This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
File:                     FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json)
Hash identifier:          kuBza66ydmFmRMsxj4YdkpWa0qHk/kYp5f1jNv6do8c=
Subject key identifier:   BF:DC:80:C6:29:90:AD:89:09:58:08:FB:7C:9E:62:6A:E0:A7:E8:8B
Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Certificate issuer:       /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Certificate serial:       05F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
Manifest number:          05E6
Signing time:             Thu 04 Dec 2025 21:43:51 +0000
Manifest this update:     Thu 04 Dec 2025 21:43:50 +0000
Manifest next update:     Thu 11 Dec 2025 21:43:50 +0000
Files and hashes:         1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: gZeXvnaiLGI6v6xIIzdEAuZyCFOA4fy6UXPf49RCzyM=)
                          2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: qEzwTZZUC4uMW1HAy4f00w0OgM+P5McKSsq6Y4WD9MM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
                          rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1524 (0x5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
        Validity
            Not Before: Dec  4 21:43:50 2025 GMT
            Not After : Dec 11 21:43:50 2025 GMT
        Subject: CN=69320097-8e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:53:cf:0a:92:e8:d5:96:c3:a1:81:8a:1e:
                    cb:39:f9:47:70:d6:8f:02:9e:b4:3a:9e:e4:3d:d1:
                    53:13:d5:e0:09:39:a2:6e:ca:1a:66:8e:89:89:0a:
                    41:6c:fa:23:9b:64:dc:85:2a:dd:bd:3c:4d:04:f4:
                    85:1c:26:fe:88:c1:e2:30:68:ef:c0:e6:32:06:ee:
                    a6:c1:e5:81:37:f1:a9:e4:5d:12:dc:d7:f3:b1:24:
                    a0:76:8f:78:a8:e1:00:39:9c:9c:e5:27:b3:4b:1d:
                    ba:95:40:10:7f:cc:35:15:56:3c:05:0e:7e:12:48:
                    62:7d:5b:57:5e:0e:ce:7d:3e:97:c7:e9:69:f4:c8:
                    66:f3:f6:60:e0:8d:29:d4:52:d1:a2:9a:e2:07:37:
                    a7:73:f2:56:d2:1d:75:40:9f:c1:51:f3:c7:7f:ee:
                    5c:4f:f6:a0:60:e1:e4:97:65:b9:3f:9d:6d:45:44:
                    19:dc:e1:f5:25:f1:39:7a:90:ed:f9:52:ef:81:7c:
                    47:93:a6:bc:6a:48:a2:96:dc:6e:73:09:ed:9f:03:
                    44:11:5f:6e:31:cb:d7:d8:3e:4a:3e:78:d0:9c:6c:
                    74:dd:23:9b:1a:c9:27:dc:4d:c4:44:14:8d:ab:2b:
                    46:c7:9b:d3:43:bb:bf:70:d8:d6:13:12:08:76:3b:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DC:80:C6:29:90:AD:89:09:58:08:FB:7C:9E:62:6A:E0:A7:E8:8B
            X509v3 Authority Key Identifier:
                keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ed:54:09:63:5f:fa:c8:ba:f6:6c:58:6c:a5:fc:99:90:91:
         31:0a:57:0b:c0:85:bc:cd:fa:cd:0f:a8:a1:e2:a2:14:c0:39:
         f6:2b:47:85:ee:1e:bf:7d:60:e7:0f:f3:4a:dd:06:a8:31:47:
         3b:d3:13:03:4d:17:45:3c:5b:bd:73:b1:7d:ee:d1:cf:12:e2:
         b8:96:b6:08:9f:9c:dd:dc:50:33:78:de:80:97:11:88:d6:55:
         ad:41:75:fd:25:1b:08:ef:79:06:dd:ad:09:23:aa:20:fe:88:
         76:a6:80:10:d9:d1:a4:cf:a0:83:0c:89:0d:1d:91:b3:22:0e:
         2b:bc:2b:06:87:63:01:c7:08:73:5c:99:13:81:3c:c0:6f:09:
         bd:96:59:d8:53:da:76:c3:6a:63:ef:ab:49:af:5d:1d:ed:39:
         34:34:52:9f:47:10:61:3c:9e:47:f2:ed:3f:70:cb:46:23:0d:
         18:0c:f8:52:65:68:06:76:76:b3:ed:8c:78:a7:e9:c3:4d:fa:
         03:7c:e1:a9:58:03:6e:00:a6:e0:df:89:c8:1c:73:f5:ff:14:
         a9:38:38:8c:69:4d:58:47:bc:3e:6e:b5:1a:f3:a1:72:2c:44:
         c6:1c:ca:14:ed:71:5d:63:a2:3d:4d:52:6c:a5:b6:5f:d3:83:
         72:61:c7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:15:04 2025 by rpki-client