This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
File:                     Fey-uFtpPxJYqQNmevAsYn9prck.mft (raw, json)
Hash identifier:          OD9eokMFwhG8inKKay/xZV+uhxwkJmBYA+O//6NN+9A=
Subject key identifier:   79:0C:F8:7E:59:64:52:BF:D7:21:81:28:50:9D:79:4B:08:83:7B:75
Authority key identifier: 15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9
Certificate issuer:       /CN=A9170F5D/serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
Certificate serial:       0440
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
Manifest number:          0434
Signing time:             Thu 18 Dec 2025 23:38:35 +0000
Manifest this update:     Thu 18 Dec 2025 23:38:34 +0000
Manifest next update:     Thu 25 Dec 2025 23:38:34 +0000
Files and hashes:         1: Fey-uFtpPxJYqQNmevAsYn9prck.crl (hash: 9OYnqRli2aDp/lOyknh4CHFFO4Gc+W2aOblB/9GsOeg=)
                          2: 2839F45288C211ECBEA38C0BC4F9AE02.roa (hash: UBb2Bwu9CWJzw7Q0GrMqv9wsr+f8RiKeX0Zws7JMDOw=)
                          3: 2664BB64A4FE11ECBAF38E5BC4F9AE02.roa (hash: bwN1YTD/nT7yInvxHKJaYaTiVWgmXcRdEsYC7eWJCTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl
                          rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F5D, serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
        Validity
            Not Before: Dec 18 23:38:34 2025 GMT
            Not After : Dec 25 23:38:34 2025 GMT
        Subject: CN=6944907b-77da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:ba:b9:58:e9:a3:72:39:c2:42:70:d6:9e:
                    d7:6b:c3:79:5b:e3:f4:a0:6c:3d:bd:82:68:3d:88:
                    66:eb:2c:96:ad:08:61:48:44:16:36:54:a0:57:d8:
                    78:77:60:f0:c0:12:d4:72:21:fa:bd:c9:72:85:9d:
                    64:1c:22:38:28:e7:57:eb:67:f8:4a:46:7e:76:03:
                    ba:2f:96:b6:0f:8b:b1:4f:ca:87:ae:5b:03:86:a2:
                    21:12:10:62:10:08:fb:fb:cf:6c:b9:03:19:17:73:
                    7f:51:2a:29:fa:d8:31:3a:3d:52:ee:ce:18:a9:1e:
                    3d:42:58:62:82:78:72:73:9d:63:f2:e4:16:14:3b:
                    7c:1c:72:73:d9:3d:4c:b8:01:4e:7a:38:06:1e:2c:
                    a4:0f:8d:65:e2:63:cb:f8:ad:93:29:be:58:8d:48:
                    1f:32:07:3d:f9:42:d7:30:05:fd:3a:c8:b4:14:c9:
                    27:11:d7:59:1b:b4:b1:07:bf:c5:52:e3:54:9d:65:
                    f5:3a:e0:d0:81:52:04:bb:4b:d1:21:7b:2c:34:a7:
                    27:1f:f4:c3:30:25:6e:bd:77:b4:32:5a:83:b4:16:
                    89:6d:5a:8e:02:4d:a5:fe:47:89:ce:b6:79:36:83:
                    67:2a:63:69:d8:0e:1f:d5:af:da:7a:9e:9d:3d:46:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0C:F8:7E:59:64:52:BF:D7:21:81:28:50:9D:79:4B:08:83:7B:75
            X509v3 Authority Key Identifier:
                keyid:15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:a2:7a:99:ae:3b:77:d9:bd:ca:ae:16:6e:49:53:b8:36:de:
         6f:cd:1d:ea:c0:3a:59:5b:cc:f0:d7:31:96:26:9c:60:13:a1:
         bd:5c:c3:0c:82:0d:6e:75:fa:c4:3d:df:b2:51:7e:6a:41:da:
         78:00:05:04:94:9d:58:22:59:06:ea:00:f8:2d:37:91:9c:cd:
         54:ab:0e:1b:65:2b:58:cd:15:83:8a:c5:c8:41:0a:ea:2d:28:
         cd:63:b8:37:00:02:09:94:01:46:63:f2:9a:2c:d1:40:e2:4a:
         80:2b:10:4c:ac:55:50:92:96:e6:c8:e6:df:2b:5c:d2:4a:f6:
         c1:70:6e:3d:c3:d9:94:80:3f:b4:6d:50:29:87:82:b3:6e:6d:
         6d:bd:d8:d8:3d:23:b9:87:10:c3:f1:e8:a1:d3:94:14:5c:4b:
         6b:65:2e:67:b1:5f:55:52:a4:e2:e1:6c:ca:87:1e:d7:c5:b6:
         71:33:1c:cf:55:e9:31:29:80:ed:fd:9b:11:d9:15:95:a7:45:
         da:f0:f5:0c:e9:a6:03:8f:04:44:c4:fa:32:76:37:4e:8a:70:
         78:ea:79:0c:3e:71:49:eb:be:de:9f:c4:f7:a8:af:91:c8:26:
         f6:40:9f:28:bc:e2:86:df:ec:ea:6d:a5:67:ff:69:55:02:cb:
         8c:a1:71:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:03 2025 by rpki-client