This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
File:                     fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json)
Hash identifier:          TB6kvdgevku1RAwJ1uV3cv7cfFhHJmfBQCzkvAuZSuY=
Subject key identifier:   CA:0C:95:63:6E:F7:AB:13:CD:7A:07:2E:CF:A3:2D:41:29:FD:84:C5
Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B
Certificate issuer:       /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
Certificate serial:       053D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
Manifest number:          0536
Signing time:             Sat 06 Dec 2025 22:16:11 +0000
Manifest this update:     Sat 06 Dec 2025 22:16:11 +0000
Manifest next update:     Sat 13 Dec 2025 22:16:11 +0000
Files and hashes:         1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: vYOrD35H5C8BBZfjEuw+aFiDURyatiTfRoCDz5Orwfg=)
                          2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: j71cmSthQcDo2Eras5pbfgnd1wVSMIr06Qrqouii3ak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
        Validity
            Not Before: Dec  6 22:16:11 2025 GMT
            Not After : Dec 13 22:16:11 2025 GMT
        Subject: CN=6934ab2b-99d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:06:2f:52:ce:78:58:08:9f:a4:bc:a9:4f:24:
                    6e:39:ab:da:fe:62:91:9b:58:e8:60:b4:da:b8:52:
                    6b:01:85:76:d1:b8:39:18:15:95:20:07:46:67:63:
                    60:13:9b:1a:ec:23:4d:13:da:62:34:79:4f:e3:54:
                    8d:9e:93:3b:13:44:96:93:69:ae:ce:1d:92:dd:57:
                    67:ee:93:6c:df:ec:f4:9e:48:56:b9:bf:1e:74:e6:
                    92:fd:ce:ff:19:05:82:4f:9c:0c:23:de:5f:16:6f:
                    ea:d2:46:56:29:59:c9:31:65:fc:ba:f4:a1:d5:c2:
                    5a:a4:ea:ab:49:b5:9a:c4:b6:da:6c:df:9b:e6:4a:
                    32:e8:ac:4d:d2:b8:a3:29:bf:83:c9:04:3d:f4:fe:
                    16:81:29:d3:98:35:52:e1:6a:a4:5a:ff:ff:b9:e3:
                    dd:1b:be:d9:31:c7:86:0e:34:43:cb:a0:36:e1:89:
                    4e:55:9f:a8:ee:7b:84:17:71:ff:d0:fd:4e:b5:c3:
                    64:ee:b9:31:fb:29:7d:62:f8:c1:89:7b:a7:ef:2c:
                    09:bc:22:6c:0c:22:5a:db:d3:ef:2e:22:60:ce:3b:
                    cf:12:14:68:b9:94:66:92:10:cd:88:6d:36:5d:ef:
                    e4:4b:91:3d:a4:57:a2:5a:ca:64:96:89:bf:23:c5:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0C:95:63:6E:F7:AB:13:CD:7A:07:2E:CF:A3:2D:41:29:FD:84:C5
            X509v3 Authority Key Identifier:
                keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8a:39:71:97:10:8d:27:47:8f:24:2d:8e:d8:d8:a1:79:b2:
         de:d5:83:e0:90:0a:e5:d0:3a:cc:48:e6:42:66:b9:ae:3f:16:
         e6:40:e9:db:63:4f:20:d5:57:62:cd:71:cf:af:6e:63:0b:c0:
         0f:51:39:5d:d5:fe:fd:5e:2b:71:65:15:4d:10:4e:c1:57:fd:
         d5:1e:56:af:25:e6:c6:42:27:5a:65:ad:00:db:23:e1:da:bb:
         5d:14:2f:16:3d:e0:d0:5e:08:30:91:29:c7:30:3c:03:fb:1a:
         9c:f6:8d:b4:69:07:45:31:a5:ff:9f:7c:e7:82:fe:97:76:56:
         5c:38:35:f8:62:04:df:e7:99:77:b4:38:46:9e:80:92:f5:62:
         b7:cb:eb:cd:ab:5c:19:77:21:1a:c4:5c:79:d8:ec:a4:98:62:
         78:ab:73:7d:56:aa:e6:cc:90:18:1c:6d:4d:bb:16:21:3a:05:
         70:c3:bb:da:55:fa:24:ae:8c:09:68:e1:4e:3e:4f:95:e4:5c:
         97:41:83:45:09:98:2e:2d:f5:7d:fa:81:8e:37:ad:fa:92:a6:
         18:3f:ea:7c:50:39:93:c6:e5:e9:c9:8c:42:3a:78:e1:53:a6:
         c8:8f:43:05:51:e6:68:1f:1b:a1:21:66:30:40:4d:86:c5:9f:
         47:86:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:41:38 2025 by rpki-client