This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
File:                     FSze4Zs7fRcbTKrQNbUymFTTbcI.mft (raw, json)
Hash identifier:          1BtvpIQHln/ckgNCkPSFiIP9DlN7R2LjEzjLVykANyc=
Subject key identifier:   2C:B3:C3:4F:BF:E2:8B:52:DA:9E:88:AA:97:15:ED:2C:AA:83:8C:2A
Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2
Certificate issuer:       /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
Certificate serial:       044F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
Manifest number:          0446
Signing time:             Mon 22 Dec 2025 23:19:15 +0000
Manifest this update:     Mon 22 Dec 2025 23:19:15 +0000
Manifest next update:     Mon 29 Dec 2025 23:19:15 +0000
Files and hashes:         1: FSze4Zs7fRcbTKrQNbUymFTTbcI.crl (hash: nEcWKOs53oRVMoGcjgWZ+8WhGbLCmhX4Ti2hTj80uoE=)
                          2: FF9D74D8735F11F093707251C4F9AE02.roa (hash: x+4V7MgRD99pCQ1H4NPILV8k6b/KjY/7SvzSzH6UBOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl
                          rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103 (0x44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627F3, serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
        Validity
            Not Before: Dec 22 23:19:15 2025 GMT
            Not After : Dec 29 23:19:15 2025 GMT
        Subject: CN=6949d1f3-0669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:ab:37:2c:df:52:38:0f:14:6c:4d:fd:fb:
                    a6:d8:ce:63:06:c2:a0:0b:55:45:7e:2d:55:b8:79:
                    fb:8b:52:48:29:df:fd:9a:2d:41:ca:ce:dc:75:58:
                    ef:3b:19:54:96:8c:0b:35:b2:66:d0:0d:66:62:91:
                    a3:ae:75:a5:b6:6a:77:16:a4:be:3c:7e:59:35:28:
                    df:74:12:63:43:74:27:d6:3d:61:c4:56:f0:19:e8:
                    54:7b:2a:e7:ba:89:2b:28:ce:63:98:64:b4:df:fc:
                    a5:05:bf:d9:fa:4a:66:9b:36:9a:86:50:4a:73:94:
                    b1:08:64:95:d3:fa:3c:1e:14:63:dc:e7:0f:bc:07:
                    4b:df:39:9b:bd:36:63:05:c0:0d:22:70:26:17:38:
                    03:8d:b5:a2:6a:61:98:04:14:67:b7:a4:69:ef:03:
                    72:d5:fb:d3:3d:43:6a:c9:4d:b6:9f:86:81:46:cd:
                    ee:17:cb:18:95:93:d8:fa:4e:8e:f0:43:cb:51:23:
                    dc:e7:1b:27:df:43:68:99:fb:19:c8:58:76:63:03:
                    44:a9:5d:21:1e:17:67:68:c0:47:40:15:d2:07:58:
                    44:33:43:32:65:70:f9:0c:78:1b:b5:05:70:21:ab:
                    62:2f:4f:f1:b9:91:23:84:17:6c:a5:1a:a4:59:84:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B3:C3:4F:BF:E2:8B:52:DA:9E:88:AA:97:15:ED:2C:AA:83:8C:2A
            X509v3 Authority Key Identifier:
                keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5b:ad:7c:85:1f:63:53:50:da:dd:1c:4b:67:02:96:f8:ab:
         ec:30:5c:7f:94:49:2e:71:0f:db:20:c9:75:a4:a1:ff:94:2b:
         b9:dc:40:66:ce:e3:5d:d2:96:e7:c4:ac:c6:2f:a1:52:45:7c:
         72:a1:4e:9c:47:7c:20:c4:7c:ea:43:65:2e:40:1a:71:b9:39:
         44:84:4c:0c:78:ac:79:d5:13:a2:b1:7e:4d:bd:91:00:e2:33:
         c9:7f:bb:b6:f2:07:80:94:de:15:0f:74:a2:f2:81:87:e8:30:
         18:6c:17:c8:51:9d:f6:4d:53:c3:8c:ea:07:de:e7:35:b8:32:
         c3:24:76:10:d7:81:c2:f2:16:4c:5c:e0:55:d6:de:98:2a:2f:
         0d:79:31:96:41:47:ec:2c:de:31:d8:fd:ef:7b:a5:1d:a1:db:
         7a:82:6a:f2:25:aa:17:6f:31:a2:e8:d2:fc:d8:d9:2f:3a:ad:
         e5:26:6f:0d:50:b0:4c:cc:22:db:86:c2:7f:e9:88:04:07:c9:
         39:0b:94:56:bf:31:1d:6e:8d:a4:16:83:c5:39:9a:a3:a9:ba:
         3c:0c:42:cb:c9:02:2e:69:9a:77:8c:7a:a0:a3:ce:5a:ee:a2:
         1f:f1:ab:59:36:48:e8:c7:47:8d:b3:65:47:6b:4b:9a:be:7a:
         99:21:c1:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI3RjMxMTAvBgNVBAUTKDE1MkNERUUxOUIzQjdEMTcxQjRDQUFEMDM1QjUzMjk4
NTREMzZEQzIwHhcNMjUxMjIyMjMxOTE1WhcNMjUxMjI5MjMxOTE1WjAYMRYwFAYD
VQQDDA02OTQ5ZDFmMy0wNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw9KrNyzfUjgPFGxN/fum2M5jBsKgC1VFfi1VuHn7i1JIKd/9mi1Bys7cdVjv
OxlUlowLNbJm0A1mYpGjrnWltmp3FqS+PH5ZNSjfdBJjQ3Qn1j1hxFbwGehUeyrn
uokrKM5jmGS03/ylBb/Z+kpmmzaahlBKc5SxCGSV0/o8HhRj3OcPvAdL3zmbvTZj
BcANInAmFzgDjbWiamGYBBRnt6Rp7wNy1fvTPUNqyU22n4aBRs3uF8sYlZPY+k6O
8EPLUSPc5xsn30NomfsZyFh2YwNEqV0hHhdnaMBHQBXSB1hEM0MyZXD5DHgbtQVw
IatiL0/xuZEjhBdspRqkWYTM/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyzw0+/
4otS2p6IqpcV7Syqg4wqMB8GA1UdIwQYMBaAFBUs3uGbO30XG0yq0DW1MphU023C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdGMy83NzlGNkU5Mjgz
RjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZSY2JUS3JRTmJVeW1GVFRi
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZTemU0WnM3ZlJjYlRLclFOYlV5bUZUVGJjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjdGMy83NzlGNkU5MjgzRjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZS
Y2JUS3JRTmJVeW1GVFRiY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGW618hR9jU1Da3RxLZwKW+KvsMFx/lEkucQ/bIMl1pKH/lCu53EBm
zuNd0pbnxKzGL6FSRXxyoU6cR3wgxHzqQ2UuQBpxuTlEhEwMeKx51ROisX5NvZEA
4jPJf7u28geAlN4VD3Si8oGH6DAYbBfIUZ32TVPDjOoH3uc1uDLDJHYQ14HC8hZM
XOBV1t6YKi8NeTGWQUfsLN4x2P3ve6Udodt6gmryJaoXbzGi6NL82NkvOq3lJm8N
ULBMzCLbhsJ/6YgEB8k5C5RWvzEdbo2kFoPFOZqjqbo8DELLyQIuaZp3jHqgo85a
7qIf8atZNkjox0eNs2VHa0uavnqZIcHx
-----END CERTIFICATE-----
Generated at Wed Dec 24 10:30:19 2025 by rpki-client