This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
File:                     fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json)
Hash identifier:          n2QJ7TFs92DmLPPcewq3/CsrdRn2oUnmHIkb5qhKigQ=
Subject key identifier:   82:9C:DB:53:D4:1F:40:5B:55:D7:13:2E:E6:6A:4C:DE:22:BA:40:0B
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Certificate issuer:       /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial:       0C7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
Manifest number:          0BC9
Signing time:             Thu 04 Dec 2025 18:40:13 +0000
Manifest this update:     Thu 04 Dec 2025 18:40:13 +0000
Manifest next update:     Thu 11 Dec 2025 18:40:13 +0000
Files and hashes:         1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: MyVH2iOU5RZA8J3gDluHxAI4iYznuY+qehjt29YatBc=)
                          2: E8819018178811EC876F5F50C4F9AE02.roa (hash: TUeSGThA71gPmHqcyXZanu8mExqUQgocKEFv3yzea/g=)
                          3: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: fKITGlH8Ym4FGCNTLdBz3N/9fT41O0ewrHeW85uprek=)
                          4: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: xgcAPmybhdKKX1LB8rArE+ilDIHuIkSGwEMHOrxxz6w=)
                          5: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: pWNi2zqUl2KymH0GwVdvbCWQHY1sj05kmoe0wb+HqN0=)
                          6: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: fpApiu1FjrarZlPUsOOK6GGIbKmnMiZ6mCyLBRP/A/k=)
                          7: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: SlT7b5WGF4xDvO5UnYsRWIEsNMsfCj2P0RDQ0c4uxVg=)
                          8: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: zf45ltuWfmdAtT9A7Ih3Fv5EL5oWc6vkxJu3n9BqugE=)
                          9: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: kxUXf7mA4CW5b99j/+9BBjl+HFe5y/+Il84nYKPjkAg=)
                          10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: RxzJdhNL3XRe6UM0O5+yODZOZOT+QSs+nHTsvvP7oUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
                          rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3199 (0xc7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Validity
            Not Before: Dec  4 18:40:13 2025 GMT
            Not After : Dec 11 18:40:13 2025 GMT
        Subject: CN=6931d58d-4431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:18:07:8a:1b:f8:a8:47:c0:11:1f:a8:6e:dd:
                    5c:d7:5c:65:db:3d:47:49:01:7b:8d:05:b1:5d:19:
                    ca:ff:78:da:6b:c0:55:8d:8b:16:b0:3f:73:8a:50:
                    a2:0b:70:27:48:6a:2f:d8:a3:3d:39:32:b7:59:0d:
                    a8:5e:0b:f4:75:d9:7b:b6:ce:65:1b:c7:21:1f:90:
                    21:56:5d:ca:ce:f3:94:a1:99:aa:06:c8:b4:be:10:
                    18:2f:f7:b2:5e:30:a4:5d:68:96:5e:fb:ad:ed:7c:
                    92:13:30:b2:d9:89:b7:21:e7:b2:e7:91:6f:3e:c7:
                    69:8b:d6:89:d1:13:65:fd:9f:03:0a:30:29:8f:91:
                    1c:74:68:b1:a9:51:bf:91:40:b7:bb:65:59:9a:b0:
                    d6:64:f0:d9:15:48:76:6d:5d:ab:b5:59:af:98:80:
                    ce:5b:c0:45:e4:60:15:b5:18:6d:79:da:0b:1e:12:
                    89:ba:9a:a9:eb:c1:24:2f:1a:3a:54:d5:1c:9b:56:
                    2c:eb:70:c9:06:c5:e2:74:9c:76:dd:2c:91:6d:1b:
                    52:e3:e3:16:da:47:c7:51:e1:a6:bf:fd:8c:40:da:
                    5f:1c:59:14:a6:34:9a:f3:cc:f2:05:ff:0a:8f:06:
                    fa:43:d2:0e:df:c6:ee:2f:3a:75:93:79:52:9f:c6:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9C:DB:53:D4:1F:40:5B:55:D7:13:2E:E6:6A:4C:DE:22:BA:40:0B
            X509v3 Authority Key Identifier:
                keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ca:c9:ad:ae:59:f9:56:3b:22:15:4c:ab:38:eb:d2:b8:62:
         19:9b:24:ad:ce:7a:b1:b0:ef:fd:59:80:b6:ab:cf:98:14:99:
         23:3f:9d:0b:a6:76:71:f6:d5:d5:2f:b6:84:f8:d2:ca:92:2a:
         df:6b:c0:ef:5b:7b:bc:15:e1:89:0c:bf:00:02:69:ba:81:87:
         0c:7e:14:87:91:80:77:3d:55:ca:4e:3c:13:bc:1b:ae:37:fb:
         9d:c5:ee:94:9a:3e:88:41:6f:f2:bb:7b:e8:bb:52:b3:fe:9d:
         9a:6c:db:90:f2:67:80:c8:63:72:c5:94:12:4d:19:c8:6c:04:
         3e:15:55:71:10:bb:00:e7:aa:99:22:47:65:1a:e1:48:f0:a3:
         a7:cb:98:c8:70:2f:ac:76:c4:d6:6f:3a:15:3c:0b:2a:8d:78:
         5c:3d:f0:bc:36:2e:ae:92:4d:29:bf:d6:77:29:8a:d7:53:b9:
         6b:cc:52:9d:62:7f:6b:a8:40:87:2a:b4:ba:cc:2c:2f:d5:23:
         d7:b7:02:74:dc:0f:f4:d1:89:c7:44:b2:4d:71:f9:cc:4b:ef:
         db:60:08:24:0f:95:e0:99:62:75:3e:b0:04:53:e9:63:5c:5a:
         3e:0a:aa:7c:11:a3:03:0a:c3:78:f4:4d:27:7f:bc:f4:f8:53:
         da:4a:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:34 2025 by rpki-client