This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
File:                     fuv673m_iD6_Bwd6m_QQ6jHv98o.mft (raw, json)
Hash identifier:          J+P6Z8ik3eItehIZ1zkrI28Log8TypfVSNAPWsGVg74=
Subject key identifier:   33:FC:89:93:9A:83:AF:BC:90:E7:1B:F5:C4:85:9C:45:85:E3:82:86
Authority key identifier: 7E:EB:FA:EF:79:BF:88:3E:BF:07:07:7A:9B:F4:10:EA:31:EF:F7:CA
Certificate issuer:       /CN=A91BA0DE/serialNumber=7EEBFAEF79BF883EBF07077A9BF410EA31EFF7CA
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
Manifest number:          01A9
Signing time:             Fri 05 Dec 2025 01:29:13 +0000
Manifest this update:     Fri 05 Dec 2025 01:29:12 +0000
Manifest next update:     Fri 12 Dec 2025 01:29:12 +0000
Files and hashes:         1: fuv673m_iD6_Bwd6m_QQ6jHv98o.crl (hash: iPrWxzlz8bnqG7p6l0RzRSDwTUUSuPqMPtlSeZe15fo=)
                          2: 049C5BF84ACB11EE9CB50538C4F9AE02.roa (hash: yL6ZRwTXhyUQOCbmgwdpXW/cxXexzW0IC+NCYSMtGY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0DE, serialNumber=7EEBFAEF79BF883EBF07077A9BF410EA31EFF7CA
        Validity
            Not Before: Dec  5 01:29:12 2025 GMT
            Not After : Dec 12 01:29:12 2025 GMT
        Subject: CN=69323569-e654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:3f:ea:4b:0e:8e:13:58:c6:07:12:a1:ae:
                    2c:cf:7d:ce:fd:60:da:34:f5:a4:39:ef:d7:c2:d5:
                    8d:8a:be:5c:42:de:41:63:70:f6:73:8c:61:fc:65:
                    6d:3e:80:c5:f7:4e:f0:5e:d7:83:25:dd:33:4c:fd:
                    ce:28:6c:37:86:16:fb:7e:98:e4:35:3a:23:f5:3f:
                    9f:65:86:55:6c:39:a3:97:a2:37:b9:72:e7:df:ca:
                    7e:4b:9a:55:e3:0e:71:fb:0f:26:c6:bb:34:12:61:
                    8b:69:71:8b:91:15:a4:96:c1:ae:de:85:fd:9b:b8:
                    d1:9c:ac:2e:c5:c8:0a:a4:40:94:6f:35:76:c0:0b:
                    4f:f8:d4:32:ac:3c:9e:7c:8d:bc:12:02:0f:fe:f6:
                    59:63:27:56:2d:57:04:1b:42:c0:a5:c5:14:fc:8b:
                    c6:71:bd:5a:ac:90:cb:9c:4f:47:51:45:46:69:2a:
                    19:f2:39:4c:18:15:cc:45:dd:66:26:fc:86:96:7a:
                    66:d0:a0:86:57:39:73:6a:9e:99:01:30:6a:99:bf:
                    58:fe:10:dd:09:d0:b9:70:b3:5e:0c:b6:6c:8f:30:
                    fb:d0:82:59:62:2a:36:dc:f6:ad:df:a3:d6:db:85:
                    78:6f:f1:20:ef:e2:11:9d:b7:09:cf:d3:d7:56:b0:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FC:89:93:9A:83:AF:BC:90:E7:1B:F5:C4:85:9C:45:85:E3:82:86
            X509v3 Authority Key Identifier:
                keyid:7E:EB:FA:EF:79:BF:88:3E:BF:07:07:7A:9B:F4:10:EA:31:EF:F7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:34:7e:5c:34:83:69:0e:d7:78:fd:cd:a0:65:c1:3a:fa:3f:
         39:54:ae:19:2a:0b:33:b5:d0:7e:40:16:bc:f0:8f:e9:f0:eb:
         ea:bb:5f:f3:4b:b6:70:02:7c:57:01:db:b9:b9:8e:23:22:e1:
         62:f5:b4:8e:63:2f:f1:ef:fa:17:bb:52:fe:21:dd:8c:a5:36:
         ad:36:6a:72:b2:49:5b:c1:7d:4e:67:8e:7e:95:ca:e8:43:e5:
         89:de:83:a0:db:02:bc:85:51:f1:85:cb:6e:4d:c4:6a:ee:d7:
         ed:71:81:23:55:4b:66:3e:e1:12:dc:3b:b7:5f:29:44:c7:85:
         be:c3:7f:5e:df:81:c8:d0:43:b3:45:6a:e6:bf:1b:ca:8b:9c:
         e1:14:72:a3:29:89:d1:70:27:3b:22:38:7c:ba:11:db:c2:62:
         57:47:0d:25:ab:06:d0:5b:95:d4:a1:27:72:01:4e:d6:83:22:
         a8:5a:61:c3:fb:bb:ce:38:cf:29:e3:b7:3f:87:0f:8d:7a:a7:
         ab:98:10:5a:db:e4:84:27:50:03:3d:af:ba:0e:42:01:11:0c:
         9f:98:72:57:50:a0:4c:fc:bf:d5:e4:73:e4:25:49:5d:09:69:
         8a:03:67:32:06:67:46:2e:34:fe:7e:b1:66:d2:79:b7:0b:26:
         34:5e:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:21:27 2025 by rpki-client