This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
File:                     FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json)
Hash identifier:          p3DcNNpdUPQ6x03ysourv5ZAsNjG417ZBIugteES09o=
Subject key identifier:   A0:DD:4E:57:1B:0F:B4:B3:75:A1:19:C9:61:2F:FB:F6:AD:F1:73:3F
Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
Certificate issuer:       /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
Manifest number:          0193
Signing time:             Fri 05 Dec 2025 01:41:44 +0000
Manifest this update:     Fri 05 Dec 2025 01:41:43 +0000
Manifest next update:     Fri 12 Dec 2025 01:41:43 +0000
Files and hashes:         1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: YXnJZlTvTdkh3sot0YvSn+Am7bKhhNQ6322ofVIZH0k=)
                          2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
                          rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
        Validity
            Not Before: Dec  5 01:41:43 2025 GMT
            Not After : Dec 12 01:41:43 2025 GMT
        Subject: CN=69323857-92b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:75:33:e3:27:91:9d:bb:7b:76:36:0a:70:
                    6b:f9:2a:35:8f:e3:98:3a:0e:c9:2e:bf:f7:45:28:
                    12:9e:7c:d4:15:27:02:50:a2:34:67:13:e7:7d:16:
                    9f:f4:72:2f:cc:d5:24:32:2c:4d:9e:87:9f:a7:23:
                    1b:e7:af:5f:43:2f:1e:3b:1a:04:a2:9c:67:eb:8f:
                    5a:91:48:ca:cb:ba:8d:89:f3:30:f4:1a:d3:d4:d1:
                    58:21:25:db:8c:a4:63:ea:5a:f6:e4:c7:eb:73:45:
                    e1:a9:0d:09:b9:a7:44:62:40:cc:e4:79:cc:36:94:
                    03:09:d9:6f:ee:b4:2f:dd:89:19:3b:bd:1a:ca:66:
                    4f:c5:8e:5a:a8:7f:ad:56:37:b3:c7:47:0e:3d:3e:
                    98:de:4d:28:0f:89:5d:2a:75:8d:46:62:26:c0:ad:
                    3e:7a:be:5f:cf:09:02:a3:ff:b1:3f:18:ed:36:95:
                    aa:81:50:8a:69:41:69:a8:1a:35:34:ec:4d:f5:06:
                    05:9c:d1:a8:a1:0c:48:c0:08:b1:12:ba:10:6f:3e:
                    ae:f9:de:bc:f8:c7:d4:82:35:56:ad:74:a3:2f:95:
                    80:d1:59:35:99:5e:38:4f:aa:f2:71:10:e6:f8:78:
                    bc:5e:a5:69:49:95:b8:d2:88:24:f6:66:e8:16:48:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DD:4E:57:1B:0F:B4:B3:75:A1:19:C9:61:2F:FB:F6:AD:F1:73:3F
            X509v3 Authority Key Identifier:
                keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9b:b8:56:15:02:03:60:fd:3a:41:94:40:9c:d3:32:14:f8:
         18:50:83:3e:13:7c:c6:58:91:37:60:ea:31:6e:0e:8c:1a:34:
         06:ca:5a:d3:50:a0:1c:9a:76:bf:f7:b5:6b:c3:7d:ab:98:a4:
         99:50:a3:9a:d1:6d:d3:d7:45:68:63:a3:20:2d:0b:cd:b3:13:
         74:20:7b:73:3e:21:fa:83:13:a7:62:b6:fc:32:30:60:a6:d0:
         53:c8:f0:ea:a5:c0:ac:79:9e:54:50:77:38:cf:46:d9:67:6b:
         d7:ab:82:8f:57:2f:db:47:b7:cd:63:4b:13:15:13:70:67:1b:
         be:e5:6b:92:50:e3:af:37:30:13:48:ce:a3:c7:9b:d4:c0:6f:
         64:d1:10:73:9a:a2:f4:f5:b1:68:ca:40:a2:46:ff:11:63:cb:
         33:f3:0e:90:49:b7:9a:6f:d9:de:55:7c:cd:fe:03:92:f2:11:
         d4:38:81:46:9b:e6:ab:c8:e1:5f:b0:d1:05:c9:4a:0b:41:aa:
         26:a7:2f:2c:cb:05:91:7d:4b:bd:c0:2f:83:15:18:22:8f:49:
         c5:56:d0:55:03:35:56:49:92:4a:76:48:60:f1:69:e3:65:42:
         5d:c8:41:fb:1e:b7:b9:bd:45:c3:1b:93:a8:86:a9:d1:e3:5c:
         4e:be:b6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:21:33 2025 by rpki-client