This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File:                     fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier:          02xnAhbENIwMnPtkkfh745ytD6ClfBJvGytj1A0OHyo=
Subject key identifier:   77:FD:84:B8:F1:AC:19:FD:6A:9D:A5:39:F5:83:C6:88:BD:8E:4A:AA
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       091E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number:          08B9
Signing time:             Thu 04 Dec 2025 19:48:51 +0000
Manifest this update:     Thu 04 Dec 2025 19:48:51 +0000
Manifest next update:     Thu 11 Dec 2025 19:48:51 +0000
Files and hashes:         1: fiRDENekVusSe5JsQvJteems24g.crl (hash: XOWmshKl9U4Z49ZHh4hyxJu8OjKl62kXCRQVykOHqYQ=)
                          2: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: NudhcCG6U8c/iVjiv9Q5GA7zP2bSr5Lt2Lyl6qOq+zo=)
                          3: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: ygq1dkv+uF4QDS+bggz98LoWciehSBzYRj/fw8Od03I=)
                          4: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: UwbxqlIoeWN/uj0INOlxAStWat7EJVu9aWA6OuSDC9Q=)
                          5: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: vWyefttpePLkPBEoycC5X0lmEGRfAIuwi2Ngs4ojIYc=)
                          6: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: mA/WE2Bh4RmqFgp1Gp11Wu83VKDJFyoxbw2SeY/E7bk=)
                          7: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: /yoDz91aVKDMVKQFN5vWqL0kcfwjMSXqa0ohs5b1IqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2334 (0x91e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Dec  4 19:48:51 2025 GMT
            Not After : Dec 11 19:48:51 2025 GMT
        Subject: CN=6931e5a3-3509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:37:23:5a:9b:ba:f7:83:79:23:e3:34:2e:
                    24:1c:3f:e7:31:c4:e6:2f:1a:70:9c:8d:8e:a8:16:
                    af:b4:9e:00:83:bb:41:e8:95:44:11:1b:d2:f3:de:
                    2a:13:e1:a1:33:d2:2d:a5:b9:00:e5:2f:5a:cc:60:
                    19:41:1b:32:8b:c1:c6:2d:51:b2:de:1d:c0:bf:3a:
                    b9:ff:7c:af:9f:e2:0a:2b:47:70:e9:6f:9b:33:01:
                    14:50:24:09:09:56:79:82:cd:03:27:ee:e6:a9:42:
                    68:62:dd:ce:be:74:76:0c:a9:84:0f:c2:bf:f6:3c:
                    5a:d1:3d:c2:46:0f:e2:29:b2:50:fa:af:0e:de:28:
                    e8:ab:b5:78:c6:71:3f:ae:90:c0:44:fd:71:b8:d7:
                    e5:f9:00:52:c2:8f:09:09:55:a7:88:2f:f9:2c:98:
                    27:6c:6e:0b:d1:26:86:74:5b:51:ba:56:89:48:2c:
                    c3:21:62:9e:52:fc:eb:eb:e2:bc:1b:4a:40:a1:b1:
                    1c:0c:53:1f:f6:97:27:5f:a9:7f:4d:49:6a:d0:23:
                    ff:1a:28:1d:12:82:1b:fe:e9:61:d5:7a:6b:ed:26:
                    b5:41:98:a2:9d:85:5b:d7:1d:6d:0d:4e:2c:d6:18:
                    b2:f3:52:18:20:86:e7:e7:7a:37:ff:8c:49:59:6c:
                    28:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FD:84:B8:F1:AC:19:FD:6A:9D:A5:39:F5:83:C6:88:BD:8E:4A:AA
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:bb:26:a9:98:96:28:48:29:88:2f:44:56:97:61:e2:63:f2:
         16:f8:3a:5a:8f:d8:0c:d6:33:9f:4a:53:14:6a:f6:97:ea:32:
         28:a2:f6:d8:ed:45:62:71:45:27:98:42:d7:53:1b:bd:00:08:
         24:32:cf:68:fa:25:4c:70:62:17:33:5a:bb:5e:fe:a5:aa:b7:
         38:f2:e8:b9:d9:cf:cd:e1:d8:13:89:24:1b:82:76:98:a3:b0:
         35:54:82:bd:bd:d9:38:84:95:29:7e:b8:13:84:e4:3c:b7:58:
         4b:56:f3:71:17:99:84:f4:d3:5e:ba:ab:5e:93:84:19:6c:47:
         f1:46:08:7a:9f:72:33:fe:a6:84:4f:c2:08:82:0c:0c:9d:4d:
         bd:6f:7c:d6:88:6a:a5:f0:e8:b7:ba:e9:a5:8d:fb:7b:4f:ea:
         b3:27:a9:ca:39:b5:47:51:05:2d:91:54:ad:10:88:b7:00:94:
         e9:3d:59:ce:13:79:b4:6b:ac:4a:db:c8:80:ed:7a:7f:d7:a3:
         0d:8b:1b:b0:84:07:53:7d:33:ed:6d:a7:22:aa:bf:dd:cf:7c:
         c4:aa:e8:ae:e0:2a:eb:b5:c9:32:ed:72:be:ce:a4:50:c5:e3:
         7f:27:7a:57:1a:2d:5d:41:ab:c7:42:a9:88:8c:68:7b:48:d7:
         b4:05:a0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:11:06 2025 by rpki-client