This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
File:                     FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json)
Hash identifier:          9ObPHd2Q5hRYeu7rG7gba8+n4Vu/66eYcyBuY/WcyxQ=
Subject key identifier:   F9:FD:56:63:78:2B:66:67:76:28:70:41:AF:7A:42:2B:36:4C:47:23
Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86
Certificate issuer:       /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
Manifest number:          0135
Signing time:             Fri 05 Dec 2025 02:35:38 +0000
Manifest this update:     Fri 05 Dec 2025 02:35:37 +0000
Manifest next update:     Fri 12 Dec 2025 02:35:37 +0000
Files and hashes:         1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: N3un8a8sn6d5yOLlS+lZHn+rPKX17XizaA9SZnj1lDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
        Validity
            Not Before: Dec  5 02:35:37 2025 GMT
            Not After : Dec 12 02:35:37 2025 GMT
        Subject: CN=693244fa-4cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:9b:fc:91:9d:a5:d6:ca:36:3f:fe:1e:96:
                    c6:00:c1:7f:08:fd:24:46:4c:d0:aa:a9:b3:f5:0f:
                    d9:de:32:c1:5c:6e:9a:0f:c3:9d:b4:00:6c:2d:08:
                    8b:e7:82:e7:7b:99:80:06:12:05:56:46:96:21:85:
                    aa:01:40:7b:42:e2:94:57:ce:e7:cb:03:91:43:92:
                    0e:51:19:a7:18:ae:75:16:48:db:cf:a1:0f:96:fd:
                    24:a1:9a:3a:b1:05:15:d2:8e:87:be:7f:12:c9:2c:
                    18:00:57:68:a7:35:52:12:79:59:b9:4e:6c:82:2e:
                    ad:9b:0d:69:6c:6c:68:71:7c:83:18:96:c5:bc:6a:
                    cb:5e:61:7c:86:0c:58:1a:1d:a3:96:db:eb:68:cc:
                    5a:1d:6c:2b:13:78:a1:7b:98:af:ba:1a:b9:b9:16:
                    36:14:4f:ac:35:a7:68:8a:37:55:04:9e:47:8c:8f:
                    09:22:f5:52:7a:f3:68:2f:8a:5a:76:b4:22:03:71:
                    a4:0d:e5:51:bc:96:da:82:52:99:12:fe:5f:5b:ae:
                    65:0c:cf:f8:52:7c:fb:a0:44:ae:1b:3c:6a:89:5c:
                    58:27:f9:26:d6:83:2d:94:47:35:6c:ff:b4:66:52:
                    01:79:cc:49:1a:23:95:3e:8c:4e:0d:34:fd:5b:5c:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FD:56:63:78:2B:66:67:76:28:70:41:AF:7A:42:2B:36:4C:47:23
            X509v3 Authority Key Identifier:
                keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d0:d4:4a:df:dd:48:fb:50:d8:4a:14:9e:fa:38:82:23:a6:
         56:73:d6:70:b0:ac:9b:f5:da:e6:02:79:b8:bc:d3:bb:1b:45:
         04:03:0e:a7:34:45:32:3b:b7:e4:71:f0:71:b4:5c:e4:09:bd:
         74:98:be:06:68:7d:7d:44:2b:aa:9a:8b:e9:04:79:5c:16:a4:
         fe:71:70:f0:2b:f3:79:a1:fa:b7:23:ec:54:7a:4e:3c:37:77:
         e9:a9:79:01:1d:c3:ad:58:d9:3a:64:f8:9f:5d:42:31:ed:3b:
         f1:c9:86:55:f8:e9:76:78:e5:c7:1c:87:33:ac:c5:0a:1e:6d:
         0d:7c:00:ff:4e:12:4b:37:a6:77:7b:29:2b:55:03:9d:4b:5f:
         cd:c6:f7:18:eb:7f:80:11:32:ff:bb:7b:47:81:b7:91:3b:d8:
         91:fb:cd:18:04:f7:63:7a:cc:22:7d:55:80:fc:d7:43:43:a3:
         e4:11:83:8d:9c:a4:f5:43:3e:01:26:59:12:45:9f:8f:4f:b3:
         66:1f:c8:9d:7d:fe:0d:02:09:f4:87:f5:2c:36:91:e4:f7:f0:
         e7:a3:ad:e8:2f:bc:fc:18:75:bf:9b:94:f4:3d:26:60:08:fe:
         80:ee:86:28:0e:e8:9f:32:f5:da:bf:29:77:56:a1:c0:f8:99:
         08:d9:2b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:33 2025 by rpki-client