This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
File:                     foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json)
Hash identifier:          Kz4drOvdoynhBJDWiGy3A2z2wBqnECWddKy/dcb/eSs=
Subject key identifier:   68:D8:81:3C:8B:95:01:A5:F9:35:C1:96:A0:21:52:F3:4F:08:28:DF
Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09
Certificate issuer:       /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
Certificate serial:       353E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
Manifest number:          4869
Signing time:             Sat 06 Dec 2025 14:19:54 +0000
Manifest this update:     Sat 06 Dec 2025 14:19:53 +0000
Manifest next update:     Sat 13 Dec 2025 14:19:53 +0000
Files and hashes:         1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: djlOLYAsbL3kAAIIhSVmBzVtCxMN0GRomM/OzY5Fy3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13630 (0x353e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
        Validity
            Not Before: Dec  6 14:19:53 2025 GMT
            Not After : Dec 13 14:19:53 2025 GMT
        Subject: CN=69343b89-e922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:00:13:41:5b:51:9d:50:a0:4c:ac:d6:72:
                    90:42:0a:eb:09:83:f2:a5:9f:13:14:5f:f3:d3:0a:
                    25:4a:5e:17:86:58:59:06:97:7e:08:3c:ed:5b:8a:
                    77:ca:65:a9:b7:ea:51:76:1a:bb:be:46:db:b1:c4:
                    6e:2d:b1:cd:56:d4:f8:17:ab:ea:a5:ab:a7:f2:7c:
                    b3:57:11:5a:11:aa:f5:55:f2:24:9d:48:49:3a:c7:
                    ec:d4:a1:26:eb:4d:b2:ce:30:72:9e:1d:f4:42:bf:
                    eb:95:e8:a0:d1:ef:9e:8f:cf:84:5a:02:d8:4b:40:
                    8f:ce:a2:49:af:3f:a2:46:6c:15:54:40:de:a4:65:
                    95:58:31:4f:97:14:5e:3c:02:95:82:2c:57:89:84:
                    71:36:63:8c:ee:42:53:1c:5e:40:73:21:2d:6c:64:
                    71:f8:ed:19:5d:32:95:f2:37:f3:af:e5:49:aa:32:
                    9f:99:93:5b:0d:a9:a1:21:d9:41:53:e8:40:41:80:
                    25:81:05:62:7d:37:6f:92:ae:01:65:35:52:fa:bc:
                    13:69:98:a0:fe:08:fe:e8:bc:b3:24:2b:77:4f:1b:
                    6c:d8:98:ff:9c:81:7a:3f:55:e6:18:6b:e8:28:51:
                    85:41:8e:1b:5c:73:06:a2:20:fd:be:77:64:02:6d:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D8:81:3C:8B:95:01:A5:F9:35:C1:96:A0:21:52:F3:4F:08:28:DF
            X509v3 Authority Key Identifier:
                keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:c0:fa:e4:5f:20:86:8f:c8:c2:81:f6:bc:13:11:cc:e0:40:
         63:fc:06:73:5f:55:b5:da:59:d6:c2:dd:6a:42:74:60:a6:34:
         29:53:31:b5:76:d4:54:85:7c:4a:ee:83:06:da:cc:76:b6:5a:
         cc:42:16:67:80:a2:52:15:ca:77:20:1b:b0:56:e4:b7:fe:00:
         3a:e2:1b:00:34:5b:26:cc:0b:97:d4:c7:52:e0:90:06:5f:a8:
         77:34:91:90:ba:2d:35:dc:07:50:84:d2:40:ed:82:c0:e7:e3:
         91:9a:35:fd:43:30:d3:3a:d3:85:0f:88:eb:a5:4d:28:5e:15:
         45:e4:56:0c:64:66:0b:e9:6b:a8:e5:0a:d5:82:14:d0:2e:22:
         ea:67:a1:d9:5f:8f:24:91:32:73:2f:97:7e:ba:0a:c0:8b:59:
         63:85:92:a7:02:ca:f9:b3:b0:64:92:c7:3d:dc:f2:a2:ab:85:
         23:b4:44:17:3f:86:9f:24:c5:c5:e4:b0:5d:68:2f:ee:e0:4d:
         3c:39:81:79:06:7e:4f:a1:37:59:76:61:a4:fd:e5:71:5c:b0:
         78:e8:d3:6a:36:c2:4c:6b:50:e1:1a:0c:60:9d:b6:54:ec:94:
         70:90:97:cc:fb:92:f0:7c:c2:49:7a:e3:88:f5:5b:ff:11:24:
         12:91:b8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:42:52 2025 by rpki-client