This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
File:                     fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json)
Hash identifier:          ztnN7M36XskvgSRYX/gn7knWlE3G9uK9BT8YccjR+cI=
Subject key identifier:   FC:D2:2D:0B:9A:CD:4E:26:43:5D:B9:A0:F4:17:C7:6E:CD:83:63:26
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Certificate issuer:       /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial:       0208
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
Manifest number:          0204
Signing time:             Fri 05 Dec 2025 00:41:22 +0000
Manifest this update:     Fri 05 Dec 2025 00:41:22 +0000
Manifest next update:     Fri 12 Dec 2025 00:41:22 +0000
Files and hashes:         1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: zOaBsDJI8KRZlP9NwEk91KkRUWnny+1bQAu264qylpg=)
                          2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
                          rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
        Validity
            Not Before: Dec  5 00:41:22 2025 GMT
            Not After : Dec 12 00:41:22 2025 GMT
        Subject: CN=69322a32-d5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:c4:16:fc:9f:73:ac:0e:f0:a7:79:98:62:
                    79:32:5c:2c:b7:ab:3e:b1:6a:a4:aa:f0:09:c6:0f:
                    63:cf:a5:ea:1c:c7:84:7c:25:4e:0a:09:6e:9f:a3:
                    39:3d:38:22:fe:25:ee:3c:61:2f:f2:a9:b2:16:29:
                    8a:c1:cf:18:98:3d:52:f1:5b:57:06:a1:1c:46:2e:
                    22:db:d8:46:ef:c1:1c:f6:96:5f:02:ef:cc:2c:7f:
                    12:65:97:e2:c7:c3:29:3e:32:fc:72:78:37:71:38:
                    53:07:88:20:c2:24:6b:e5:be:0d:2c:57:8e:71:e1:
                    ff:85:65:0c:42:9f:94:5f:4a:fc:49:91:21:29:a4:
                    1c:54:11:01:35:5a:e3:f4:fe:0a:4e:7a:c8:0a:62:
                    ca:83:a5:ca:27:00:40:6c:9d:e5:b0:e9:05:e7:9e:
                    38:c5:49:57:9f:db:4b:09:84:8f:54:86:13:79:c2:
                    b1:78:0f:97:28:fd:cb:f6:84:82:f0:7c:e8:9d:9d:
                    e4:ea:c5:80:27:ef:d4:94:e7:cd:f3:41:62:f8:d1:
                    09:ac:d1:1d:b2:01:b0:b6:84:6f:2c:8c:f2:11:73:
                    9e:c5:0a:2c:60:ce:a2:ee:e0:d7:4c:4c:de:fe:06:
                    20:8c:13:06:e7:e9:45:e9:e4:cd:2d:5b:f8:f5:6f:
                    9c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D2:2D:0B:9A:CD:4E:26:43:5D:B9:A0:F4:17:C7:6E:CD:83:63:26
            X509v3 Authority Key Identifier:
                keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:99:3f:34:71:fe:d4:ce:f7:b6:6f:e5:c2:83:44:2e:f1:7d:
         d2:f6:55:b4:79:da:52:96:25:f5:6a:27:47:8d:d4:01:7c:88:
         ac:d1:b9:16:42:65:37:2c:5f:75:ae:21:91:44:48:33:83:96:
         65:fa:e2:33:a0:ee:97:80:aa:cf:e7:11:5e:1d:08:20:f1:64:
         bc:52:82:77:57:7f:18:48:fc:13:a3:e8:01:48:15:25:8c:69:
         1d:45:fb:c9:e1:31:66:f1:6d:9b:04:b9:78:50:80:d2:3d:f7:
         86:1d:d2:c6:32:50:e4:51:81:05:5a:61:8e:e8:ab:74:f5:af:
         0e:5b:97:3e:64:b5:0e:ca:4b:e2:99:64:7d:70:88:bb:97:44:
         62:1b:88:b9:06:21:82:8a:0a:e8:85:e2:44:b9:ff:4a:35:4c:
         e0:6e:e9:e2:d7:d6:cf:99:92:60:fa:0b:b9:6e:44:8b:e9:72:
         42:92:26:14:ef:dc:5a:e3:8d:14:ad:7b:dc:34:5b:c4:25:8c:
         8c:50:38:8a:f6:7b:cf:4e:dd:c1:9a:78:07:da:9b:f4:4b:15:
         7e:7e:e3:68:d0:7a:41:e6:b1:28:7d:c7:e7:7b:9e:fe:f3:5f:
         50:87:0c:50:d2:98:29:dd:21:8b:f0:5b:c4:9a:bb:aa:0b:e5:
         14:b6:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:16:38 2025 by rpki-client