This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          swcjsYRoiSjJ0y5Qo4NpVTqkDr736FAsd+HykVouzxw=
Subject key identifier:   6A:5A:57:E5:3A:51:1A:CD:46:D9:47:57:84:85:E0:0B:11:9F:38:AA
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0C23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0C1B
Signing time:             Sat 20 Dec 2025 18:21:47 +0000
Manifest this update:     Sat 20 Dec 2025 18:21:47 +0000
Manifest next update:     Sat 27 Dec 2025 18:21:47 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: YgSkYsqGHjoyzl/XUUVtVMEak6hjKn04MPSPfZZPfis=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: ioWxXkHuwgM2086xjsQFXghAivhpj/YnVGLVGuciV/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 18:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3107 (0xc23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Dec 20 18:21:47 2025 GMT
            Not After : Dec 27 18:21:47 2025 GMT
        Subject: CN=6946e93b-67f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:02:59:11:3b:cd:df:ea:52:0b:dd:4c:2d:
                    6c:2c:78:9a:72:a1:5e:9f:16:fe:e7:2c:61:4d:22:
                    91:e4:02:eb:42:98:79:87:38:fe:1e:1a:35:e2:19:
                    a0:5f:f2:fa:00:87:73:91:e9:5f:be:10:98:25:7d:
                    26:93:30:ab:1e:ff:20:53:60:28:7d:7e:27:28:f1:
                    42:16:c8:e6:a4:86:29:bd:6e:ba:bc:e1:34:38:9a:
                    95:8e:1a:e7:77:db:f7:d0:69:d3:25:f8:e5:20:a4:
                    9b:12:07:67:8c:93:12:0e:d8:4e:04:05:88:d2:a8:
                    46:1f:2d:ab:9d:70:5b:fd:93:b0:0b:db:ad:2f:39:
                    2c:f9:21:a7:f0:3c:7c:37:ac:d9:3d:8e:9c:9c:b1:
                    d4:e6:ac:9b:29:82:2b:61:23:2f:ff:98:5b:91:3a:
                    f3:3e:0b:44:01:ce:b6:58:bf:24:50:cf:18:b7:62:
                    8a:9b:8d:07:75:04:2e:db:7f:a1:87:ba:8d:29:de:
                    49:c9:b5:73:9d:51:81:ba:80:1b:52:3f:ee:cb:b2:
                    96:84:61:f8:e4:20:b9:73:43:d1:aa:81:cc:cf:24:
                    46:53:7b:6a:1e:ff:42:72:0c:d3:40:35:04:c3:c3:
                    4a:75:eb:bd:65:90:db:c5:b1:b2:3e:6d:ff:5f:a8:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5A:57:E5:3A:51:1A:CD:46:D9:47:57:84:85:E0:0B:11:9F:38:AA
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:52:11:84:b2:1c:1c:df:44:08:55:a0:26:78:4b:82:90:e4:
         e9:f3:6f:d5:cd:78:66:b9:55:22:be:67:c8:f1:70:b7:b0:ff:
         16:cc:f4:68:18:8b:15:86:1e:2e:6a:2a:f7:f2:96:28:d2:30:
         c6:38:50:18:a0:b5:b8:a7:71:e2:e9:58:25:1c:71:da:88:f6:
         a0:83:8b:25:60:c6:a3:99:89:1d:b5:b6:a6:ab:6e:3c:6a:60:
         4e:a1:19:63:b6:e8:f2:23:77:6a:be:55:a3:58:6b:b1:6d:3b:
         75:6e:cb:73:61:4a:1f:69:53:6a:88:49:fe:bd:74:1c:d7:ed:
         79:f5:7b:29:ac:f1:de:43:89:25:5e:39:f0:dd:1e:aa:4e:45:
         a9:1c:c0:13:68:87:b2:f3:6a:3b:ce:50:09:a3:52:e1:81:b0:
         64:34:7c:2a:00:87:57:6a:4d:f6:bf:bf:54:ac:59:9c:89:e1:
         3b:89:f4:0a:de:01:d5:88:8f:99:81:21:0f:3c:54:31:ba:18:
         67:53:94:ef:b6:5d:3f:ae:ec:40:96:97:f2:40:9f:81:6b:9b:
         c7:03:6c:30:05:0c:db:d4:04:05:41:5e:25:2c:c2:53:fe:a9:
         5a:56:35:11:a8:10:23:58:1b:be:57:f0:c2:38:9e:de:bb:6e:
         85:5c:88:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:45:57 2025 by rpki-client