This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
File:                     FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json)
Hash identifier:          Ee5RWooSViEQAVPawIbevMZr1ViBTc6IwNj5GZm6m3k=
Subject key identifier:   3F:9A:DE:4A:B6:5A:66:B6:4C:1C:D1:10:A3:3C:FC:58:96:0B:1E:6D
Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
Certificate issuer:       /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
Certificate serial:       0271
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
Manifest number:          026C
Signing time:             Thu 04 Dec 2025 23:59:00 +0000
Manifest this update:     Thu 04 Dec 2025 23:58:59 +0000
Manifest next update:     Thu 11 Dec 2025 23:58:59 +0000
Files and hashes:         1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: N/wwEzWtGMgHiViGBt8BY6JiMjszWVi956rgLqkNpu4=)
                          2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: z3vMrh+MfifC7nf/d8HWXEmLlkM4nBll9m3BXQVcSyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl
                          rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
        Validity
            Not Before: Dec  4 23:58:59 2025 GMT
            Not After : Dec 11 23:58:59 2025 GMT
        Subject: CN=69322043-546f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:53:a9:e2:b3:9e:85:c8:40:cc:34:95:75:28:
                    95:c6:13:5c:db:37:42:89:2b:b2:b4:86:8a:01:ca:
                    ed:dc:5a:74:31:5f:73:7f:b0:dc:b2:29:f8:65:26:
                    a5:6f:dc:e4:65:59:a9:9c:db:db:ea:4a:d4:87:40:
                    a1:55:13:ef:ae:49:96:e2:61:f5:88:e1:dd:5b:98:
                    12:66:b7:a4:79:32:ba:d8:64:3e:ff:61:d9:8d:9e:
                    37:7b:8c:93:15:7a:7b:9b:a4:e7:04:c4:04:08:85:
                    67:ab:fe:82:31:40:30:43:84:1a:12:5f:19:e6:cb:
                    5e:31:f3:60:c7:93:58:ea:e8:b8:fd:7f:c0:71:6f:
                    b1:a0:4e:76:0f:5f:14:19:31:c6:17:39:fe:ce:e6:
                    82:2d:e1:07:8c:6e:a9:85:c9:10:a6:9e:21:b4:9b:
                    bd:37:ac:69:33:c1:46:67:32:a8:2e:b2:6e:ff:70:
                    fa:e0:70:1e:80:44:46:87:ab:ba:c3:ad:ed:8d:2e:
                    80:28:7e:84:c9:23:3a:0b:88:8e:42:b9:3c:42:25:
                    5d:60:8d:bb:cc:04:cb:bc:4d:81:b1:22:44:62:7e:
                    d0:12:50:12:bd:33:a8:12:70:e5:03:fe:8f:61:e2:
                    63:53:62:b3:71:95:c6:21:05:ce:9d:d3:03:b0:ca:
                    db:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9A:DE:4A:B6:5A:66:B6:4C:1C:D1:10:A3:3C:FC:58:96:0B:1E:6D
            X509v3 Authority Key Identifier:
                keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:02:a3:89:e5:a9:91:9c:66:8e:a9:84:3e:e1:d1:37:5f:dc:
         6a:40:aa:30:fe:ac:75:03:be:06:6b:1b:09:0f:a4:6f:e2:ff:
         74:2d:f3:d9:15:72:e2:df:40:59:97:f5:d2:df:f0:49:61:e9:
         2d:d8:c7:e3:4b:c5:48:c2:64:d4:85:f5:f0:1e:a7:d3:0e:54:
         ec:27:ab:8a:e2:56:84:94:c7:b8:e5:f1:25:89:d3:e0:1b:a5:
         d8:19:9c:e5:76:b5:16:1f:69:6c:be:2f:79:92:d9:39:24:94:
         a3:f2:32:d7:9b:a0:24:21:81:9a:b7:ec:55:15:f2:c7:a9:67:
         5a:10:ef:83:e8:b8:b4:3e:e6:17:de:ae:6a:ea:5d:17:9d:51:
         9c:44:a3:5c:d5:92:68:65:f3:3b:6f:c0:f4:9d:01:a7:0e:d6:
         eb:78:49:3a:07:2b:59:d8:31:ad:09:4c:34:51:16:74:5d:61:
         d7:36:7b:20:e5:d9:05:df:45:2d:5f:5e:37:e5:2b:c6:db:60:
         e3:56:30:c5:53:cb:8c:0e:3a:c2:7b:5e:98:fb:0a:f2:99:f6:
         d0:0a:6c:39:c2:9b:76:c3:c7:44:0c:89:63:b6:3f:9a:ec:9c:
         e0:f0:7c:4f:88:09:00:07:c8:16:f1:fd:2d:24:fa:b6:00:59:
         d6:e0:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:02:16 2025 by rpki-client