This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft
File:                     fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft (raw, json)
Hash identifier:          iXN6zuHUIp2bVYbmk+DiPu7wxO95lTw1iyocX9JQ0ks=
Subject key identifier:   53:BD:AE:DC:CF:49:9D:D2:22:6E:30:CC:B1:0C:F8:D8:07:FC:04:50
Authority key identifier: 7D:DA:6B:F2:C7:F5:29:6C:AB:B0:B7:4D:DD:21:7B:55:B2:BA:71:67
Certificate issuer:       /CN=A919C7D0/serialNumber=7DDA6BF2C7F5296CABB0B74DDD217B55B2BA7167
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdpr8sf1KWyrsLdN3SF7VbK6cWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft
Manifest number:          0E
Signing time:             Fri 05 Dec 2025 05:46:21 +0000
Manifest this update:     Fri 05 Dec 2025 05:46:21 +0000
Manifest next update:     Fri 12 Dec 2025 05:46:21 +0000
Files and hashes:         1: fdpr8sf1KWyrsLdN3SF7VbK6cWc.crl (hash: jM+5KKYTUreMsp3MvO7XWOR+Kjh+lfWEQS6jPdzLoR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.crl
                          rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdpr8sf1KWyrsLdN3SF7VbK6cWc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7D0, serialNumber=7DDA6BF2C7F5296CABB0B74DDD217B55B2BA7167
        Validity
            Not Before: Dec  5 05:46:21 2025 GMT
            Not After : Dec 12 05:46:21 2025 GMT
        Subject: CN=693271ad-ccf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:4f:ef:97:17:aa:ac:d2:c2:0e:73:25:65:
                    eb:5c:be:be:a0:4a:48:60:ab:3d:6b:db:24:7a:1e:
                    1b:a5:2b:a8:e8:1d:61:66:b1:e8:93:d6:1a:8c:61:
                    e6:91:0e:e2:52:05:82:c6:73:8f:e8:bf:e4:97:58:
                    96:db:2d:48:d2:b6:e7:95:47:63:ef:a8:8a:4f:05:
                    31:cf:1c:2b:48:bd:30:0e:3d:a6:08:4a:41:1f:38:
                    37:02:19:79:f1:96:d7:8b:94:bd:7a:1d:19:5e:0e:
                    91:4f:c9:bf:ac:17:d7:82:72:06:6c:37:57:fb:6e:
                    57:78:4d:79:ce:ee:9a:06:78:5c:8c:2f:fd:13:2f:
                    93:42:42:58:28:8e:16:09:bb:e7:da:26:8b:95:55:
                    c2:11:cd:e4:0c:38:ca:a7:6b:1b:62:09:3b:ac:29:
                    7e:e7:08:22:85:ee:cb:ee:15:ce:3b:98:a9:5e:d6:
                    9d:20:14:c8:11:3d:0b:e1:3b:34:ef:ba:e2:76:f5:
                    21:71:40:90:5d:47:70:53:a3:61:21:1f:35:32:da:
                    21:a5:95:34:00:c9:82:18:05:8c:5a:09:18:42:9e:
                    0c:8d:b2:f1:19:6f:7a:bd:f9:9d:de:f5:69:e7:c2:
                    28:25:e9:92:ca:ac:04:8f:ad:5d:f7:c9:d8:ce:8a:
                    0e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BD:AE:DC:CF:49:9D:D2:22:6E:30:CC:B1:0C:F8:D8:07:FC:04:50
            X509v3 Authority Key Identifier:
                keyid:7D:DA:6B:F2:C7:F5:29:6C:AB:B0:B7:4D:DD:21:7B:55:B2:BA:71:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdpr8sf1KWyrsLdN3SF7VbK6cWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:84:dd:05:d6:1a:9e:7e:58:4f:27:2e:23:be:e0:6a:3d:cb:
         2a:cb:28:ec:d8:9e:a8:b0:98:9b:75:0a:e0:19:b3:ac:ac:ca:
         04:7f:1a:c2:fe:c2:d4:6f:b7:f5:76:62:76:e4:d1:4f:0f:d4:
         4c:b7:07:c2:1f:32:4c:fe:29:d4:7b:b8:b5:ac:7d:eb:82:4f:
         6e:f8:16:bb:b2:8f:3f:f8:9d:96:9e:af:8d:e7:ab:6c:8c:35:
         ed:17:c4:52:29:c7:68:22:f2:8c:36:46:79:36:6b:03:50:f9:
         80:fc:b9:d8:d4:ef:36:2e:20:a8:72:cd:ee:1c:51:36:b3:81:
         50:11:7b:3e:97:09:22:ec:8e:1e:b9:c3:fd:1c:c8:e8:13:3d:
         0f:b1:35:8a:df:4c:cc:dc:6a:69:fb:f3:9b:63:02:f5:72:24:
         71:70:8e:93:12:a7:59:c2:7b:3a:ab:c7:44:45:fc:1a:2a:0d:
         dc:be:12:5e:82:b8:f4:61:30:1f:6f:68:97:f6:eb:41:f5:fc:
         0f:92:aa:15:de:1f:43:3b:8e:b2:f2:a7:fd:77:0e:a2:54:a0:
         c9:34:fa:8e:5b:51:f6:57:04:5c:1c:f6:33:2d:80:ad:be:e2:
         0c:94:60:ba:e3:f8:bc:cd:b6:b0:a4:a3:7c:ae:3e:6c:2f:e3:
         42:d0:85:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:45:20 2025 by rpki-client