This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft
File:                     FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft (raw, json)
Hash identifier:          W9QaKj4N0n80aiXC59oRF7fzfvroyLTtlD8BxOi+cws=
Subject key identifier:   19:D8:CA:48:6C:AD:73:E3:B9:D6:FA:BF:5A:9E:62:74:58:C9:E8:5E
Authority key identifier: 16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3
Certificate issuer:       /CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3
Certificate serial:       0A23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft
Manifest number:          0A1B
Signing time:             Thu 04 Dec 2025 19:03:37 +0000
Manifest this update:     Thu 04 Dec 2025 19:03:37 +0000
Manifest next update:     Thu 11 Dec 2025 19:03:37 +0000
Files and hashes:         1: FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl (hash: 5FONxGlE0K39CH0q4nkWyK6+2c/9ya+Ql+z4oFc+6Oc=)
                          2: 4AEB32A2D2F911EA93B2C659C4F9AE02.roa (hash: TMxL1xAZ65D51is8H5Va3LgyajI14UzGu3dizhDhFWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl
                          rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2595 (0xa23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6E7D, serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3
        Validity
            Not Before: Dec  4 19:03:37 2025 GMT
            Not After : Dec 11 19:03:37 2025 GMT
        Subject: CN=6931db09-c700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:97:c9:1d:83:a0:ef:30:d4:8e:6e:bb:0c:
                    d1:e3:82:c3:ba:50:ff:b7:b0:66:e8:ef:a7:73:0f:
                    59:71:28:39:68:67:30:c7:27:8c:a6:8f:30:f3:1c:
                    cc:f4:e1:4e:d1:ce:8e:54:e1:b3:fc:94:08:84:94:
                    0f:c0:ac:e6:3b:96:5b:38:f1:b5:1e:ee:1a:62:9a:
                    ad:24:97:4f:f1:b2:6e:ed:33:46:31:43:ba:c2:92:
                    29:24:be:92:e5:0c:65:05:71:69:e3:c9:5d:c6:a6:
                    64:dd:fb:54:cb:d0:6c:fa:3e:91:55:14:03:5f:e9:
                    2b:5b:29:15:37:69:f9:61:da:db:c0:6f:76:2a:ec:
                    c1:ac:a4:44:51:29:dd:76:53:5c:8d:ba:50:6f:28:
                    55:33:cb:6d:32:6f:a7:a1:bb:22:22:ba:2a:28:37:
                    92:bf:93:e2:f9:7a:c2:12:d6:17:4b:dd:33:f5:9c:
                    4e:25:bf:b9:57:46:69:9a:84:7c:7b:11:67:4b:24:
                    0d:e9:5a:b2:37:12:c6:01:46:1a:f0:e6:a4:f2:3c:
                    5c:09:72:7a:55:38:b8:84:8b:cc:d6:f4:0e:f9:92:
                    f2:3d:9b:b4:2e:ff:fb:29:33:22:5d:22:60:6a:f0:
                    96:7b:aa:cd:02:cc:e7:70:62:f9:cf:ca:45:f1:f1:
                    44:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D8:CA:48:6C:AD:73:E3:B9:D6:FA:BF:5A:9E:62:74:58:C9:E8:5E
            X509v3 Authority Key Identifier:
                keyid:16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ac:4c:b4:4f:24:6f:d2:66:0a:a0:bd:48:e9:c8:e4:ee:9b:
         15:24:0c:0e:47:c9:00:a7:ed:82:f3:42:32:62:ad:b1:fb:a6:
         30:3b:0d:8b:5e:c7:7a:4e:06:06:1f:44:7e:b2:82:bf:2c:63:
         6f:d5:1d:de:d1:a4:b4:a8:e6:6f:d1:c5:76:05:09:a5:66:01:
         a3:df:c1:84:ab:1f:ae:f9:9e:ab:8c:7e:74:ea:10:ca:3b:01:
         c0:6d:fd:22:85:18:c6:2d:24:82:16:a1:97:cf:1a:1b:2a:65:
         f6:9d:c7:ab:cb:94:97:09:91:9c:aa:30:73:19:2b:3c:e5:77:
         7c:cc:db:59:a8:70:26:fa:64:48:01:dd:0b:cc:a9:e1:14:f8:
         37:e7:c6:b3:c6:09:a5:15:05:77:87:d8:d7:64:ad:1e:12:2c:
         76:5d:3a:20:34:d5:77:7a:ee:c6:dd:6d:0d:8d:ea:10:96:36:
         57:02:e8:00:33:32:69:39:72:a8:4c:c9:df:50:a8:ae:cd:96:
         fe:09:1f:c6:d8:49:86:e0:5c:e9:38:44:80:cc:7f:f0:a9:96:
         d2:bd:a2:30:6b:5c:bc:cb:b1:e1:43:28:c0:51:32:0c:15:f9:
         f8:8e:71:2b:ea:e7:05:04:59:22:aa:1d:11:aa:e0:bb:17:3d:
         8e:6e:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:42:02 2025 by rpki-client