This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
File:                     FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json)
Hash identifier:          sDZaAbnd3cxq9J3FV5jaJvDGKVru+xFDxG97FXUC++U=
Subject key identifier:   4B:F6:15:03:85:22:A6:22:74:59:04:B5:29:58:5E:95:96:62:14:56
Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
Certificate issuer:       /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Certificate serial:       02B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
Manifest number:          02B4
Signing time:             Wed 17 Dec 2025 00:52:37 +0000
Manifest this update:     Wed 17 Dec 2025 00:52:36 +0000
Manifest next update:     Wed 24 Dec 2025 00:52:36 +0000
Files and hashes:         1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: ExqDqUKo8Z5PAKnA6l3Oy2QiB7e0lYjawdm+c5//y4k=)
                          2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: 0XIDOV8UwVvmlax4boMgDyUwaF1U/8jmEUNtClSqDZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl
                          rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 00:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
        Validity
            Not Before: Dec 17 00:52:36 2025 GMT
            Not After : Dec 24 00:52:36 2025 GMT
        Subject: CN=6941fed5-e635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:81:3a:d0:6a:ff:5f:a3:66:0a:08:87:25:
                    bc:c7:56:d8:28:78:d9:90:04:5a:9c:33:f8:ba:d6:
                    aa:46:56:ed:ef:27:cb:59:fa:c6:2f:f9:cb:33:36:
                    bc:98:cc:d8:c6:91:f2:c0:30:07:e0:36:8d:2b:82:
                    e8:61:37:8d:16:b5:82:07:04:1a:4f:bf:92:0a:c5:
                    a8:6a:d2:a4:ee:7a:23:37:89:29:86:99:fc:d9:83:
                    4f:27:7f:cc:97:e7:1c:45:9e:62:3e:12:b2:a5:83:
                    47:a8:25:a9:11:a0:37:0c:f2:69:17:a9:eb:27:ca:
                    09:dd:16:98:5b:0f:a3:87:ba:2c:1b:36:15:8e:e9:
                    2f:27:3e:f7:1c:91:28:41:1d:6d:f5:64:a6:8a:54:
                    1a:24:54:76:7d:40:55:77:04:08:33:c1:be:4a:4e:
                    57:5b:79:c3:9c:9e:de:59:1a:4a:bf:6d:46:60:22:
                    a9:90:33:b8:c6:e1:28:b0:80:29:f2:cd:1f:5c:a6:
                    dd:31:05:c7:91:06:97:f4:10:30:b6:5b:68:9a:ee:
                    57:e3:1f:31:11:ca:c6:1a:45:82:a9:e5:c6:7b:89:
                    10:ab:eb:64:8e:b9:64:3b:a3:a7:53:b8:e3:9d:c3:
                    23:4e:bb:85:a5:3d:5e:1b:78:39:ce:80:2e:f6:da:
                    7f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F6:15:03:85:22:A6:22:74:59:04:B5:29:58:5E:95:96:62:14:56
            X509v3 Authority Key Identifier:
                keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0f:60:95:7d:d9:97:cf:a6:2a:8a:1a:74:6e:46:7e:df:8c:
         f4:bb:47:3e:37:8f:2a:d4:50:10:af:f1:f4:02:3b:ca:01:53:
         67:95:06:d5:c0:4a:05:60:2d:cb:f5:a9:5f:4a:a8:cd:9e:ca:
         17:f0:b5:53:84:46:42:85:5a:4f:6e:b5:f3:ab:b5:de:85:1e:
         bc:56:1e:73:75:e9:18:b2:47:60:88:ef:b7:e8:21:5e:54:7f:
         20:d2:19:70:1b:43:b7:f2:6b:a6:6d:20:1e:a3:ee:1a:4d:8b:
         ba:60:3a:1a:ae:27:5e:8b:db:6b:b6:cf:41:27:f3:32:e4:c2:
         46:45:24:c8:b4:29:7e:c9:ce:02:4f:e2:86:07:71:eb:80:c0:
         5d:bf:f6:5a:cb:7d:ad:09:39:39:56:69:ee:c0:ae:5d:ca:c5:
         dd:f3:fd:2f:ce:1a:83:34:71:c0:7b:9e:86:dc:60:61:98:0a:
         bc:a7:41:12:c4:66:0f:04:40:59:29:2d:1e:a9:0b:57:15:12:
         30:90:d1:e9:31:81:fd:50:25:b9:50:e4:fb:6d:8e:15:5e:fd:
         99:d2:82:69:c7:ba:cb:dc:d6:03:87:6b:6e:d4:ca:92:29:10:
         c0:5d:87:5f:02:be:4b:a8:4a:44:2b:4a:86:54:17:0c:8a:a4:
         e6:8c:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:10:12 2025 by rpki-client