This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File:                     FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier:          FYAVGjUzfAMePh660dqfPo8H0Zwh5u5wtDLahal9hsU=
Subject key identifier:   84:6E:13:26:92:DB:09:0E:F5:CF:0C:D7:25:35:76:B0:71:E9:7F:5B
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer:       /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number:          EF
Signing time:             Tue 23 Dec 2025 04:23:18 +0000
Manifest this update:     Tue 23 Dec 2025 04:23:17 +0000
Manifest next update:     Tue 30 Dec 2025 04:23:17 +0000
Files and hashes:         1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: 3Baetrhq6qMKADYdr9Hiw6Q4IFPSgPX4gq7niJvVdPo=)
                          2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: D/9SKPwUI+9VjDA2s/SYyY7F96WxlOAy4mRC6PjrPZo=)
                          3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: 2fQyEMRkeBroC7JG6dhKWVMOmAu2peytDIRfiN3h3TE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
                          rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
        Validity
            Not Before: Dec 23 04:23:17 2025 GMT
            Not After : Dec 30 04:23:17 2025 GMT
        Subject: CN=694a1935-8321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:e4:1a:16:3d:6d:49:9a:d5:ef:a3:07:84:
                    b8:b1:e3:1e:06:6e:7b:ce:db:2a:8f:ab:1e:64:b3:
                    d4:61:09:30:5e:a7:1a:03:6b:b9:05:e0:24:cb:c1:
                    28:6d:58:a0:06:48:d0:0d:74:98:a7:26:98:96:a7:
                    d4:d4:5f:53:62:14:dc:d1:b5:6e:ec:a1:21:cb:8a:
                    95:fc:cb:34:49:76:28:64:a2:30:22:9e:1e:17:e3:
                    c6:2f:e8:d8:0c:9c:d0:e0:14:ac:8b:67:bc:30:b4:
                    1a:be:9e:a5:24:a5:0e:3d:22:6b:df:6c:cf:50:47:
                    4c:c6:44:96:a6:b0:71:ac:a9:0d:bf:6a:df:f9:ce:
                    5f:6d:f0:99:2a:87:a1:1a:22:09:40:bf:d7:63:6f:
                    5e:32:5d:2f:df:84:bb:c7:d5:03:71:fd:eb:f3:00:
                    b6:7e:8e:db:43:6e:59:1f:b5:f2:3d:b1:e1:96:02:
                    25:66:c6:6a:f9:71:af:3c:5c:20:e4:52:76:5b:3c:
                    d4:4f:09:a3:30:29:95:a8:31:51:e2:87:c0:a5:7e:
                    54:d9:fa:4d:99:45:d9:6a:98:7b:d7:41:04:2d:c9:
                    42:b1:06:c0:6c:e4:21:b3:17:89:c5:55:81:58:59:
                    45:91:78:dc:a5:22:07:76:33:d6:bf:4f:6d:9d:5c:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6E:13:26:92:DB:09:0E:F5:CF:0C:D7:25:35:76:B0:71:E9:7F:5B
            X509v3 Authority Key Identifier:
                keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a3:7c:e0:d6:3e:c6:64:d2:df:ce:cc:11:65:5c:9c:49:22:
         9d:5e:d5:e4:8c:5a:89:71:cd:33:16:7e:8b:e4:9c:14:9e:ec:
         e4:9e:d8:45:ae:f3:de:e1:86:50:0d:5c:52:42:8e:c0:c2:13:
         a0:d3:d1:3e:dc:2e:a1:c0:0d:78:d0:02:d0:97:b1:62:86:84:
         75:8c:a5:d4:8f:7a:e4:41:f1:7d:57:72:37:fc:52:58:1d:71:
         64:74:36:cf:0a:d6:f3:50:f2:d4:f7:bc:07:c1:d9:2a:6f:99:
         f1:33:44:2f:4e:8d:d6:23:93:6a:19:36:8b:6f:67:23:28:c1:
         25:75:8d:0d:d3:be:43:c4:98:55:68:02:69:c8:af:f2:f6:1f:
         54:59:f1:d2:a7:d4:97:b4:0c:7e:2f:ea:7a:9d:cb:8b:ad:93:
         aa:b7:73:15:91:00:1e:f5:fe:73:d8:c7:a2:6d:99:e2:76:df:
         cd:06:8c:1a:0e:a1:1c:74:38:24:85:7c:ed:3e:04:3d:64:92:
         93:7e:1d:d5:cc:6b:b0:09:0d:d7:d3:5d:92:13:13:a5:6c:a5:
         54:2a:c1:eb:32:e0:a0:99:5c:05:b1:01:ec:53:39:70:54:b3:
         c2:68:8b:80:8e:1f:fa:73:0c:66:08:b7:37:07:5f:32:0a:fb:
         47:c2:7d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:06:16 2025 by rpki-client