This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
File:                     fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json)
Hash identifier:          atlsperKPuHxcdemfit3a+WpTVamLPoMEnFNiFbZeKU=
Subject key identifier:   12:FB:B2:72:72:E9:ED:D7:7B:66:F6:6D:A6:6B:7B:3B:A5:51:A8:AB
Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85
Certificate issuer:       /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
Certificate serial:       23D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
Manifest number:          23B0
Signing time:             Sat 06 Dec 2025 15:33:59 +0000
Manifest this update:     Sat 06 Dec 2025 15:33:58 +0000
Manifest next update:     Sat 13 Dec 2025 15:33:58 +0000
Files and hashes:         1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: 1pb16s1qLsCkHbuA9BaYVl12hyYwUBJuSyHZWFd9DHM=)
                          2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: Wjv2UQZSDwfC4dKbLhWY3Zl91JlEtTynpiuYv/JnZQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl
                          rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9170 (0x23d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
        Validity
            Not Before: Dec  6 15:33:58 2025 GMT
            Not After : Dec 13 15:33:58 2025 GMT
        Subject: CN=69344ce6-f25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:99:d3:57:1a:3b:c0:f3:df:85:08:54:9e:76:
                    a4:27:08:fb:f0:52:f9:d4:97:e9:c2:8d:3c:bd:76:
                    4f:40:ea:42:72:e2:d0:64:06:50:75:7a:1f:f0:da:
                    f0:76:50:80:f4:77:8e:b7:de:ad:16:1f:fc:5a:85:
                    47:6b:5a:9d:50:08:da:c9:fd:46:99:ee:a1:15:10:
                    0b:4d:7e:1a:59:5c:d6:e2:82:af:c4:2f:23:2c:92:
                    ed:35:45:2e:fa:79:6f:f7:3c:ba:be:e4:ed:08:7e:
                    d4:12:0e:13:71:f7:72:60:eb:63:06:d3:80:1c:8a:
                    38:a6:44:f7:8f:a7:9e:81:98:5f:8d:0a:9f:cf:9e:
                    b8:39:ba:f3:09:02:9e:ab:81:07:0d:ba:08:a8:33:
                    7a:1f:19:e1:c6:54:7d:5b:36:76:85:f8:41:9e:d3:
                    54:5b:d5:13:09:49:d1:78:c0:55:fb:5a:8b:fe:c6:
                    7d:a5:f5:6b:46:44:3c:42:45:79:2e:72:9c:95:75:
                    3e:07:5a:53:62:32:e4:c2:89:f5:23:5a:ee:ea:6c:
                    3a:60:99:b2:5d:94:85:06:a5:31:a6:d3:7b:91:c6:
                    ec:e2:0e:dd:a3:70:e1:56:66:4e:88:2d:45:ea:b9:
                    c3:eb:3c:2f:13:23:de:3b:a4:95:0d:96:f0:0e:13:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FB:B2:72:72:E9:ED:D7:7B:66:F6:6D:A6:6B:7B:3B:A5:51:A8:AB
            X509v3 Authority Key Identifier:
                keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ec:68:fd:06:eb:dc:a7:44:3a:70:9e:b1:0c:7a:ab:cf:e9:
         af:9e:9c:48:59:4b:79:c2:cf:04:1b:77:f9:b7:55:f1:6b:52:
         80:74:97:7b:c3:2f:3e:dd:dd:83:91:a5:c1:2e:74:78:df:f7:
         e6:be:fe:52:0e:bd:7d:d6:5b:a9:ab:84:82:7d:ff:60:5f:f1:
         58:11:e3:1a:98:fe:cf:fb:2a:fb:be:87:ce:28:ad:25:8e:30:
         e6:b8:69:34:a3:cd:f1:f9:aa:66:a5:18:7c:b3:fa:ff:9b:83:
         6c:5c:c8:99:dd:58:01:eb:ef:04:88:2c:0e:b0:10:4d:81:9c:
         b4:b8:bc:9e:5d:da:ba:4a:27:9d:48:ca:e6:69:9c:b7:9d:72:
         d0:82:0e:c8:56:74:f9:ee:cf:56:c8:44:41:54:18:82:9d:58:
         3f:cc:a6:e1:36:0c:d7:fe:9b:e7:4a:2e:55:48:ca:73:83:91:
         cd:dd:21:ae:b4:ff:dd:80:78:38:42:33:6a:52:c4:2c:36:d2:
         01:a8:01:70:01:41:98:e0:e4:a5:bf:9a:29:61:b0:e0:41:b5:
         2d:00:ea:6f:52:d6:4c:c3:fa:4d:51:f7:57:00:26:2e:fe:ea:
         c5:56:ed:3c:9e:85:aa:b9:0e:3d:18:e4:73:ba:0f:0a:ac:90:
         49:ce:76:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:26 2025 by rpki-client