This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
File:                     FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json)
Hash identifier:          AZ+p4cjYYRGtGVdtU2OW15KJI+/zT6RMroafBMFOMwc=
Subject key identifier:   32:1F:3E:EF:C4:FC:8D:30:C9:9F:58:1B:A9:8C:2D:CC:5B:92:B5:57
Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6
Certificate issuer:       /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
Manifest number:          0109
Signing time:             Fri 19 Dec 2025 04:08:18 +0000
Manifest this update:     Fri 19 Dec 2025 04:08:18 +0000
Manifest next update:     Fri 26 Dec 2025 04:08:18 +0000
Files and hashes:         1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: rpMpF8NUkSAut/DXspob6+2jcRNSt9V9M7z0KovzDLc=)
                          2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: oxyCeNFM/JV3FlgREEjrGNxGIzoK5Vk5MzO+fwua+7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl
                          rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
        Validity
            Not Before: Dec 19 04:08:18 2025 GMT
            Not After : Dec 26 04:08:18 2025 GMT
        Subject: CN=6944cfb2-e890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b5:d8:bb:dd:2a:4b:f5:55:89:41:1b:81:95:
                    7e:5f:7c:db:9e:23:09:7d:e3:bf:ae:9c:da:09:10:
                    8e:6d:93:a2:cd:a1:10:f2:a4:51:05:62:ab:65:48:
                    cf:82:d8:6a:8d:3c:86:77:94:45:ce:66:cf:09:a5:
                    10:ac:03:de:9a:8c:7d:53:9b:c0:5a:20:e1:47:a7:
                    33:6b:e9:73:fa:cf:7e:2a:a1:c1:4f:f8:b3:7c:de:
                    23:6e:66:cf:f1:aa:4f:db:68:c7:c8:63:67:0a:d9:
                    07:94:e7:8a:a0:5e:75:f2:a5:b6:e2:73:e6:aa:d9:
                    c4:f8:3d:53:4f:b8:1a:90:3f:33:77:cf:4a:6a:c1:
                    9f:c7:ec:63:00:6f:f6:43:3d:6a:e3:5e:bb:24:c0:
                    93:00:2b:e8:fc:c4:fb:6a:9c:32:12:cb:47:12:4b:
                    9e:32:4b:0f:12:57:e9:43:c0:40:07:e6:3e:d4:e6:
                    37:a5:cf:82:04:d4:d3:5a:59:57:21:b7:33:35:72:
                    19:1d:97:0b:46:aa:54:45:74:02:c7:7a:2a:06:33:
                    bf:0c:83:c1:cc:64:6c:d9:2e:93:38:0d:36:f6:a0:
                    34:e2:76:c9:3d:5f:62:78:ea:3c:d1:58:9c:33:31:
                    9c:27:05:fe:1e:53:a3:65:80:7d:7e:f2:0c:70:39:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1F:3E:EF:C4:FC:8D:30:C9:9F:58:1B:A9:8C:2D:CC:5B:92:B5:57
            X509v3 Authority Key Identifier:
                keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d3:6d:45:50:22:a0:6a:31:f1:04:00:34:01:2c:74:63:ae:
         84:30:76:62:6e:6e:30:6c:9c:86:ce:0c:05:c1:73:ab:34:5c:
         ec:72:e5:4c:39:d6:26:e2:d5:79:7b:f6:64:c4:2d:b5:bf:b9:
         19:aa:53:a6:25:a5:d4:80:72:1c:95:ba:1b:b6:a5:ed:cf:83:
         ba:b4:1f:1c:c1:57:b7:3d:08:39:f3:da:9c:a7:ee:ba:ad:0e:
         ee:02:c5:83:9e:ed:0e:13:b8:a7:51:f9:c3:2f:74:9b:f7:a2:
         c0:6a:cf:cf:d8:5b:25:c9:87:9d:b7:8e:fe:72:83:fd:9a:4c:
         ce:3b:82:8e:4f:4d:e5:a0:91:f6:f6:ce:f3:e8:79:3b:af:1d:
         0d:89:6e:3d:cf:d3:35:6f:01:0c:49:a0:1d:96:0f:a4:1b:f8:
         8a:85:42:53:c0:42:55:57:ea:ef:8e:12:a6:e5:bb:6a:5e:8c:
         6f:a3:6c:b8:e9:1a:8b:5c:62:39:ca:61:7d:6a:20:dc:a7:19:
         c2:2c:0f:b8:ef:0b:8b:7e:f3:12:4d:35:7b:16:92:f7:98:97:
         a0:78:51:4a:1a:ca:9d:48:b9:e2:c1:92:b1:75:4c:1f:73:68:
         18:a1:38:aa:07:60:96:93:9b:4b:14:a7:57:58:b4:8b:d8:e8:
         4f:f3:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:53:33 2025 by rpki-client