3f:53:a2:1f:88:
                    63:b5:89:2d:e8:34:a4:71:33:1e:f8:b1:c9:33:e4:
                    24:d0:bb:60:24:76:05:f5:3a:2e:f7:88:e7:08:96:
                    df:20:e3:e5:6e:d7:7d:35:ac:ae:33:8e:a6:9d:74:
                    28:be:c0:b3:b1:72:32:d4:63:3a:4d:75:80:39:b6:
                    80:af:e3:72:32:7c:e1:95:83:82:c7:c1:8b:49:a0:
                    84:09:17:8f:62:16:59:92:7b:2c:58:a1:8b:96:8a:
                    dd:73:0d:e4:64:65:6e:af:19:2e:f5:b1:dd:a8:3e:
                    7b:a3:e8:56:f9:24:37:2f:82:df:f9:40:9c:6b:e5:
                    ef:9e:71:28:23:fb:9a:4d:f7:8f:f5:c9:94:15:05:
                    55:22:90:56:06:1c:df:1b:5a:ae:e2:e0:a8:dc:0c:
                    a6:6f:04:de:3b:44:78:7f:70:26:b6:8e:fe:cf:c9:
                    b8:df:4e:eb:4b:92:92:a6:fa:ec:6c:57:43:fc:1c:
                    bc:9e:7f:07:19:e3:79:2f:f2:1c:22:b2:79:f3:92:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:04:5F:E2:65:45:6A:C4:24:33:24:9E:91:68:30:46:C8:40:11:10
            X509v3 Authority Key Identifier:
                keyid:17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f0:70:61:62:68:62:69:21:b8:e8:6d:d0:eb:cd:bb:eb:01:
         b8:a3:21:5e:39:28:f0:41:bc:8b:8c:d8:0c:b1:c6:9e:9d:58:
         30:76:34:4e:1e:eb:6c:ec:0e:79:23:aa:77:c0:25:24:36:89:
         78:97:6b:0c:a4:0c:01:ad:af:99:18:17:31:f5:03:8a:43:2e:
         34:63:b2:50:73:e3:d6:71:34:b9:8f:85:f0:66:c8:a5:da:56:
         d0:25:83:36:6c:9e:5b:7b:e5:e1:99:e4:c9:39:b8:75:2c:1f:
         81:57:e6:ba:0b:49:6f:c0:80:6c:2f:fb:08:09:97:83:9c:b5:
         33:a5:1b:e7:75:55:18:90:94:74:6c:8b:45:91:f7:1f:7a:d5:
         d0:f5:9d:26:69:f5:c8:62:92:14:cf:45:a5:ec:18:cb:1d:71:
         e8:bb:c2:a1:11:55:f9:06:4e:36:bd:a0:81:75:02:af:62:4b:
         e8:70:bd:19:ff:68:eb:36:87:1f:94:eb:ef:e2:8b:66:95:05:
         87:c7:a9:b1:4c:76:83:df:93:3f:7e:9c:c0:27:d4:4b:5a:9e:
         fe:0e:4b:8a:ed:0b:de:cd:47:09:b0:23:be:53:d3:03:97:34:
         dc:fc:c6:fe:67:9f:39:dc:d1:a3:a9:fc:44:da:a0:b1:aa:75:
         14:c8:29:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVFMDkxMTAvBgNVBAUTKDE3M0VBOTNEQTZFNUVGNTI4RkE3MzMwOTczODg0ODgz
RERBNTI3RUUwHhcNMjUxMjA1MDQzNjU1WhcNMjUxMjEyMDQzNjU1WjAYMRYwFAYD
VQQDEw02OTMyNjE2Ny02M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2WAHoiLIPEQrlqnrRBcvYXraQ4wKcsVkq/b+2JXSMzQNdDEUGoBm56hogNTW
NAcQqv9wvuYnP1OiH4hjtYkt6DSkcTMe+LHJM+Qk0LtgJHYF9Tou94jnCJbfIOPl
btd9NayuM46mnXQovsCzsXIy1GM6TXWAObaAr+NyMnzhlYOCx8GLSaCECRePYhZZ
knssWKGLlordcw3kZGVurxku9bHdqD57o+hW+SQ3L4Lf+UCca+XvnnEoI/uaTfeP
9cmUFQVVIpBWBhzfG1qu4uCo3AymbwTeO0R4f3Amto7+z8m4307rS5KSpvrsbFdD
/By8nn8HGeN5L/IcIrJ585IySQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQEX+Jl
RWrEJDMknpFoMEbIQBEQMB8GA1UdIwQYMBaAFBc+qT2m5e9Sj6czCXOISIPdpSfu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUUwOS84RjYyNUM0RTA4
QzgxMUYwQTBEMzRFNTZDNEY5QUUwMi9GejZwUGFibDcxS1Bwek1KYzRoSWc5MmxK
LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z6NnBQYWJsNzFLUHB6TUpjNGhJZzkybEotNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUUwOS84RjYyNUM0RTA4QzgxMUYwQTBEMzRFNTZDNEY5QUUwMi9GejZwUGFibDcx
S1Bwek1KYzRoSWc5MmxKLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBN8HBhYmhiaSG46G3Q68276wG4oyFeOSjwQbyLjNgMscaenVgwdjRO
Huts7A55I6p3wCUkNol4l2sMpAwBra+ZGBcx9QOKQy40Y7JQc+PWcTS5j4XwZsil
2lbQJYM2bJ5be+XhmeTJObh1LB+BV+a6C0lvwIBsL/sICZeDnLUzpRvndVUYkJR0
bItFkfcfetXQ9Z0mafXIYpIUz0Wl7BjLHXHou8KhEVX5Bk42vaCBdQKvYkvocL0Z
/2jrNocflOvv4otmlQWHx6mxTHaD35M/fpzAJ9RLWp7+DkuK7QvezUcJsCO+U9MD
lzTc/Mb+Z5853NGjqfxE2qCxqnUUyCkI
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:46:08 2025 by rpki-client