This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
File:                     cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json)
Hash identifier:          IZf3mLv8FaZR5QlTKG+1oB1xKbpWti7t2a5geKYsjOI=
Subject key identifier:   FE:5B:16:9B:4C:9A:64:D2:82:A0:BC:3C:F1:13:41:32:BC:CE:B7:D6
Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05
Certificate issuer:       /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
Certificate serial:       03FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
Manifest number:          03F2
Signing time:             Thu 04 Dec 2025 22:59:47 +0000
Manifest this update:     Thu 04 Dec 2025 22:59:46 +0000
Manifest next update:     Thu 11 Dec 2025 22:59:46 +0000
Files and hashes:         1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: FM/Gkx7fz0/OtFp+Xrkuk5T8pEVInAaahHvhy1ZH218=)
                          2: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: WktAZLAHSw7QkU+hNH84sEG4OXo+/tq5XSlAqKGLv18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
        Validity
            Not Before: Dec  4 22:59:46 2025 GMT
            Not After : Dec 11 22:59:46 2025 GMT
        Subject: CN=69321262-8b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:ca:23:71:5d:0d:92:bf:47:85:e1:be:7a:
                    05:22:66:08:6a:a1:a0:85:75:42:5e:2a:67:2d:8e:
                    54:ce:3c:cc:0f:20:ce:94:e9:98:84:57:90:73:4e:
                    93:64:68:1f:6e:0d:11:e5:56:0d:35:08:07:83:2e:
                    bf:54:33:31:a5:e6:ed:42:8a:13:70:17:55:7b:80:
                    d7:37:97:e5:6d:23:62:0e:21:a4:d8:9e:0a:7f:63:
                    ce:9d:f0:08:a6:77:72:f8:68:e3:51:dc:40:f8:8d:
                    0f:70:05:d4:12:76:f7:d9:49:c3:5f:5e:4c:18:fa:
                    c8:ee:c6:f1:c7:60:6c:0b:12:b5:21:d9:e6:d8:94:
                    fd:74:1b:4a:e0:cf:42:27:62:5f:7e:be:8b:63:6b:
                    86:98:ed:64:bf:c5:12:d6:ae:1a:47:00:95:bb:1b:
                    fb:54:a2:d4:c2:76:42:f5:cf:bb:f1:00:2e:fc:cd:
                    ce:d2:e7:0a:93:e0:ae:25:cf:d2:78:63:a0:93:54:
                    40:3a:af:46:77:e1:cb:d8:92:a9:08:15:94:1f:e8:
                    22:ea:a5:14:8f:70:9f:70:76:94:be:ab:be:aa:af:
                    95:78:37:cb:e1:fc:7a:f4:2c:39:8f:44:2c:21:c4:
                    d2:6c:93:93:84:a3:65:4d:d8:49:6f:f9:c7:5e:a5:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5B:16:9B:4C:9A:64:D2:82:A0:BC:3C:F1:13:41:32:BC:CE:B7:D6
            X509v3 Authority Key Identifier:
                keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:02:00:e4:39:79:b9:b7:43:e6:99:33:89:04:30:ba:f4:2f:
         85:d2:f4:6f:ba:31:b7:41:45:b3:e8:24:df:8a:1a:f6:e4:c2:
         28:10:aa:ae:51:ac:76:3c:1f:63:d4:6a:79:6d:2a:ca:2a:92:
         02:a1:3d:f9:c6:67:d6:8f:20:8b:d6:4b:79:05:ec:13:cf:ad:
         3b:4e:e9:3f:66:4c:7f:78:42:04:3c:0d:6c:bc:81:58:e2:70:
         87:b7:6d:a7:08:90:54:16:db:4d:1e:1c:1d:f4:7f:32:2f:81:
         6f:35:7d:eb:d1:2c:c0:b3:32:8b:e4:f4:40:f4:3e:a4:ef:ac:
         ec:cd:98:2d:de:39:c5:ed:76:57:59:15:d9:0d:17:d2:e1:c7:
         1a:ea:5b:20:6e:c8:90:83:aa:8f:83:03:16:1a:1b:b1:31:b7:
         73:6b:de:26:de:f4:ea:1e:6d:e9:73:fc:6a:ec:bd:98:e0:1e:
         dc:53:7b:33:62:d9:91:a7:5d:21:3b:f9:3f:91:20:1d:57:8e:
         48:bc:60:ad:20:29:45:f1:b3:6f:be:9c:67:6b:dc:b1:0c:c6:
         75:55:20:73:e7:be:59:73:c3:46:f9:18:9b:9c:a7:cf:76:a0:
         33:93:c3:9d:13:47:00:1d:ff:fc:ef:20:bd:ad:70:e9:43:7f:
         be:0f:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:49 2025 by rpki-client