This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
File:                     Fz6pPabl71KPpzMJc4hIg92lJ-4.mft (raw, json)
Hash identifier:          ymr911l4HmqFVCbH7GKNEpvTEfHQk7oxyMEd0aAtHEY=
Subject key identifier:   38:F5:34:A6:2F:DC:8C:4B:6E:FA:1E:F0:D2:17:F3:4E:81:68:9B:B0
Authority key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Certificate issuer:       /CN=A9145E09/serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
Manifest number:          90
Signing time:             Wed 31 Dec 2025 05:32:39 +0000
Manifest this update:     Wed 31 Dec 2025 05:32:39 +0000
Manifest next update:     Wed 07 Jan 2026 05:32:39 +0000
Files and hashes:         1: Fz6pPabl71KPpzMJc4hIg92lJ-4.crl (hash: J6XZW8A0mq4Avq0W4bky8VEDJ3mywVew1XYVYEPXgtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 05:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
        Validity
            Not Before: Dec 31 05:32:39 2025 GMT
            Not After : Jan  7 05:32:39 2026 GMT
        Subject: CN=6954b577-36d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0a:e6:a3:57:87:67:e3:9a:6d:66:4f:ad:9f:
                    52:3a:eb:00:36:5e:d5:56:03:5d:47:7a:22:54:0d:
                    68:2f:ec:45:ba:46:d8:72:e6:f3:8e:9f:92:8e:32:
                    6a:86:bd:ef:89:7b:37:9e:73:e4:f4:2b:a9:20:ff:
                    d2:09:2d:28:0f:aa:1a:36:80:07:72:8e:f3:86:aa:
                    f9:29:49:52:1e:f7:36:53:d9:47:25:5c:a7:fb:47:
                    74:93:e9:03:6f:c4:74:a8:76:5f:9e:bf:19:04:2c:
                    32:f4:2d:7d:a6:af:bc:2b:8b:fe:d0:67:50:b7:e2:
                    d8:ea:3a:92:c9:ab:ae:58:87:83:d2:39:7c:34:00:
                    44:bd:12:dc:ce:3b:03:a3:7c:bf:51:cb:c0:56:f5:
                    03:6d:d0:45:fa:d6:f8:e1:85:48:00:6a:e8:87:89:
                    e3:34:65:6b:28:5b:7c:80:36:e9:3e:79:f7:a0:97:
                    9a:9a:67:91:a5:33:ad:bc:01:21:da:90:66:7a:c4:
                    0c:03:85:c8:a7:00:3c:e5:4f:61:d4:52:48:21:d3:
                    44:9f:11:01:6a:23:cf:43:ef:cd:19:fa:1e:f1:2b:
                    c8:a5:9f:9d:d7:47:f6:4d:48:4d:4f:46:96:c0:dc:
                    19:ba:b4:61:f4:6c:75:47:8b:bd:a9:3e:62:d1:83:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F5:34:A6:2F:DC:8C:4B:6E:FA:1E:F0:D2:17:F3:4E:81:68:9B:B0
            X509v3 Authority Key Identifier:
                keyid:17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:64:7c:a1:fa:8a:27:23:71:d7:9a:90:0e:6f:e4:89:38:b6:
         53:61:3e:14:4e:e8:2c:aa:44:a3:6c:98:af:f2:8b:3f:52:ab:
         13:d6:46:a9:f4:65:73:82:89:52:10:7a:4d:89:3b:fe:fe:77:
         19:db:bb:3a:08:8c:ff:41:fa:ec:ab:fa:ff:e7:0a:c4:4b:30:
         fb:87:0b:21:5f:8e:d6:4a:dc:ae:94:65:93:c0:6e:de:e9:09:
         af:b9:37:7c:d0:7f:9d:3e:97:7b:4e:74:92:c8:93:f3:07:d7:
         e1:f0:28:8b:0a:73:db:ac:eb:82:6b:dd:1e:6e:dd:fb:e6:59:
         56:da:a6:c0:8c:d4:bd:ed:91:c7:2a:37:0b:b5:6f:cb:dd:a5:
         94:2c:59:8a:ed:1f:54:7b:77:9d:8c:3e:0e:3e:fa:68:fd:c9:
         1b:f1:f0:18:ac:df:90:e5:fe:bd:ce:98:91:4b:a0:2e:42:c7:
         c4:ee:f4:4e:39:0d:b8:57:f4:ec:bc:76:44:3c:f3:00:4f:c0:
         f2:24:83:b2:40:70:bf:75:df:8f:b8:7e:18:59:29:0f:04:a1:
         b1:2b:78:2d:57:81:9a:07:7f:30:b2:70:f4:f5:a1:ce:98:d5:
         a0:f5:84:59:77:83:3c:83:a6:77:25:c8:7e:c2:26:a0:dc:5d:
         96:cd:4a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 03:52:13 2026 by rpki-client