This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
File:                     fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json)
Hash identifier:          klyjHFq1Mk3PLm/iaMO2Zw0tm4CaM+OEHJ2TevRmB9w=
Subject key identifier:   4E:D0:CB:D0:89:5C:6B:B7:00:E2:06:AC:CD:B7:31:D1:C0:17:C5:07
Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01
Certificate issuer:       /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
Manifest number:          F8
Signing time:             Fri 05 Dec 2025 03:17:52 +0000
Manifest this update:     Fri 05 Dec 2025 03:17:52 +0000
Manifest next update:     Fri 12 Dec 2025 03:17:52 +0000
Files and hashes:         1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: iA1rCAlIxgzxhOBcLRziPWjll4GwNyu9k8SzDfnVZ+A=)
                          2: 99DDC906ABCF11F09186B30FC4F9AE02.roa (hash: ERTLamQHXAize+DQS050C0oNyt0XOaqRatFR9EGeJt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl
                          rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
        Validity
            Not Before: Dec  5 03:17:52 2025 GMT
            Not After : Dec 12 03:17:52 2025 GMT
        Subject: CN=69324ee0-9e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:db:b6:86:a6:7d:8d:7c:1e:a9:10:ea:6e:
                    16:24:25:35:2a:30:a5:e3:22:07:27:43:22:3c:c2:
                    a1:c2:11:92:e4:43:8d:cd:e4:3d:48:bd:fb:2b:71:
                    da:b3:50:35:0d:15:60:76:55:80:1b:29:0f:a7:b2:
                    b2:99:e3:5e:73:96:5e:b1:a8:be:73:b7:6d:de:a1:
                    79:a9:b3:ce:0d:46:1b:98:37:36:b1:73:b4:7b:21:
                    6c:e1:ae:20:08:b9:2b:79:38:c6:a1:24:b5:c9:6c:
                    22:cb:f0:3d:a2:26:ee:a6:7c:f1:f7:b8:3f:b7:79:
                    71:cc:4d:31:9b:0d:77:28:81:5d:28:bf:1f:ad:94:
                    bd:6e:5b:5f:c4:52:9c:72:18:33:f5:04:20:86:51:
                    6a:6b:36:86:8b:29:d8:b3:a1:3b:c2:cd:0c:27:f6:
                    e7:c1:16:c1:9e:46:fc:34:2d:f0:1f:8f:6e:52:4a:
                    56:e0:27:ad:bd:60:47:50:40:16:b4:12:1a:1e:23:
                    e5:e4:2f:47:dc:e7:2c:8e:46:95:2b:6d:a3:c3:eb:
                    2d:f1:a1:cb:b0:08:08:ac:18:e8:26:cc:04:57:77:
                    27:ff:5e:ac:da:b6:06:a3:af:bd:95:28:a2:28:34:
                    21:8e:4b:58:7a:88:b0:b3:49:91:d6:bc:ea:1f:6f:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D0:CB:D0:89:5C:6B:B7:00:E2:06:AC:CD:B7:31:D1:C0:17:C5:07
            X509v3 Authority Key Identifier:
                keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:1c:c3:ca:f1:5e:86:81:5d:1a:31:4b:4d:1f:99:e7:72:
         0e:55:b9:60:49:2c:f8:1f:0f:19:58:00:ce:f5:e8:ab:48:69:
         75:b8:2d:72:80:39:e3:47:49:b7:1b:a4:77:76:72:28:d4:fd:
         af:1e:a5:a5:61:e4:d3:f2:de:fc:7d:00:0e:29:57:58:30:6b:
         ba:19:69:59:ad:c9:ba:9a:97:1a:2a:4b:93:41:c7:b6:2f:1e:
         e2:5d:d1:26:2c:21:d2:9b:5a:1d:50:17:7b:1e:41:b2:61:48:
         ff:0b:65:c0:b8:36:e3:b5:88:0c:d9:79:68:19:4e:ec:68:28:
         66:11:a8:0d:1a:59:67:e5:89:a3:a3:45:eb:8b:f8:88:d3:e3:
         fc:cd:36:ae:24:df:42:a2:f7:94:b4:c4:78:32:ce:e6:4f:4b:
         4a:47:e5:c4:2a:24:09:47:a9:34:a0:48:1f:f2:5c:0b:1d:2e:
         bd:79:3d:ab:5d:97:1b:2c:eb:4e:7c:a0:3b:dc:82:89:25:dc:
         c7:31:fa:d1:5a:7f:49:b4:eb:6f:a8:20:24:55:48:a6:34:b8:
         0c:eb:a4:0e:e0:f9:74:27:a4:10:3c:82:4f:6a:b8:ea:bc:46:
         7d:9d:db:1c:8a:56:ce:0e:4b:de:8c:3f:b1:fb:8c:1d:90:da:
         fe:f2:30:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:42:39 2025 by rpki-client