This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
File:                     F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json)
Hash identifier:          VUcXjadm1s2Dx2BmeUtT6ksxelvHPfJggn/qHP3fZXE=
Subject key identifier:   6B:6C:00:E9:B1:B3:56:02:95:55:A5:7B:C5:1B:CF:B9:C3:94:7A:3B
Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F
Certificate issuer:       /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
Certificate serial:       0FA0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
Manifest number:          0F97
Signing time:             Sat 06 Dec 2025 17:00:31 +0000
Manifest this update:     Sat 06 Dec 2025 17:00:30 +0000
Manifest next update:     Sat 13 Dec 2025 17:00:30 +0000
Files and hashes:         1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: u4ZVqUIx01pCMxUrS0RyJC8fGytu94C08A++OGey7Ys=)
                          2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: qze9TLSC/LlQUaDdTzlKDoE3Bw7Tcrh+S+c1zck+d7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl
                          rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4000 (0xfa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
        Validity
            Not Before: Dec  6 17:00:30 2025 GMT
            Not After : Dec 13 17:00:30 2025 GMT
        Subject: CN=6934612e-2a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:e5:25:94:8a:cd:27:67:25:75:a2:97:98:
                    95:a2:a4:23:74:7f:ea:85:84:33:36:dc:33:59:fb:
                    6b:cc:7d:bf:7a:34:52:b0:03:df:2e:c1:7f:07:dc:
                    a1:c0:31:58:75:79:c8:02:a0:af:7d:d9:6c:80:6a:
                    e6:dd:e6:9c:b4:ed:78:4f:b2:11:cc:1a:85:69:de:
                    ed:a4:63:f5:a6:06:f4:0e:f8:9a:5c:24:c7:4c:7d:
                    75:7f:98:e6:37:10:b1:ec:15:dc:0a:fa:dd:df:2e:
                    20:de:da:dd:47:e9:98:2d:09:2f:bf:0b:15:d5:6e:
                    79:9d:48:0c:8e:70:a3:dc:43:88:36:d9:f7:20:00:
                    10:98:43:30:03:3f:9e:65:d0:3d:db:86:9c:ad:a4:
                    8d:3e:50:ab:70:26:10:b9:34:cc:8a:fa:7f:d5:cc:
                    79:77:5d:93:4e:9e:2a:56:98:4d:85:42:f0:21:05:
                    37:df:a1:f2:40:27:e6:72:77:2c:3e:9c:70:2e:44:
                    76:96:16:c4:f8:93:62:d4:35:99:34:23:10:24:33:
                    31:cc:02:55:fc:99:85:66:66:b6:d6:60:12:dd:45:
                    a8:5e:3a:a3:3f:0a:ab:7d:8f:d1:e5:91:f4:e9:6b:
                    28:4a:96:dc:5b:a0:65:ea:04:a5:12:76:bf:39:02:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6C:00:E9:B1:B3:56:02:95:55:A5:7B:C5:1B:CF:B9:C3:94:7A:3B
            X509v3 Authority Key Identifier:
                keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ee:31:90:77:cc:40:1c:d3:2d:3d:10:58:bd:b9:38:43:6a:
         7b:6f:95:ef:39:b2:4a:c6:05:4b:12:83:9e:25:9d:0b:2d:e1:
         bb:67:d7:32:7a:8d:86:6d:b2:86:ff:f9:36:6b:b9:8d:8a:c7:
         b3:dd:e9:29:fb:bd:50:31:5d:70:da:b7:64:4a:0f:5e:5c:18:
         59:47:8f:c2:43:35:ba:dd:07:74:72:1b:ac:87:65:4c:61:cc:
         f5:5a:e0:b4:fe:ef:ec:76:89:a8:be:f7:ad:fa:b4:26:57:40:
         0b:93:ca:33:03:36:de:15:b6:d7:39:6f:50:79:3a:48:98:e7:
         71:94:ec:ab:9a:52:10:69:3c:09:0b:48:08:05:65:11:eb:36:
         8b:5a:00:a1:93:06:b4:7a:13:a0:e5:b3:58:67:e1:13:4d:67:
         51:8b:07:f0:e2:18:bf:ad:87:d2:f4:1c:c9:4b:ff:4d:92:b1:
         87:d9:bd:b9:3c:4f:74:c1:55:39:e0:5a:12:a9:a2:26:1a:5a:
         7e:20:11:61:93:e9:52:ef:98:dc:e5:7b:4c:ad:ea:d2:70:a4:
         fa:6b:95:d2:56:ea:ff:62:46:b1:24:c6:2d:50:ba:c2:d4:26:
         3e:0a:b2:69:9b:bc:a6:1d:12:4b:67:0f:cf:6e:01:64:e2:6b:
         6c:89:49:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5
Rjc2RkZCMkYwHhcNMjUxMjA2MTcwMDMwWhcNMjUxMjEzMTcwMDMwWjAYMRYwFAYD
VQQDEw02OTM0NjEyZS0yYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1V7lJZSKzSdnJXWil5iVoqQjdH/qhYQzNtwzWftrzH2/ejRSsAPfLsF/B9yh
wDFYdXnIAqCvfdlsgGrm3eactO14T7IRzBqFad7tpGP1pgb0DviaXCTHTH11f5jm
NxCx7BXcCvrd3y4g3trdR+mYLQkvvwsV1W55nUgMjnCj3EOINtn3IAAQmEMwAz+e
ZdA924acraSNPlCrcCYQuTTMivp/1cx5d12TTp4qVphNhULwIQU336HyQCfmcncs
PpxwLkR2lhbE+JNi1DWZNCMQJDMxzAJV/JmFZma21mAS3UWoXjqjPwqrfY/R5ZH0
6WsoSpbcW6Bl6gSlEna/OQKEDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtsAOmx
s1YClVWle8Ubz7nDlHo7MB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw
ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt
eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MjIzMC9BREZBNTU0QzcwODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5
VVVxTHh4bkN1Zy1mZHYteTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBi7jGQd8xAHNMtPRBYvbk4Q2p7b5XvObJKxgVLEoOeJZ0LLeG7Z9cy
eo2GbbKG//k2a7mNisez3ekp+71QMV1w2rdkSg9eXBhZR4/CQzW63Qd0chush2VM
Ycz1WuC0/u/sdomovvet+rQmV0ALk8ozAzbeFbbXOW9QeTpImOdxlOyrmlIQaTwJ
C0gIBWUR6zaLWgChkwa0ehOg5bNYZ+ETTWdRiwfw4hi/rYfS9BzJS/9NkrGH2b25
PE90wVU54FoSqaImGlp+IBFhk+lS75jc5XtMrerScKT6a5XSVur/YkaxJMYtULrC
1CY+CrJpm7ymHRJLZw/PbgFk4mtsiUlh
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:57:43 2025 by rpki-client