This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
File:                     FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json)
Hash identifier:          /17ItDNO2/EBRjLJZ47/vb6le/xiIQnyodwjks+4SU4=
Subject key identifier:   3F:A6:40:87:D5:8F:90:6C:8A:77:5B:06:86:B3:E5:34:8C:38:22:34
Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
Certificate issuer:       /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
Manifest number:          75
Signing time:             Fri 05 Dec 2025 04:44:18 +0000
Manifest this update:     Fri 05 Dec 2025 04:44:18 +0000
Manifest next update:     Fri 12 Dec 2025 04:44:18 +0000
Files and hashes:         1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: fToPZl03bUoZvlxS7NJTucRdzGRCFlL+ggHKPx8C+3c=)
                          2: AF69D6BA4C0311F08D3CD93AC4F9AE02.roa (hash: rcGL+ObZ3SX0Z7dA7NG3vylGQnp7zRpBYV2OeNWL8lQ=)
                          3: BA5D351C4C0311F0ABCEF33AC4F9AE02.roa (hash: Kcq7bCUGmI5Bp+s4yhX/8VE1f6QaguT6MUZ8dIkMVNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
                          rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
        Validity
            Not Before: Dec  5 04:44:18 2025 GMT
            Not After : Dec 12 04:44:18 2025 GMT
        Subject: CN=69326322-b3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:d2:fc:60:81:ec:33:69:24:6d:c7:3a:51:
                    b4:f1:5b:e9:fa:ea:c0:20:24:42:88:3b:56:d4:ae:
                    bf:9f:71:c1:34:6d:52:87:c1:18:0a:c0:65:3f:6d:
                    87:6f:7d:d5:25:92:ec:d9:7c:38:0b:47:5b:61:3f:
                    fd:ad:27:b5:53:cf:4e:25:d2:a4:6e:86:eb:47:9e:
                    ac:e8:7d:7e:07:02:b8:3c:bb:3d:8c:b5:53:be:4c:
                    58:30:4c:7b:26:41:d8:c7:f1:89:c3:63:40:f8:36:
                    b7:d5:84:71:c2:fb:13:7a:65:41:e5:d5:67:db:9a:
                    02:53:0e:42:88:9e:0d:eb:0d:d6:ad:d1:5e:c0:22:
                    0e:42:18:a5:ee:42:49:3c:ab:d0:fb:96:0a:8f:0d:
                    bd:4a:f5:76:11:55:e6:e2:4e:2c:85:5e:5b:32:aa:
                    e8:d0:68:a7:a8:90:50:9a:cb:92:76:cc:8b:c7:38:
                    24:f6:d0:1e:ec:6c:fe:21:c3:77:97:24:81:c1:1c:
                    ac:4a:c9:5e:4c:24:82:15:18:6c:1a:ad:40:02:31:
                    6b:8f:a0:9e:e9:c5:37:ec:03:d1:a4:e5:d3:6b:84:
                    27:fb:84:78:29:1c:cf:59:fe:9b:de:e2:1d:46:21:
                    40:44:57:4f:53:4b:ba:2a:b4:60:82:7d:35:99:96:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A6:40:87:D5:8F:90:6C:8A:77:5B:06:86:B3:E5:34:8C:38:22:34
            X509v3 Authority Key Identifier:
                keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c0:55:1a:b0:4e:93:2c:75:a7:8d:36:9d:51:fe:2c:37:bb:
         09:21:fc:dd:95:d9:7e:6f:a1:a9:f1:c6:f5:9c:96:61:aa:b7:
         13:d2:38:31:3d:da:82:e5:62:63:87:15:59:64:ba:00:64:e0:
         7b:e6:15:b1:4c:f0:a9:b7:2b:50:a8:53:21:32:eb:80:ef:5c:
         8e:dc:ca:ee:c4:81:1c:8f:e6:5c:6e:1f:c0:86:92:74:85:15:
         2c:50:8e:61:9e:f6:c9:95:d3:a9:c6:02:29:52:ca:17:c6:4a:
         aa:fc:97:83:ff:d6:02:e1:6c:a7:e6:1e:da:15:45:55:99:7d:
         0c:84:a4:ec:54:3a:92:38:6a:d7:44:c9:c8:a9:01:0d:9f:e2:
         37:de:6e:65:51:79:e0:f6:6d:54:3b:59:75:6c:d9:db:ff:fd:
         a0:83:ae:da:d1:c9:b6:9d:8c:1b:f4:b3:4c:db:e9:6f:24:5c:
         9e:5d:c7:9a:26:9b:c9:d2:10:3c:d5:b4:3c:48:54:90:0a:75:
         58:19:12:db:c6:e6:e7:35:50:1a:32:b7:8c:40:5c:fa:4f:79:
         61:2d:eb:ac:ad:1f:81:07:bf:3c:5e:11:e0:92:47:74:47:40:
         af:e8:33:3d:d3:c8:dd:33:29:6f:2f:51:03:50:33:fb:f7:6b:
         a0:d4:42:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:21 2025 by rpki-client