This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
File:                     feYHxGFdegH73UqGrVRZQBp1mSE.mft (raw, json)
Hash identifier:          KJn5NFtxzGvLUU6e86YcsDzLFfJHj9SPFZB5OTYd7I4=
Subject key identifier:   B8:10:15:BE:6D:B9:EF:11:5C:68:A9:82:E0:8A:F8:D9:B0:02:D7:19
Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
Certificate issuer:       /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
Manifest number:          0155
Signing time:             Wed 31 Dec 2025 00:06:11 +0000
Manifest this update:     Wed 31 Dec 2025 00:06:11 +0000
Manifest next update:     Wed 07 Jan 2026 00:06:11 +0000
Files and hashes:         1: feYHxGFdegH73UqGrVRZQBp1mSE.crl (hash: q7nqsATLUNgVfYYxgLwRJ9bQVVN7nPV4VgQ1XlQzeec=)
                          2: B374CCF4764F11EFA343104DC4F9AE02.roa (hash: D8epG3RbH6PIZsRmwRm9X6xHLsgomayBZPYyoKFX7xI=)
                          3: DF1CE5761E4811EF83D08212C4F9AE02.roa (hash: /hckAqwo1+lWDkJCZw3Kbnzd3MmtHS//7geQDM2KeAo=)
                          4: 681098C2CDA911EF89DEEE2CC4F9AE02.roa (hash: tVoqqiLOyxPllbxtoURxBqeqQkGic1F20vbAS9lt0XU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 00:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
        Validity
            Not Before: Dec 31 00:06:11 2025 GMT
            Not After : Jan  7 00:06:11 2026 GMT
        Subject: CN=695468f3-adbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:a6:25:7d:88:3e:f5:10:db:c5:c8:83:ce:
                    81:ba:b5:0a:fc:8e:ca:60:ca:38:9b:27:7e:65:2c:
                    f8:e8:da:a6:08:17:f2:66:f6:47:37:2a:4b:85:44:
                    1a:b4:6f:4f:e7:dc:b6:3d:37:73:d4:c0:f6:62:2c:
                    4f:15:cc:40:d7:ed:ab:ce:46:88:6c:cf:f6:8d:cb:
                    17:30:ad:39:b8:4b:c8:a2:f3:9c:9e:d2:f6:d9:52:
                    af:3c:4a:3a:33:42:cd:0b:ad:d0:61:30:4e:1d:9c:
                    9c:b9:37:c2:f5:b4:3b:32:a8:8a:d3:f9:ac:06:e9:
                    da:d9:b2:83:e3:89:be:a7:6b:d2:39:f0:18:a0:3c:
                    a2:9c:10:f5:9b:02:b3:d6:fd:d8:e6:7f:42:99:c4:
                    46:97:43:be:ae:b2:6d:c1:35:2a:f2:ca:d2:51:82:
                    0d:64:3c:dd:21:b0:33:8c:c1:43:a9:73:99:11:89:
                    aa:63:22:3a:48:d2:d1:aa:33:86:be:99:93:8f:25:
                    4d:5c:d1:0f:ee:0d:39:d0:1d:18:b1:d6:11:45:e7:
                    75:61:14:b1:e9:57:3a:55:86:81:0c:74:8f:b1:a7:
                    df:62:cd:42:26:19:eb:37:72:4e:50:46:22:90:72:
                    c6:88:2f:49:c5:30:c5:46:3b:92:24:8b:a8:5b:cb:
                    a5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:10:15:BE:6D:B9:EF:11:5C:68:A9:82:E0:8A:F8:D9:B0:02:D7:19
            X509v3 Authority Key Identifier:
                keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:18:b4:c7:1c:4f:dd:6e:de:09:9d:5c:b8:79:7b:f5:0d:ba:
         3f:9d:03:e4:9c:57:ce:b1:40:1a:f9:70:55:2d:fe:aa:8a:e7:
         bd:47:01:0b:db:55:68:dd:0b:9c:75:5a:bc:56:7d:77:15:6f:
         2d:42:a2:30:bb:00:5d:3d:cf:73:84:a4:31:b0:f4:97:49:1f:
         f3:74:06:dc:41:08:37:dd:be:64:0d:c2:a2:7f:b9:56:90:3e:
         c1:2a:03:d5:4c:c7:50:47:24:17:9b:8c:e7:81:27:e6:68:8f:
         da:47:e3:06:1e:0c:4a:cb:5c:87:ab:0b:ba:86:30:34:de:09:
         00:d3:9b:4b:18:04:53:74:b9:5f:4c:31:d3:0c:fd:41:dc:a2:
         22:14:59:03:b8:3e:de:3c:64:77:ce:68:7b:31:74:e2:7f:32:
         2f:ee:da:af:fb:6e:ae:d3:81:e9:b6:fe:84:a1:7a:ab:d8:7d:
         4b:b8:93:ba:2d:bc:42:8a:10:49:13:1c:eb:42:69:e9:6e:b2:
         f4:1d:e9:c0:9f:c1:7c:5f:3d:5a:c9:bf:72:39:68:ee:74:e7:
         56:47:bd:cb:94:f4:2f:4e:e8:5c:27:53:a7:68:99:b0:11:28:
         5b:09:86:9a:de:5e:1e:81:2b:5f:31:a7:a6:81:17:9a:56:8f:
         39:d4:ac:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 21:46:39 2025 by rpki-client