This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
File:                     FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft (raw, json)
Hash identifier:          MsFv4D19XzCtJV5ba9C+nTrfvt+IqZv5YH08+al0Lfs=
Subject key identifier:   B3:1E:5E:B9:8F:BD:FD:43:8E:CF:98:D4:8D:46:0D:39:8D:A1:E0:39
Authority key identifier: 14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
Certificate issuer:       /CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Certificate serial:       094D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
Manifest number:          0946
Signing time:             Sat 06 Dec 2025 19:22:07 +0000
Manifest this update:     Sat 06 Dec 2025 19:22:06 +0000
Manifest next update:     Sat 13 Dec 2025 19:22:06 +0000
Files and hashes:         1: FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl (hash: EZ6+pbIOsjl/EkCLMeOPGHqmKOtf/8fZs7yaEiiBOj4=)
                          2: E9E80356AD6211EABEDF046AC4F9AE02.roa (hash: aOqwloZ9sT/M1OqrjBKZ/MpZ3Pwla48CsTsMrgUxXsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
                          rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381 (0x94d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F5BA, serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
        Validity
            Not Before: Dec  6 19:22:06 2025 GMT
            Not After : Dec 13 19:22:06 2025 GMT
        Subject: CN=6934825f-8e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:40:8d:a4:76:d4:34:d9:69:51:8a:06:9d:
                    31:78:4c:c8:68:ba:c0:5c:54:48:58:04:41:b8:7a:
                    fb:7d:28:90:5d:84:7a:1a:13:42:da:36:fb:b6:a8:
                    7c:fe:05:a7:77:15:15:5c:cc:57:f9:0d:71:cd:a9:
                    e0:0a:cc:8b:b1:42:4d:f4:b4:0c:96:9b:d3:1b:fc:
                    7f:d9:e7:54:2e:03:4b:c5:ad:bc:e8:04:dd:b8:ba:
                    30:66:9e:01:7c:7f:bd:24:98:6e:86:5d:f8:98:f6:
                    12:80:ce:b1:3e:b9:9b:da:17:18:38:42:e1:ee:26:
                    b4:5c:14:19:83:e1:c0:05:60:f3:25:e0:92:74:fb:
                    02:b1:e7:42:11:07:92:17:8a:d4:29:8a:6e:7e:dd:
                    de:88:b4:03:46:59:27:58:89:f9:ad:20:db:eb:3e:
                    1c:bd:c8:75:57:0e:67:84:02:fc:b2:2c:23:62:26:
                    a8:b8:7b:74:08:6d:ac:07:8c:ce:70:25:91:61:46:
                    b0:e8:4a:2a:01:b5:eb:b1:6a:5e:cb:54:58:a4:76:
                    30:da:ca:e8:b1:ed:b9:fb:ab:a1:21:d1:cf:36:b6:
                    fc:b8:b7:be:84:55:e5:34:ae:92:2c:6f:be:1d:51:
                    97:99:0d:c9:b9:e5:7c:01:71:4d:fd:37:2a:01:0a:
                    94:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1E:5E:B9:8F:BD:FD:43:8E:CF:98:D4:8D:46:0D:39:8D:A1:E0:39
            X509v3 Authority Key Identifier:
                keyid:14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:dc:56:47:90:bf:79:69:cb:72:c2:99:12:24:b6:98:95:7c:
         61:fd:aa:cf:bf:a1:c2:68:ec:65:d7:db:1d:72:55:8b:5a:52:
         08:75:1d:78:6c:59:75:17:d3:79:7b:dd:a5:c6:85:e1:ab:77:
         ef:15:11:d1:ca:5e:8d:c5:f5:52:bd:97:92:80:7b:d5:ba:87:
         d4:28:f3:63:a5:35:74:7c:14:a9:28:8b:4b:bb:64:fb:2c:18:
         fe:92:1d:4c:d8:9d:65:bb:ee:64:cf:62:df:68:4c:60:62:88:
         f7:2a:83:30:fa:ff:73:df:25:e1:d7:17:ae:77:0f:89:d3:ad:
         61:32:cc:58:cb:f0:df:a4:2c:be:bf:d7:26:ea:2f:7a:c2:37:
         58:32:10:69:ca:59:ff:85:cc:af:58:71:81:05:88:1d:b6:a8:
         1e:09:bf:57:92:34:6e:e6:99:14:b8:16:46:b6:5b:94:7d:48:
         2d:ff:cc:3e:08:5f:68:ec:12:73:50:85:b8:06:e1:ca:cc:6b:
         68:a0:6a:f0:37:18:62:81:41:3a:0f:7e:fa:98:47:7a:0d:51:
         ee:f5:e5:2d:3c:65:44:96:4d:87:d5:91:7d:6d:62:4a:eb:0d:
         79:a5:74:b5:9b:7c:d1:a1:ae:30:62:bf:c1:d8:33:23:aa:a0:
         f4:df:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:34:07 2025 by rpki-client