This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
File:                     fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json)
Hash identifier:          yYl/Es22c/t5CNPptFG1+9natZq2uqD3D8eQwmOclX0=
Subject key identifier:   C3:45:0C:DA:9A:BD:21:57:16:FA:8C:5C:BE:64:C0:9A:D4:78:3C:47
Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82
Certificate issuer:       /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
Certificate serial:       0CB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
Manifest number:          0CA9
Signing time:             Sat 06 Dec 2025 17:39:24 +0000
Manifest this update:     Sat 06 Dec 2025 17:39:23 +0000
Manifest next update:     Sat 13 Dec 2025 17:39:23 +0000
Files and hashes:         1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: ox+EeWYmNQTweyIyolZqtn3ygEubrgheZbqumQ7FsWQ=)
                          2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: QKvT/NXLjM1zgrExrepY0NIOpuLuOZvI/cmhC3FJr94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl
                          rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3249 (0xcb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
        Validity
            Not Before: Dec  6 17:39:23 2025 GMT
            Not After : Dec 13 17:39:23 2025 GMT
        Subject: CN=69346a4c-6451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:d5:38:e3:f1:67:eb:8a:33:7e:59:ff:62:
                    aa:ce:93:35:3b:ef:4a:b8:99:1e:15:83:99:5b:97:
                    af:43:79:7f:5c:8a:16:f0:1a:89:41:ea:9b:e6:92:
                    fc:91:56:10:4e:61:12:47:5c:dc:50:c1:2f:b0:31:
                    74:3f:61:61:86:63:4b:e8:bc:fc:48:36:87:b3:85:
                    e9:3a:44:15:58:23:2e:82:7a:0f:52:43:0c:e9:ae:
                    0e:50:38:70:ba:86:8e:c5:1a:c7:53:ef:97:66:09:
                    77:89:e6:f2:25:c5:bc:1a:dc:ec:12:ec:58:cb:f1:
                    08:a3:c5:68:e0:84:28:c3:98:82:c6:c0:18:58:a9:
                    52:83:9d:b8:29:6f:ca:d0:46:13:bf:5f:74:0c:4d:
                    83:a9:42:5e:e4:40:95:9c:97:8c:0c:4a:ca:71:81:
                    49:31:59:2a:78:20:ec:cd:72:4a:eb:b7:54:3c:b7:
                    cf:ca:cc:e5:df:8d:9e:40:28:84:00:37:b5:a4:c1:
                    c3:d0:e8:63:32:d3:d9:b3:0d:42:78:eb:cf:4c:52:
                    e9:12:99:1c:02:e8:32:38:6e:0a:12:9c:26:2d:08:
                    a8:64:50:d1:24:ee:7d:f4:1d:67:75:9a:d1:4e:31:
                    ff:e8:41:cb:36:79:f8:0c:a2:e8:56:15:10:6f:04:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:45:0C:DA:9A:BD:21:57:16:FA:8C:5C:BE:64:C0:9A:D4:78:3C:47
            X509v3 Authority Key Identifier:
                keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d7:63:92:a2:d1:3d:20:95:b1:6a:a6:f3:73:74:7c:0a:96:
         e6:5d:29:8e:02:7a:ac:49:0f:79:44:32:21:d6:ee:82:02:91:
         62:d2:3b:f1:7d:f7:c9:36:ba:50:8f:55:da:bb:e7:48:6a:19:
         96:97:25:1f:2f:3a:fd:5a:ba:19:76:f3:b8:59:8f:b7:41:7d:
         e2:74:fb:47:da:c1:2f:de:0d:54:f3:27:2c:a0:61:dc:df:c1:
         6d:db:e6:d8:ac:60:7a:ca:91:4b:c2:09:e9:fe:9a:a7:95:d8:
         8f:72:87:2b:27:10:0b:2c:bf:83:da:65:df:ab:5f:01:e4:3c:
         09:8f:94:ec:52:ba:c7:82:28:e1:37:99:7e:91:fa:33:e7:4c:
         1f:f5:f7:22:e6:d2:5a:fa:e4:11:f6:f9:c7:1b:19:fb:8f:a4:
         13:f7:f1:10:db:f8:67:a3:0f:b3:3e:55:92:ee:bb:4d:66:b0:
         01:b3:26:ee:e9:bb:07:c9:38:bb:7c:3d:a3:e4:f0:db:8b:27:
         ba:d5:f1:a0:4d:32:84:cc:0d:55:b6:8c:90:d1:c5:65:8b:c6:
         b5:48:c2:0b:3d:3e:12:aa:c3:a5:97:78:97:58:21:ac:19:b0:
         6c:5a:ee:48:3b:8e:20:2f:aa:56:f0:17:ac:32:a9:10:bc:01:
         96:e4:6e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:01:59 2025 by rpki-client