This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
File:                     FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json)
Hash identifier:          pNLZpB7OjYMAAq5Ma06JD6+kbuZbMBipe5LZuyiNkGk=
Subject key identifier:   A6:FE:4D:DC:6A:7F:21:46:7B:BC:80:9B:1A:40:C5:F5:D0:67:22:69
Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E
Certificate issuer:       /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
Manifest number:          015E
Signing time:             Fri 05 Dec 2025 02:14:42 +0000
Manifest this update:     Fri 05 Dec 2025 02:14:41 +0000
Manifest next update:     Fri 12 Dec 2025 02:14:41 +0000
Files and hashes:         1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: PIktBshAjdlq8MHAUGPDnVv9tne8kTZNCDow5tMAJzE=)
                          2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: dUufcGrEf1g89p6hQjifaNkQf1XSBUMLG147+uIrEko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
        Validity
            Not Before: Dec  5 02:14:41 2025 GMT
            Not After : Dec 12 02:14:41 2025 GMT
        Subject: CN=69324012-c71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:9e:da:33:15:ad:54:e5:cf:9c:14:71:19:
                    36:5c:7b:dd:c2:54:44:07:76:4f:69:09:04:26:5d:
                    c7:69:ed:3b:ad:e5:71:93:5f:5c:41:ce:eb:49:74:
                    df:5a:f7:d6:72:56:f3:cc:5a:f5:02:ff:db:74:0b:
                    ff:33:12:05:74:44:8b:d3:32:2d:4a:fe:f1:bb:49:
                    b8:20:58:f5:be:eb:18:bf:13:9f:2c:6a:84:a1:37:
                    33:d6:b3:11:32:ad:2f:c1:55:3a:e8:96:0c:dc:f4:
                    aa:71:0c:ea:f3:a9:1e:ef:b8:62:da:6e:07:ea:84:
                    d1:04:b4:2c:b9:9c:c5:11:90:93:58:95:bf:26:36:
                    95:3a:7b:cf:32:f1:c4:81:28:2f:36:a4:d4:94:fb:
                    65:77:9e:b8:b7:21:2a:06:05:14:58:4e:f8:12:8b:
                    6b:46:37:2b:38:d2:aa:c4:ce:c4:78:41:c8:02:5d:
                    d4:c0:06:dd:35:6e:ba:7d:c8:55:d9:6f:57:b5:36:
                    64:3c:95:16:a4:f8:53:d9:b3:40:7b:e1:75:5f:14:
                    6e:65:4d:4a:d1:69:59:04:b6:a1:5e:e1:d0:11:fc:
                    16:73:b5:8e:c0:ce:13:a7:b6:63:6f:23:8e:ed:b6:
                    93:67:18:84:be:02:0a:ec:b7:f0:88:5d:b9:38:ad:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FE:4D:DC:6A:7F:21:46:7B:BC:80:9B:1A:40:C5:F5:D0:67:22:69
            X509v3 Authority Key Identifier:
                keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:fb:f7:6c:81:f5:d5:1c:58:51:80:a3:d6:97:3a:ee:6b:31:
         9d:f1:94:39:55:8d:a1:ca:cd:4b:44:08:4d:bf:90:7d:ab:4e:
         eb:d6:60:f2:2c:65:a0:4c:22:df:8e:64:02:bc:e7:d5:3b:6f:
         ac:3b:1c:72:02:d8:a3:95:59:b0:06:b0:31:c4:0c:c8:01:6b:
         f2:25:59:dd:fb:e0:8d:77:d5:95:43:59:26:69:cb:7a:51:2c:
         e2:17:6f:7d:69:2b:16:d1:7a:41:65:34:06:59:40:28:b8:b2:
         32:86:b6:25:34:90:13:6b:7d:4e:8c:12:f4:dd:2f:21:5c:c7:
         ee:d9:3c:29:05:23:df:af:4f:41:a4:b9:37:85:55:a2:36:c8:
         e2:ac:88:56:11:e7:a5:a8:5b:cf:87:93:08:9a:23:d9:d1:ef:
         3a:fe:23:24:32:f6:07:f2:2a:b3:f3:6f:f3:69:1c:21:ac:96:
         4d:d9:e9:0d:36:50:c1:32:cc:81:db:8d:ce:92:c9:6b:fb:4a:
         42:3d:63:be:9e:97:26:47:38:ca:d9:fb:d3:0d:75:6e:dc:6f:
         3f:ef:19:93:d6:6e:ff:14:45:57:6d:c6:1f:9c:ed:86:d5:93:
         55:db:f8:ce:64:97:b1:c0:5d:71:fb:b4:29:69:25:30:ab:4a:
         df:f8:ab:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:32:30 2025 by rpki-client