This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
File:                     FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json)
Hash identifier:          YrS9pu7/em6vLczR2l00kwJpOik55cU7Si8zMCVynY4=
Subject key identifier:   AF:3D:12:0B:50:FE:42:E7:7D:8C:47:1F:5B:69:54:BB:8E:66:16:03
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Certificate issuer:       /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial:       13C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
Manifest number:          1398
Signing time:             Tue 16 Dec 2025 16:52:59 +0000
Manifest this update:     Tue 16 Dec 2025 16:52:58 +0000
Manifest next update:     Tue 23 Dec 2025 16:52:58 +0000
Files and hashes:         1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: mJQwAYxF+YQf3QbibzLX8gtFYWdIEwJaU2zatCQFSxY=)
                          2: 443241A0321B11EA83044473C4F9AE02.roa (hash: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM=)
                          3: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: sd3UhNYbHggo+XcciVWTFZxv/tGVhGFf2hY/GpsuhSs=)
                          4: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: y17aQP9C+LDn4Yph2n6mf2nnVwvpkbeV6pXqgmt1qVQ=)
                          5: 56094384320611EA84C94231C4F9AE02.roa (hash: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
                          rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 16:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5057 (0x13c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
        Validity
            Not Before: Dec 16 16:52:58 2025 GMT
            Not After : Dec 23 16:52:58 2025 GMT
        Subject: CN=69418e6b-2d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:aa:0f:5a:9b:bc:cd:eb:6c:bc:a7:1d:27:
                    7a:8e:f3:4d:e3:7f:a5:60:05:dc:40:68:d6:5c:cb:
                    e1:17:58:6e:64:59:98:83:13:3b:b5:13:25:37:3d:
                    e2:92:67:67:85:f9:a3:4e:dc:4c:80:b4:2d:95:92:
                    35:e2:58:46:73:d0:59:48:92:ec:63:62:e5:03:de:
                    f9:64:f9:f6:35:10:dd:91:56:8e:24:6b:a3:6a:54:
                    5e:6f:3c:39:2d:97:cb:36:aa:4d:e1:01:6b:1c:16:
                    48:f8:21:e2:cf:29:92:9a:4e:02:a1:5d:33:c6:c3:
                    c1:7d:5f:2d:2d:5e:7f:43:20:6f:38:cf:37:68:f9:
                    22:99:27:1f:99:e0:23:4d:cd:77:51:eb:7e:23:02:
                    ea:19:53:8e:58:fd:6e:e6:85:5b:02:10:28:e6:c6:
                    f1:e5:c8:c4:d5:64:77:a6:aa:ce:f2:9c:f8:4f:be:
                    42:6e:86:5e:42:b0:5e:4c:5d:0e:f2:f0:5c:38:2b:
                    b3:39:5b:10:89:8a:a6:81:46:71:39:a8:2b:2a:82:
                    a3:83:dc:a3:aa:00:76:0d:04:f7:18:80:d1:c3:28:
                    41:7a:46:9e:8e:d8:02:9f:e2:c0:14:ca:99:22:de:
                    8b:6b:bf:c6:55:f1:1c:f3:40:fa:01:e5:98:a8:c8:
                    42:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3D:12:0B:50:FE:42:E7:7D:8C:47:1F:5B:69:54:BB:8E:66:16:03
            X509v3 Authority Key Identifier:
                keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ff:9c:04:89:20:5a:05:2e:d0:d7:c6:38:3c:c2:06:34:84:
         c0:59:b3:a9:c6:2b:78:68:aa:62:6f:d3:1a:96:b9:77:d2:09:
         30:06:71:1b:2e:de:77:cc:7b:16:3d:af:47:05:6e:8f:40:5e:
         31:65:a4:b2:db:de:6e:76:d5:90:a8:47:d8:9c:5e:ec:a0:12:
         b1:00:a7:41:63:c5:2a:e3:b1:83:74:20:60:4e:97:1c:ac:69:
         7b:9a:45:d1:c1:45:a8:c5:94:44:f5:7d:f9:13:b5:9b:44:5d:
         b1:3a:37:93:23:bf:d1:9c:d0:40:7a:f3:6b:f0:93:9b:42:70:
         be:0f:fa:9a:a2:b5:d4:9d:b8:0f:e3:6e:6a:64:0a:36:13:a7:
         cf:9c:c1:6c:ff:b0:35:a3:3b:35:67:94:24:32:89:a1:67:63:
         f1:07:c8:3c:c9:59:77:ad:00:dc:dd:7b:92:0c:42:40:3d:04:
         59:49:26:9f:a7:16:cc:34:c2:a6:6b:ef:8a:5d:fa:fb:d8:3d:
         d7:b7:0e:dc:05:22:5f:35:24:0c:3a:fe:df:ed:7c:b0:46:08:
         54:cc:8e:05:88:0e:52:b5:d7:2d:e4:52:ca:4b:33:aa:9c:11:
         e5:e8:81:19:bd:d8:4b:89:2c:bc:74:78:7b:e5:d0:26:0d:d2:
         d8:f8:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:15:05 2025 by rpki-client