This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
File:                     FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json)
Hash identifier:          cdbZDHbypiXkuVQMyNzIaVNSQzVcsFVzqufTMEkrCA4=
Subject key identifier:   8C:C7:57:28:0C:B5:C8:19:4D:3E:2E:CC:E7:74:EF:95:CC:8D:2F:F0
Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
Certificate issuer:       /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
Certificate serial:       04B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
Manifest number:          0486
Signing time:             Thu 04 Dec 2025 22:43:14 +0000
Manifest this update:     Thu 04 Dec 2025 22:43:14 +0000
Manifest next update:     Thu 11 Dec 2025 22:43:14 +0000
Files and hashes:         1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: /jmfiqFW34ZKULqqhTdk6H6rWU/1m7P2/LeIg5crGiA=)
                          2: F29967B22B0011F0B0319E61C4F9AE02.roa (hash: AWipWCwfBJg9FTHPHDUNW5DfQTImAx6KbbjHRDTBNc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl
                          rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1203 (0x4b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
        Validity
            Not Before: Dec  4 22:43:14 2025 GMT
            Not After : Dec 11 22:43:14 2025 GMT
        Subject: CN=69320e82-9d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:1e:6e:9b:17:2d:ba:2a:47:e0:56:ad:89:
                    38:b2:2c:30:d3:32:76:80:b1:80:6a:7b:52:19:46:
                    a5:be:00:8a:e7:5b:53:fd:21:a4:75:6c:de:1e:1b:
                    b4:57:d5:88:5a:86:88:ec:6f:0f:03:bb:2b:aa:66:
                    61:be:62:7a:f9:92:c4:50:4e:5f:9d:63:89:df:e5:
                    a5:63:f7:21:94:26:96:82:e0:ad:35:b8:df:a1:ba:
                    bc:23:34:f0:9c:2b:b9:2c:f2:b2:90:0b:94:c8:e5:
                    b3:59:7e:16:03:bc:3e:16:c2:84:22:26:5d:a3:7b:
                    14:35:38:6c:cf:83:8d:bf:c6:a8:64:c8:00:d8:1a:
                    05:5c:34:22:5f:76:61:25:fe:a2:21:5e:1f:c3:70:
                    7c:58:17:2b:39:2e:2b:14:4e:07:b3:52:0d:63:60:
                    64:91:48:49:c2:dc:8a:8c:13:ad:f8:f4:fc:d9:93:
                    7f:71:18:a8:32:07:f3:4c:8e:a4:47:dc:a4:9d:2b:
                    50:36:e0:71:0d:68:81:9f:fc:c9:47:46:35:14:98:
                    ef:d7:95:09:27:03:c5:01:88:3d:13:c1:9b:d8:f7:
                    16:a2:f7:c5:2a:ca:6c:83:38:43:21:87:01:77:30:
                    cd:73:40:32:4d:77:24:8a:9f:0c:36:e0:ff:8c:b4:
                    7e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C7:57:28:0C:B5:C8:19:4D:3E:2E:CC:E7:74:EF:95:CC:8D:2F:F0
            X509v3 Authority Key Identifier:
                keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:73:a2:91:68:ef:1f:88:3c:68:c6:7d:b2:b5:15:45:93:af:
         38:ec:e0:98:9c:46:a1:9b:aa:ad:37:23:35:eb:cf:c6:e5:81:
         c3:d0:92:05:de:6c:93:28:aa:94:b2:11:0e:e5:8e:c7:d0:dc:
         89:04:9d:20:25:5b:77:18:04:93:90:cc:27:3d:76:51:80:88:
         0a:3a:be:51:04:4d:eb:fa:3d:8a:0d:9b:16:d4:35:18:97:88:
         c4:c9:60:de:21:ea:05:40:78:97:49:4d:dd:e2:4a:c1:dd:4c:
         c2:26:22:74:74:95:d1:27:8e:a5:be:5e:db:ae:dd:3a:e5:8b:
         bb:a2:cd:7e:2e:42:69:08:99:ad:9c:67:70:d5:ea:54:7f:13:
         e4:73:45:c9:9d:a7:bb:af:f9:d0:a3:9f:96:34:c9:f7:4c:12:
         92:a8:a3:de:d4:4c:2d:21:4a:aa:9f:4e:d6:7e:66:34:b0:97:
         72:ad:e6:33:71:01:b6:95:cd:0a:70:b7:e0:94:3b:21:27:fa:
         d3:48:6b:25:2d:a5:f3:4e:8a:7e:12:a5:be:d1:64:2c:da:bd:
         47:bf:c5:ee:f6:3f:58:c1:34:60:d2:b1:08:ba:0f:c2:06:51:
         75:f1:3f:de:f5:75:53:97:21:3d:1f:62:27:dc:b6:17:cf:c9:
         1c:2d:f7:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0RTQ3QzUxMzA2
M0Q5MkNFQzIwHhcNMjUxMjA0MjI0MzE0WhcNMjUxMjExMjI0MzE0WjAYMRYwFAYD
VQQDEw02OTMyMGU4Mi05ZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsvsebpsXLboqR+BWrYk4siww0zJ2gLGAantSGUalvgCK51tT/SGkdWzeHhu0
V9WIWoaI7G8PA7srqmZhvmJ6+ZLEUE5fnWOJ3+WlY/chlCaWguCtNbjfobq8IzTw
nCu5LPKykAuUyOWzWX4WA7w+FsKEIiZdo3sUNThsz4ONv8aoZMgA2BoFXDQiX3Zh
Jf6iIV4fw3B8WBcrOS4rFE4Hs1INY2BkkUhJwtyKjBOt+PT82ZN/cRioMgfzTI6k
R9yknStQNuBxDWiBn/zJR0Y1FJjv15UJJwPFAYg9E8Gb2PcWovfFKspsgzhDIYcB
dzDNc0AyTXckip8MNuD/jLR+8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzHVygM
tcgZTT4uzOd075XMjS/wMB8GA1UdIwQYMBaAFBcASqMxBbCg5tPrTkfFEwY9ks7C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDRBNi82QTU5NjlBODdF
OTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNLRG0wLXRPUjhVVEJqMlN6
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z3QktvekVGc0tEbTAtdE9SOFVUQmoyU3pzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNL
RG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChc6KRaO8fiDxoxn2ytRVFk6847OCYnEahm6qtNyM168/G5YHD0JIF
3myTKKqUshEO5Y7H0NyJBJ0gJVt3GASTkMwnPXZRgIgKOr5RBE3r+j2KDZsW1DUY
l4jEyWDeIeoFQHiXSU3d4krB3UzCJiJ0dJXRJ46lvl7brt065Yu7os1+LkJpCJmt
nGdw1epUfxPkc0XJnae7r/nQo5+WNMn3TBKSqKPe1EwtIUqqn07WfmY0sJdyreYz
cQG2lc0KcLfglDshJ/rTSGslLaXzTop+EqW+0WQs2r1Hv8Xu9j9YwTRg0rEIug/C
BlF18T/e9XVTlyE9H2In3LYXz8kcLfdY
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:01:35 2025 by rpki-client