This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
File:                     fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json)
Hash identifier:          cDf7h9XMQSivYMXKvNaojmnpU211jVB509cyG5nBfZY=
Subject key identifier:   95:08:91:71:E9:19:C9:20:C0:B2:2E:5B:60:17:CC:7F:3F:12:D1:67
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Certificate issuer:       /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial:       03A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
Manifest number:          0398
Signing time:             Sun 28 Dec 2025 23:52:52 +0000
Manifest this update:     Sun 28 Dec 2025 23:52:51 +0000
Manifest next update:     Sun 04 Jan 2026 23:52:51 +0000
Files and hashes:         1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: uh3UtGaf0sV0TiiHp9yGqYHdEr/LJ+Xd3uZx6/VU50Y=)
                          2: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: bivJnwcabrf/iwZuZLc+oQKC0osH7DqM8uD5h0VU2hw=)
                          3: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: Sr1dJPYf4TMlmdyHmkZ3DvPV6/M5+cUFUvIXCjxQ2mk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
                          rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 23:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934 (0x3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
        Validity
            Not Before: Dec 28 23:52:51 2025 GMT
            Not After : Jan  4 23:52:51 2026 GMT
        Subject: CN=6951c2d4-44cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8c:54:4f:34:e4:9f:42:e0:d6:1b:47:71:44:
                    db:b6:ce:b0:2d:22:87:c2:e6:ed:01:05:80:e0:be:
                    1f:31:26:28:29:16:c8:8e:a5:15:1b:57:d7:ca:32:
                    19:48:8c:14:7e:33:65:d2:47:09:04:8d:5e:e9:80:
                    62:e7:3f:bc:f3:30:f2:f8:f1:23:5e:9a:e5:73:8f:
                    5f:06:11:11:77:fa:cb:68:85:df:3a:8d:26:1f:a4:
                    d7:96:af:c5:8f:fa:74:1e:ea:90:a6:55:fa:4e:fd:
                    ce:91:1f:6b:85:34:ff:3a:7f:2e:dc:b7:72:0c:d0:
                    46:61:54:ff:62:0f:35:e7:c1:da:45:61:66:36:ce:
                    ea:96:7f:32:bf:06:a6:cc:8d:78:a9:bc:8a:e5:02:
                    b6:86:82:fb:6b:43:52:6e:0a:51:00:1e:ba:7b:dc:
                    88:54:91:9a:95:10:f2:0b:af:c9:95:b9:38:91:d8:
                    f1:b9:31:95:de:30:79:8f:7f:e5:a4:4d:b5:73:1f:
                    35:f0:82:88:f9:b1:25:4f:df:db:96:69:4f:46:ae:
                    1f:1d:92:71:bd:c3:d7:85:9e:2d:19:92:69:7a:d8:
                    d7:39:ff:4a:41:70:01:c8:d6:06:9c:97:ed:bc:30:
                    3f:5f:b2:fc:e2:eb:ec:77:90:85:b3:21:34:19:cb:
                    f6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:08:91:71:E9:19:C9:20:C0:B2:2E:5B:60:17:CC:7F:3F:12:D1:67
            X509v3 Authority Key Identifier:
                keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6f:5d:5a:ea:52:a2:24:3c:80:78:52:c8:5c:b6:8c:98:d8:
         53:ce:a3:08:3c:e0:40:24:c0:d5:f0:08:4d:3d:9c:95:8f:dc:
         b2:da:82:f7:cc:93:ad:5c:82:73:01:35:2c:f3:2c:98:11:fe:
         a7:71:07:f5:c7:59:56:fb:08:63:50:cd:82:57:27:5e:a3:b4:
         da:0f:0b:8e:b4:3e:2a:a6:ba:56:a9:61:a4:fd:66:31:a7:0c:
         70:1b:90:7b:41:cb:0c:8f:d4:40:d1:eb:2b:65:de:b8:b1:d4:
         84:20:68:b1:a7:47:c3:ae:ea:f6:85:09:20:b5:e0:cd:47:dc:
         59:1f:67:2c:07:e5:ff:34:d0:84:40:a0:50:3a:09:98:2c:2b:
         fd:45:28:0f:07:e0:fc:20:bb:f7:3c:16:b2:ac:10:60:b7:7e:
         a4:93:74:e4:1f:df:d9:23:06:66:c3:39:aa:bb:05:85:a2:f0:
         1b:1c:45:f7:aa:51:25:4a:33:3c:56:d4:46:1a:a8:23:f6:a5:
         d6:71:ad:ff:14:95:90:1d:21:63:b3:cd:50:80:f5:c0:77:73:
         1e:d2:eb:17:b8:14:4d:26:e0:8e:f1:a2:7b:f0:e1:0e:e8:b8:
         60:60:03:67:89:2d:79:0f:93:e3:7a:af:b9:d7:3b:c6:5b:96:
         47:37:27:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 10:34:39 2025 by rpki-client